Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A460D6EC9284548B5BEE4E7828FAD27CB57753BF.cer
File:                     A460D6EC9284548B5BEE4E7828FAD27CB57753BF.cer (raw, json)
Hash identifier:          8PfeLALrcSZq98f/622mvLY37CF7b6o2ULwBhIyRvGY=
Subject key identifier:   A4:60:D6:EC:92:84:54:8B:5B:EE:4E:78:28:FA:D2:7C:B5:77:53:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1568E6C655BEE72EC2316B50165BA57D5BF4BB6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/0/A460D6EC9284548B5BEE4E7828FAD27CB57753BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Mar 2024 15:39:10 +0000
Certificate not after:    Sat 29 Mar 2025 15:44:10 +0000
Subordinate resources:    AS: 262898
                          IP: 177.23.176.0/21
                          IP: 2804:6300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:e6:c6:55:be:e7:2e:c2:31:6b:50:16:5b:a5:7d:5b:f4:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 15:39:10 2024 GMT
            Not After : Mar 29 15:44:10 2025 GMT
        Subject: CN=A460D6EC9284548B5BEE4E7828FAD27CB57753BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:50:91:d4:8c:77:ab:4a:da:41:03:0f:2b:
                    28:55:57:8c:70:ee:01:b2:a7:a4:69:90:e6:e8:59:
                    9d:b2:e9:5c:88:6e:16:9e:ea:ba:e9:3f:5f:77:f7:
                    f5:4e:bc:5e:74:ed:4d:87:05:c2:6e:67:d8:49:f9:
                    f6:cf:8b:97:17:24:f5:b1:5b:40:fb:d2:f4:b9:28:
                    5f:de:93:41:b0:1f:91:8c:c4:a7:ea:ec:b9:56:6d:
                    50:b2:cf:b9:59:74:47:b4:73:d2:4b:6f:ed:80:fd:
                    61:c4:14:02:cb:3c:37:23:fd:b0:38:8b:0a:72:6c:
                    0d:30:65:ae:ce:74:a4:83:6a:8c:e2:d8:eb:d3:1e:
                    4e:d6:a5:28:44:d3:03:6f:ee:59:87:54:ee:2f:4d:
                    a0:02:33:2e:12:f0:d0:59:b5:b2:75:87:e0:63:b4:
                    3e:73:ee:d3:58:04:aa:81:b8:07:d7:95:42:c6:ce:
                    65:15:47:4d:72:39:15:8b:2f:b4:ba:26:49:79:67:
                    06:fe:e6:16:03:03:91:ad:89:ec:72:df:3d:13:bb:
                    d4:99:85:cf:4c:5e:fc:1f:d2:c5:9b:22:9e:d3:cd:
                    f5:b5:b0:ce:12:99:21:79:74:ab:21:75:4b:d9:f3:
                    71:e1:5a:1a:01:a6:52:57:0d:81:7e:ad:fb:84:5e:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:60:D6:EC:92:84:54:8B:5B:EE:4E:78:28:FA:D2:7C:B5:77:53:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nNZbA2YbBn1p39HAhdNUAxW9byqL7qVTnVP8sxH4C29/0/A460D6EC9284548B5BEE4E7828FAD27CB57753BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.176.0/21
                IPv6:
                  2804:6300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262898

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:c8:83:3c:ee:e7:28:e0:b5:7d:9d:37:c8:c0:8c:14:f4:
         d3:f8:b3:a4:b2:82:e9:3a:26:87:a1:20:c3:f5:ca:f3:76:14:
         7f:1f:2b:81:90:0e:c7:bb:32:11:1a:d4:c1:76:9b:e1:9d:a5:
         4a:a9:9b:06:12:87:a0:1b:b6:4f:76:12:29:49:e3:00:eb:0e:
         2b:39:42:68:ce:93:16:08:cc:24:7e:1d:3c:77:58:42:01:a6:
         9f:d1:03:3c:38:03:fe:b5:98:28:45:a7:5e:25:10:28:a8:fa:
         c9:c2:66:56:98:17:c2:9e:66:26:49:f2:02:ca:65:b7:84:af:
         c7:4a:6c:f1:8e:b8:2b:ec:ec:28:90:50:7b:22:43:8f:5f:d9:
         f0:d9:fa:0e:22:96:96:8a:eb:db:38:0f:96:9b:e7:ca:cd:a6:
         e9:35:76:92:4c:c1:82:26:db:de:34:ee:84:45:24:34:bd:b6:
         35:63:56:30:0f:34:ae:29:24:68:d6:f0:27:71:c1:ce:a8:b7:
         f0:a1:b7:ca:42:37:aa:10:17:46:c7:d7:f9:7d:6c:e3:9a:f2:
         38:60:18:f8:f3:9a:46:a9:aa:f6:a2:16:74:e7:d6:90:a4:bc:
         9c:36:e1:81:04:3d:cd:42:4b:74:0c:33:10:d0:82:71:a9:35:
         96:a2:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----