Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.cer
File:                     A731B275F45E256F64580D91E6FC778E5C57FBF8.cer (raw, json)
Hash identifier:          rbIUc+ArR/k/2bI0Bbs3mxrFmdEvZFFQ9ix+ZNCrxZk=
Subject key identifier:   A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5202FD9664C91F7650824EF0C2F16FC4C98FE389
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 14:50:18 +0000
Certificate not after:    Thu 13 Feb 2025 14:55:18 +0000
Subordinate resources:    AS: 270877
                          IP: 138.185.88.0/22
                          IP: 2804:72d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:fd:96:64:c9:1f:76:50:82:4e:f0:c2:f1:6f:c4:c9:8f:e3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 14:50:18 2024 GMT
            Not After : Feb 13 14:55:18 2025 GMT
        Subject: CN=A731B275F45E256F64580D91E6FC778E5C57FBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:5a:5b:9d:66:40:2d:5c:17:93:f9:b2:0e:
                    51:6a:1a:81:87:65:1a:56:cc:fd:21:13:fc:a4:01:
                    6f:f5:c4:c3:45:2b:50:32:c4:5f:c1:e8:b7:bd:11:
                    10:8c:68:cc:3a:53:e2:cb:41:27:01:c5:9d:44:cc:
                    48:22:17:77:d6:b3:ae:2d:e5:23:89:d7:70:66:f4:
                    b2:2a:18:c7:0a:4a:a7:e1:e5:28:30:57:0d:8b:38:
                    31:3b:10:5c:b2:c0:9b:7c:e6:92:f5:bf:c2:03:f9:
                    c0:0e:44:e9:ab:3b:c8:f4:1d:c9:33:a6:98:2d:f1:
                    f6:40:9c:8b:f0:35:b4:19:e7:e9:41:64:f6:98:08:
                    a8:28:58:19:a9:b0:f4:a0:cd:04:26:dd:66:d7:5e:
                    65:53:57:a5:2d:b8:9c:55:19:c2:1c:8c:56:af:2e:
                    49:db:fe:36:74:c1:81:59:77:dc:33:a6:a7:e6:e9:
                    6a:2c:87:f7:ab:4c:07:62:43:55:33:9f:c0:0d:6f:
                    88:bd:64:8b:76:c4:7e:98:e9:b1:93:26:3d:e6:65:
                    f9:aa:f9:1d:ca:1f:39:ec:83:d5:c2:bc:eb:f4:64:
                    38:fd:e9:c8:bc:bb:06:d5:24:1f:bd:d1:4d:d6:e5:
                    59:c4:69:30:53:1c:5e:7e:62:58:6f:31:ef:a3:90:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A7:31:B2:75:F4:5E:25:6F:64:58:0D:91:E6:FC:77:8E:5C:57:FB:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/A731B275F45E256F64580D91E6FC778E5C57FBF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/22
                IPv6:
                  2804:72d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270877

    Signature Algorithm: sha256WithRSAEncryption
         87:42:7e:e5:70:b8:05:2d:64:9f:03:64:9f:ad:95:66:e2:5d:
         c7:a4:ea:4a:f6:bb:f4:b7:0e:1d:63:f4:40:3d:6d:3d:bf:a8:
         7c:1e:7e:19:6f:c2:83:6c:61:0d:e0:c9:97:e4:d0:b8:46:c7:
         c6:a1:e8:41:44:f3:d0:df:21:bd:f8:f2:bc:b4:7c:14:c6:be:
         58:b7:c4:62:5a:85:af:ae:bc:c2:61:1c:df:6e:2b:60:64:e1:
         f2:b2:e3:18:9d:f0:8f:7b:46:a1:8f:c7:e9:3f:0f:39:f0:e5:
         8a:91:01:0e:61:65:bb:4a:35:97:83:26:8f:e4:fc:61:51:39:
         39:d6:98:1e:06:ec:58:42:0e:be:ab:f8:3d:37:6e:2d:7b:9f:
         d7:0d:24:7a:c1:cd:6e:0a:bd:11:80:10:8d:8a:01:35:c7:41:
         02:10:57:65:53:9e:4e:5d:3a:5e:d8:03:ff:5e:42:39:da:ca:
         c6:ce:5d:d8:c0:98:7d:c5:4d:52:ed:b5:d9:6f:09:e9:8a:63:
         c7:f2:d3:65:6b:de:ec:70:cc:3d:c9:2d:ea:cd:dd:cd:91:64:
         1b:e6:f5:1e:fa:03:fd:1b:e7:c6:83:d4:eb:6b:18:bc:70:cd:
         e5:f0:d4:67:4d:89:79:64:68:16:0d:41:3a:cb:e4:a1:ba:8b:
         ac:44:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----