Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.cer
File:                     A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.cer (raw, json)
Hash identifier:          vv9Hiuh1NDLJ0MyIra6h7iZK38/9uUYW+uAw5RUNNrk=
Subject key identifier:   A6:EA:37:C3:65:C4:18:DC:6F:E3:D0:BA:BE:A0:7E:81:8A:AD:40:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69EBEC726A5251A3B773AC012B9E723C61558988
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 14:33:19 +0000
Certificate not after:    Sat 08 Feb 2025 14:38:19 +0000
Subordinate resources:    AS: 263369
                          IP: 191.37.176.0/21
                          IP: 2804:150c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:eb:ec:72:6a:52:51:a3:b7:73:ac:01:2b:9e:72:3c:61:55:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 14:33:19 2024 GMT
            Not After : Feb  8 14:38:19 2025 GMT
        Subject: CN=A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:54:97:83:e6:56:05:b0:b7:f2:cb:3a:b2:
                    b8:2d:b0:c4:63:5a:92:a8:55:a0:70:b3:e2:70:2f:
                    4b:dc:02:c0:3e:29:e5:4d:a7:5b:88:34:9d:a7:47:
                    e8:0c:b6:4e:23:cd:c1:26:fc:5b:7e:ac:78:34:56:
                    c1:6a:06:55:9a:2e:74:c8:43:a1:be:c0:a0:65:8a:
                    a5:d4:5a:35:29:83:19:6d:97:b9:bd:76:3a:01:64:
                    63:1b:cc:3c:48:61:7b:f7:e6:68:a1:1e:7a:c0:3d:
                    ec:96:bc:86:57:68:a8:25:5c:04:04:4c:c2:73:d4:
                    5e:4d:8b:19:e4:80:4f:03:fe:91:39:5e:fc:6a:28:
                    22:46:42:ba:d1:24:f6:a8:3e:28:ed:ab:17:34:9d:
                    aa:fe:cf:80:ef:94:8e:98:76:52:4a:c4:38:20:32:
                    1b:96:58:10:91:42:e2:f2:3c:37:d2:d2:05:d6:7a:
                    3b:07:ec:07:b1:f5:1a:3f:43:6e:99:f4:bc:68:3e:
                    f2:e9:f2:91:aa:40:de:40:c3:67:c5:42:1f:ea:1a:
                    a0:b2:18:e0:4a:e0:ee:54:20:23:d1:59:0a:eb:95:
                    be:58:d3:00:16:05:af:e3:2f:b7:e7:49:85:c8:5a:
                    b5:79:5e:e8:c5:3c:28:ed:5d:c5:5d:cc:cc:39:b4:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:EA:37:C3:65:C4:18:DC:6F:E3:D0:BA:BE:A0:7E:81:8A:AD:40:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/A6EA37C365C418DC6FE3D0BABEA07E818AAD40F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.176.0/21
                IPv6:
                  2804:150c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263369

    Signature Algorithm: sha256WithRSAEncryption
         49:85:ae:58:8b:46:f5:8b:9f:f5:6a:b2:11:c3:38:7a:ce:a0:
         3b:ec:6c:f4:1f:0c:61:1a:05:26:6d:c5:de:18:82:f8:7f:bf:
         fa:e7:8a:cf:c0:b8:0c:74:da:b6:f2:f8:ae:f0:26:4b:a8:ec:
         ce:de:47:3c:8e:01:6e:e2:fa:31:a4:73:f4:e5:da:0a:ac:21:
         1f:19:9c:d1:d8:39:ea:0e:97:32:5b:40:f9:24:f5:20:d9:4d:
         28:11:f1:b9:14:08:f9:3b:75:29:2b:63:7c:7d:e1:84:37:dd:
         78:e0:d8:2c:40:9d:2f:d8:0e:a1:f2:83:be:53:36:e2:74:5b:
         21:d0:51:11:c1:4c:0e:cc:54:3c:01:e6:e0:84:0a:76:6d:63:
         91:ff:e6:0e:e3:b4:c6:e8:03:bc:66:64:61:cc:62:b9:e2:d8:
         2d:d6:39:70:61:88:e6:73:0e:10:97:4a:bf:48:8f:1d:9a:e5:
         52:b0:90:32:9f:a9:99:f3:22:3f:b0:1f:7f:6e:92:e3:f5:9f:
         5b:d0:7b:ed:35:c4:88:de:e9:b1:ee:a4:2c:69:37:ce:da:bc:
         fe:75:a9:7a:8e:2d:bf:82:33:b7:5c:4a:8d:55:ba:28:7d:02:
         dd:0b:69:d9:30:34:6e:43:17:04:bd:6c:50:a2:62:ba:89:ed:
         b9:ef:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----