Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer
File:                     A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.cer (raw, json)
Hash identifier:          /vyTrpsAFjCw79Z8j/RUPJ5ic5+JvYarlBXtfjthPCU=
Subject key identifier:   A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6358F6A8D662DEB02439E9EB4FB58012E6BC9F14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 16:05:55 +0000
Certificate not after:    Mon 24 Feb 2025 16:10:55 +0000
Subordinate resources:    AS: 265178
                          IP: 167.249.128.0/22
                          IP: 2804:2bd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:f6:a8:d6:62:de:b0:24:39:e9:eb:4f:b5:80:12:e6:bc:9f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 16:05:55 2024 GMT
            Not After : Feb 24 16:10:55 2025 GMT
        Subject: CN=A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:c2:74:e8:da:b5:82:4c:14:07:61:74:3e:
                    98:85:50:22:f3:45:dc:0b:cc:04:cc:5d:03:d5:7f:
                    0b:a9:28:fc:1a:c5:e0:55:a9:bc:48:16:69:99:6f:
                    8f:da:66:d4:86:52:6d:38:59:26:94:b2:46:ac:e6:
                    6f:2b:78:79:e6:25:7f:68:13:d9:e6:3a:5c:6c:56:
                    14:46:97:22:2d:91:8e:1f:a2:d3:d1:9d:95:4a:27:
                    59:56:e7:0a:57:3c:ac:4a:33:ea:44:9f:f6:80:0a:
                    7f:a6:88:a3:88:c8:2b:ab:e2:d1:2d:9a:15:32:db:
                    e3:18:86:60:e1:b2:34:4a:d4:c1:0b:87:84:c9:ef:
                    89:d3:7e:12:40:9b:c0:87:b1:3f:1a:09:2a:78:35:
                    80:62:22:91:e4:02:1b:b5:59:bf:42:0f:c9:46:64:
                    0d:c9:9d:0c:d0:bd:84:0a:42:6e:f1:6a:0a:bc:d9:
                    f1:35:9f:bc:aa:c7:a9:a9:a3:32:3c:4f:98:6c:9a:
                    a6:ec:1e:c8:59:86:22:50:cc:17:14:6c:4e:ab:5a:
                    61:b0:db:d7:f5:b4:e4:01:96:48:de:76:23:9d:f3:
                    45:3d:da:1e:56:a9:07:5f:30:45:22:31:79:56:ab:
                    6c:bd:fc:78:d4:ef:14:86:57:7a:ec:5a:32:d5:ba:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:A6:F2:C8:FD:F8:3A:7F:F1:14:57:18:55:ED:2A:22:13:A5:A9:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A8A6F2C8FDF83A7FF114571855ED2A2213A5A98B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.128.0/22
                IPv6:
                  2804:2bd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265178

    Signature Algorithm: sha256WithRSAEncryption
         20:db:76:ab:9e:b8:42:09:84:ab:a2:c3:40:55:3d:12:84:96:
         52:1e:8b:f4:0d:36:56:fd:e4:22:fa:e7:d6:44:2b:5f:67:4a:
         da:3a:95:07:58:9a:56:83:1d:94:d2:9b:00:0f:d1:54:8e:47:
         7d:74:c6:86:97:fd:7f:7a:ca:30:85:0f:ab:b1:0c:37:b0:1b:
         6d:f5:0b:95:70:15:1e:2e:9a:18:5a:57:aa:c9:dd:eb:38:28:
         d4:15:5f:02:60:96:17:75:87:ff:93:29:4c:0a:e2:38:80:d1:
         58:7e:68:ee:a3:23:1c:7d:39:70:0a:56:96:e6:a7:09:6e:36:
         39:28:a5:d1:70:75:21:74:74:49:e5:d9:e6:4f:0b:c4:74:2e:
         7f:a7:22:5e:4f:5c:27:b9:13:ca:fd:62:e6:84:4f:23:ca:0e:
         63:f3:db:15:a4:d8:07:1e:63:d2:7c:d8:64:82:6a:28:66:13:
         90:ee:a8:17:65:d2:91:45:6b:c9:b0:4b:64:a1:03:07:53:b5:
         17:04:a0:0c:c4:13:9d:51:18:32:45:a3:ed:dd:fc:93:a4:9b:
         94:a4:ca:7a:2b:9d:9c:c6:99:b3:5a:99:20:f6:36:8f:fe:f0:
         cc:b7:98:c1:9e:29:91:3b:49:f3:33:81:74:89:95:9a:7e:26:
         50:4e:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----