Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.cer
File:                     A918546B0C5D16E5BE151521B74964B746CBDEB1.cer (raw, json)
Hash identifier:          GHsHC86ptNMKUf8+8YNF0lnZ2lmgsFJnSBfQQ2/tivg=
Subject key identifier:   A9:18:54:6B:0C:5D:16:E5:BE:15:15:21:B7:49:64:B7:46:CB:DE:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EBC5DB0663C55F0138F38DB71E842A8A3274D44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 13:56:31 +0000
Certificate not after:    Mon 24 Mar 2025 14:01:31 +0000
Subordinate resources:    AS: 263411
                          IP: 179.97.24.0/21
                          IP: 2804:15cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:5d:b0:66:3c:55:f0:13:8f:38:db:71:e8:42:a8:a3:27:4d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 13:56:31 2024 GMT
            Not After : Mar 24 14:01:31 2025 GMT
        Subject: CN=A918546B0C5D16E5BE151521B74964B746CBDEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:74:96:f7:83:7f:53:54:2d:0b:5b:33:a9:
                    f9:65:89:67:6f:50:d5:20:f9:5e:b5:b6:ae:da:5f:
                    23:9a:22:17:03:6a:9c:31:ca:d8:43:3a:4a:2b:1c:
                    4d:d3:69:09:99:fe:ea:b4:64:73:3b:f8:10:0a:98:
                    6e:e4:1d:b0:a7:3c:f6:52:2c:dd:17:42:2a:2e:a9:
                    d7:26:97:f6:25:ac:a4:41:ad:3d:5c:70:84:71:11:
                    b9:dc:0b:5f:cd:68:93:55:05:02:8c:d1:46:d8:b4:
                    1c:eb:b1:d8:ef:3d:ff:a5:6c:a8:84:9d:3d:df:2f:
                    e4:64:d5:39:2e:77:ed:2d:a4:e3:a4:ef:d4:6d:65:
                    01:0c:1e:44:e2:fe:2b:75:7e:90:e4:5f:bc:9d:00:
                    25:f2:9c:c8:b1:9b:54:d5:75:74:d7:9a:2a:f5:4f:
                    ba:45:62:af:9e:fb:ca:3e:3c:9b:e8:c5:02:69:92:
                    a1:a2:a9:59:85:87:d2:e7:dc:03:b3:e7:6d:bf:45:
                    fe:7c:4e:80:7a:92:4c:36:f0:01:cd:0a:87:68:7b:
                    c8:9d:bb:c7:e9:c5:a7:49:ec:4b:d1:77:02:10:18:
                    dc:01:45:1f:d7:77:3e:97:59:6b:8f:f7:a4:5b:81:
                    92:e8:22:7c:22:2b:bc:4b:dd:cd:4e:84:a1:a3:bf:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:18:54:6B:0C:5D:16:E5:BE:15:15:21:B7:49:64:B7:46:CB:DE:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/A918546B0C5D16E5BE151521B74964B746CBDEB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21
                IPv6:
                  2804:15cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263411

    Signature Algorithm: sha256WithRSAEncryption
         77:84:42:e5:6d:e0:49:a6:e6:92:79:97:56:4d:55:77:fc:f3:
         fb:69:c5:49:81:ae:7e:ad:ab:89:1d:5e:c1:49:49:bf:8c:76:
         d6:c6:6b:de:60:55:2a:e3:1e:a0:e5:bb:6a:7d:2b:7c:34:c5:
         ea:c3:27:96:30:bb:8b:a4:de:8d:c3:71:fe:c8:22:35:a6:a0:
         16:c0:20:0c:e4:e1:61:81:a5:6b:e5:e6:e3:da:29:76:bf:61:
         62:3a:c4:33:d3:46:32:e5:2b:49:0c:1c:90:37:a4:5e:e8:f2:
         8f:2b:1e:ab:c4:1b:83:ef:f7:1b:26:43:2f:37:4a:d0:4b:8f:
         f1:7d:18:7e:3d:cf:bb:94:ef:c2:79:6f:e9:f6:6a:12:f7:fb:
         75:d9:bd:fd:cd:5b:c1:35:da:6a:88:80:a8:aa:d2:b7:16:22:
         64:3a:d7:ee:2f:28:77:fc:bd:a7:f5:90:32:ca:ee:4d:aa:db:
         ab:58:66:59:28:73:2d:a3:16:2a:7b:1e:2a:7f:f6:ab:61:e7:
         32:f1:31:3e:e5:99:e7:82:4e:d2:f4:2a:75:11:c6:83:9e:b5:
         c3:84:e1:b8:56:cb:ac:28:f9:b9:c0:ab:7a:60:9c:98:5f:b2:
         4f:17:19:7f:4f:c1:dd:93:f5:c2:e8:50:02:15:81:76:8d:55:
         e7:f0:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----