Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
File:                     AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer (raw, json)
Hash identifier:          rrpvCbm647VAAok7mtVaN6+nzQcseWB2BGMFfcasqNU=
Subject key identifier:   AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       058E860EE1966DD654E3EDE61DBA6122A823A1AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 15:22:07 +0000
Certificate not after:    Mon 20 Jan 2025 15:27:07 +0000
Subordinate resources:    AS: 264544
                          IP: 138.0.112.0/22
                          IP: 2804:213c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:86:0e:e1:96:6d:d6:54:e3:ed:e6:1d:ba:61:22:a8:23:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 15:22:07 2024 GMT
            Not After : Jan 20 15:27:07 2025 GMT
        Subject: CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:24:3f:39:33:9c:a6:68:d0:dc:70:53:f1:
                    51:f1:a6:05:78:a8:54:16:fa:f8:c3:cf:b2:d2:3b:
                    da:8b:1c:95:61:bf:44:86:46:25:c3:ff:d2:98:ea:
                    7a:8a:69:93:3b:33:e2:1a:68:39:a4:18:0a:48:c2:
                    3f:0e:63:79:40:30:cd:b1:10:dc:61:40:4c:c1:57:
                    2c:b9:2a:6a:48:ab:4d:69:aa:07:ea:08:39:5e:03:
                    9e:14:d3:72:eb:c2:69:74:28:3f:98:e8:93:55:89:
                    78:dc:82:9f:00:9f:f8:08:f6:6a:9b:a9:42:0b:11:
                    82:d0:19:aa:15:8c:4b:f3:25:4b:1d:14:27:ec:9f:
                    49:b8:54:05:c8:76:a4:bb:f4:ca:96:f5:5b:c5:e5:
                    a1:3d:2b:64:fa:c6:28:2b:a9:66:f9:b6:fe:68:62:
                    f3:15:49:b3:07:a0:1c:22:ba:91:1e:fe:42:2d:f9:
                    82:85:6f:0a:a5:e2:7c:a5:47:a8:cf:89:7b:cc:f3:
                    24:4e:f3:a6:6f:b7:ff:aa:5d:07:1d:17:b5:09:f4:
                    2f:cc:51:79:ab:a9:28:63:41:78:49:fb:64:34:cb:
                    bb:e3:e1:74:a1:05:0a:2c:3d:fd:a2:d9:d5:49:23:
                    a2:1b:fc:aa:95:dd:f5:e2:d6:97:f2:df:f7:a1:ea:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22
                IPv6:
                  2804:213c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264544

    Signature Algorithm: sha256WithRSAEncryption
         0c:91:e9:69:91:a3:d1:6e:ae:c7:99:28:3d:f9:90:31:93:47:
         6d:24:a5:7c:76:7f:40:e5:09:dd:28:c6:55:33:62:1b:f4:f3:
         26:b2:72:e6:e2:da:51:be:12:40:bc:2c:ca:91:06:62:35:f2:
         4c:b8:22:d4:29:8e:90:58:c5:58:5b:b6:73:b4:d3:fe:41:d4:
         e3:57:7c:ac:ce:c7:68:00:02:2e:53:ae:ec:58:73:52:0d:4d:
         83:cb:bd:1a:ac:84:43:62:43:cc:78:45:93:1b:75:37:9c:a0:
         d8:ee:3c:a0:6d:25:f5:fc:b6:87:ec:98:91:33:44:9b:0c:fe:
         7c:2b:aa:32:6d:bc:b2:d6:4e:95:cd:3b:b8:0d:e2:02:03:8f:
         88:9d:42:f6:aa:80:5b:19:07:b0:79:b0:f6:c3:b8:9b:46:b6:
         9d:d7:80:d9:8a:71:2d:b7:b3:39:ae:65:ea:dd:ff:b5:d7:e0:
         19:60:92:d8:f2:2e:b3:80:6d:81:69:61:44:74:a3:2e:c0:97:
         11:9d:6b:01:52:f1:5d:dd:0a:fa:cd:c3:f1:2f:89:49:bd:8f:
         bb:37:c6:3a:58:8b:63:ed:e3:40:ef:32:61:d8:30:69:92:aa:
         53:59:2c:34:d7:8e:0b:3a:d7:ad:a7:b5:73:5c:93:c8:14:10:
         ab:20:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----