Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
File:                     A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer (raw, json)
Hash identifier:          ktkqjwaL5MbMNbJfcUnHIc8b15i0nFarT2NxjA8SjIw=
Subject key identifier:   A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BA858A191F1A57ECE8F1C6DEC97D8C00D0C53FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 01:03:36 +0000
Certificate not after:    Thu 07 Nov 2024 01:08:36 +0000
Subordinate resources:    AS: 266539
                          IP: 45.65.220.0/22
                          IP: 2804:3d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a8:58:a1:91:f1:a5:7e:ce:8f:1c:6d:ec:97:d8:c0:0d:0c:53:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 01:03:36 2023 GMT
            Not After : Nov  7 01:08:36 2024 GMT
        Subject: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:dd:09:77:bd:e0:59:27:7b:4c:f3:f3:07:
                    51:cc:e5:a1:bf:d7:76:8d:b1:53:02:18:f8:4e:f3:
                    28:67:d2:d9:19:d0:b8:54:30:ca:b6:27:39:dc:1e:
                    2c:35:18:65:d8:98:2a:35:2b:c6:e3:c4:5e:37:20:
                    0c:e5:fb:27:b7:65:6f:5f:8b:d6:27:db:8f:a6:92:
                    f3:97:62:28:58:d4:03:e6:b0:a8:b8:b8:1f:75:c9:
                    b6:8a:90:eb:40:55:62:97:cd:e4:51:50:61:d3:32:
                    ad:5f:a1:ea:6c:5f:6c:2b:b2:24:1b:11:bf:04:51:
                    b3:e6:9d:6e:a6:22:a1:c8:2b:f4:bc:16:7e:8a:a8:
                    25:1a:37:07:4f:13:4f:02:73:dd:41:8a:e3:fb:19:
                    3c:e0:4e:00:ae:41:27:f5:be:aa:ec:e2:fa:7f:41:
                    4c:84:e0:1d:e7:b0:76:d8:f8:e1:3f:cf:b4:66:a1:
                    b6:8a:fa:3e:c5:38:20:7e:17:10:bc:9c:e3:1c:57:
                    5b:48:52:3d:c1:c2:9a:2b:64:a2:f5:c7:ca:be:75:
                    d4:f1:58:5d:6c:47:64:08:e5:19:88:51:83:e0:85:
                    03:15:bc:54:08:42:e9:45:b3:1c:8a:3d:99:07:f3:
                    fe:5a:33:f8:78:4f:60:87:76:48:02:5f:cd:fb:18:
                    67:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22
                IPv6:
                  2804:3d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266539

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:7d:77:84:90:3a:46:db:78:5d:68:c6:16:5d:0b:c1:08:
         56:8a:8b:db:f6:a1:84:ee:b3:70:7e:bf:32:26:e5:4f:53:83:
         34:8a:08:1f:e2:3f:25:c8:72:29:f3:86:27:2c:6c:85:cb:3b:
         c5:68:05:d3:59:89:5f:f0:bc:4e:c3:b8:87:56:0e:5a:49:f2:
         75:dd:2e:82:8b:29:d7:1f:58:d7:8a:57:72:fd:9d:4b:f7:e8:
         c3:51:1c:c5:03:25:dc:1b:19:80:bd:d0:9d:ac:a8:ba:84:60:
         80:df:0a:50:63:b7:98:e9:38:0b:9f:8f:58:82:59:28:d9:50:
         86:ad:34:a9:3f:86:5b:16:30:35:6f:95:f9:5e:03:13:64:a6:
         24:4a:87:d3:e1:c3:fd:fb:36:0e:25:b2:2d:79:55:74:bb:13:
         55:bc:59:8c:b9:e2:05:23:7e:9e:14:85:1e:21:fa:81:6a:33:
         6a:9b:0b:fa:76:ee:e0:74:bf:e8:38:bd:68:c6:cd:19:7d:65:
         c4:8a:67:49:7f:02:9b:cf:3f:31:05:77:b2:0f:09:88:65:ed:
         b6:10:45:46:74:c3:38:bb:3b:3e:f9:c9:59:6a:d0:f6:ac:4e:
         b8:1b:a7:98:ea:9d:b5:fe:08:84:bc:c4:ce:c3:19:57:20:c2:
         1f:f5:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----