Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer
File:                     A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer (raw, json)
Hash identifier:          vOBeIpe6Um687fQWkIDnAaptPXfK3pcbdfVmhz60KXU=
Subject key identifier:   A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5354762533B2B5E9E32643228C35F7FBB173D4B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 21:41:38 +0000
Certificate not after:    Fri 14 Feb 2025 21:46:38 +0000
Subordinate resources:    AS: 264513
                          IP: 132.255.196.0/22
                          IP: 170.231.32.0/22
                          IP: 2804:20c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:76:25:33:b2:b5:e9:e3:26:43:22:8c:35:f7:fb:b1:73:d4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 21:41:38 2024 GMT
            Not After : Feb 14 21:46:38 2025 GMT
        Subject: CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:b9:42:00:da:08:41:78:ad:f8:64:75:5b:
                    e1:10:27:69:91:a4:9e:66:3f:76:33:81:d0:6a:12:
                    fb:24:78:06:68:e6:90:5b:7d:9c:82:4a:1a:04:51:
                    6f:b3:65:15:aa:e7:0a:3d:84:84:51:7e:35:82:8b:
                    5e:52:8c:b0:8e:2d:54:1b:05:13:f2:f4:a9:69:27:
                    c4:3a:a1:8f:4e:e8:e8:9e:a9:ad:19:82:e5:68:29:
                    1d:ca:92:60:f1:98:37:57:35:64:9a:42:a3:8e:8f:
                    a9:b1:41:01:94:3d:99:29:fa:b5:1c:c3:f9:ef:77:
                    6e:5d:fa:07:db:ca:70:8a:df:dc:6a:81:85:7a:ac:
                    91:f5:ba:4e:4c:e9:de:a2:e6:63:ca:fc:19:d4:5f:
                    74:49:e7:98:2b:46:5a:00:eb:00:d3:dc:7a:16:08:
                    2f:dc:ed:e5:8a:f1:49:b2:53:6b:a5:77:9c:eb:13:
                    49:6e:04:60:ef:88:be:5f:f9:78:22:82:b7:37:ca:
                    0e:70:5f:ec:06:72:24:09:23:d9:cb:dd:ef:87:e9:
                    0c:28:94:1f:7f:14:f1:fc:b3:b2:4d:5b:32:c6:bb:
                    89:cb:dc:c6:f7:a8:3d:46:0a:b9:3c:6e:13:bf:f0:
                    aa:01:02:52:4d:04:32:bd:0f:e6:13:20:cb:fe:c4:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.196.0/22
                  170.231.32.0/22
                IPv6:
                  2804:20c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264513

    Signature Algorithm: sha256WithRSAEncryption
         1a:62:c0:4a:e5:84:e0:3e:cf:65:9e:73:ec:aa:13:43:81:9d:
         f6:1e:98:83:05:1f:f7:66:2c:db:6f:93:35:0e:61:9d:f8:c7:
         ca:a7:66:ef:45:63:da:5e:ba:74:f5:5d:b9:b5:1a:9a:05:a1:
         11:c3:0e:d7:b2:1d:5c:b6:34:05:26:af:f2:8f:51:5c:06:03:
         d4:6d:19:a5:1f:20:bb:89:ba:f5:12:37:ee:2b:48:a3:58:ba:
         7d:8e:a3:fd:fd:96:75:d1:fd:8a:7d:0d:a4:04:e6:30:c7:a4:
         68:b6:46:bb:e4:5d:81:a2:71:18:81:cc:d9:95:16:a2:92:a0:
         92:54:be:2d:e4:fb:12:ab:0a:57:92:f8:6c:38:40:8c:e0:68:
         89:90:3d:8d:0f:f8:41:e8:19:86:e9:d8:39:d2:7d:45:d8:9b:
         27:cf:f5:e3:31:f8:b1:1d:26:7d:9f:bf:ac:f0:11:35:ec:29:
         3b:6c:18:54:e0:1b:12:cc:ce:42:c6:bd:98:42:f0:8a:16:c8:
         26:16:48:84:65:44:ea:4b:1f:62:8f:60:75:81:88:c2:5b:87:
         67:0d:85:b2:e2:c5:ea:93:ac:a9:c6:48:e3:bf:77:a0:35:d0:
         ee:b6:7e:1d:6a:a5:7e:63:3f:00:a1:a5:7f:fc:ae:3f:3e:97:
         07:6f:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----