Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer
File:                     ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.cer (raw, json)
Hash identifier:          turlusTUDW9inGyxI7oPV9qjNBTWDaQZuqDySCwVuko=
Subject key identifier:   AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D753D835778C70C09DB1D96A8D6237A66FB1538
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 13:00:27 +0000
Certificate not after:    Fri 28 Feb 2025 13:05:27 +0000
Subordinate resources:    AS: 271502
                          IP: 181.189.124.0/22
                          IP: 2804:7c88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:75:3d:83:57:78:c7:0c:09:db:1d:96:a8:d6:23:7a:66:fb:15:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 13:00:27 2024 GMT
            Not After : Feb 28 13:05:27 2025 GMT
        Subject: CN=ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:6b:e5:12:41:1d:28:10:ad:2e:39:da:64:
                    ab:65:10:1a:23:64:d7:77:cd:d4:b9:56:44:47:db:
                    2f:f1:96:d5:83:18:5b:19:a8:66:7d:80:82:aa:f9:
                    3e:cb:49:c6:df:96:b6:7e:08:36:48:59:af:e7:1c:
                    e6:82:54:b6:43:c2:4e:21:2b:76:80:04:98:fa:47:
                    b7:e1:67:57:22:57:60:87:7b:78:60:eb:92:a9:ee:
                    2a:0e:93:31:74:18:75:ee:31:ea:28:52:38:08:36:
                    ef:80:3a:ae:4d:36:45:bd:b1:84:96:85:36:cc:e0:
                    d9:47:8d:82:37:d5:ad:8b:bd:31:4e:ed:75:86:fe:
                    36:ae:d1:e6:c3:ee:c8:11:4b:c5:25:77:c7:ba:48:
                    07:95:a5:69:da:5d:a3:9c:3f:35:73:60:6a:4e:e1:
                    b4:aa:73:2a:5c:b6:41:5a:97:02:99:c2:ff:dc:61:
                    43:11:20:9a:00:00:52:36:1d:57:d4:c4:ff:7b:16:
                    0e:c9:6c:88:52:14:e5:ff:54:eb:f9:ad:4a:e8:d8:
                    d2:75:65:ab:b6:68:fe:f0:6d:04:21:b6:a0:dc:75:
                    9a:68:f5:60:30:35:53:de:2f:db:60:dd:12:46:85:
                    86:8b:da:da:f0:04:9f:29:7a:87:81:10:06:6a:7d:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:D6:04:3A:F5:E4:1B:45:37:D6:F4:F0:1E:C0:90:3C:2D:C7:B7:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/ADD6043AF5E41B4537D6F4F01EC0903C2DC7B7FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.124.0/22
                IPv6:
                  2804:7c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271502

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:0c:48:db:50:82:28:7f:20:44:a6:3a:3a:96:a1:61:cd:
         79:c4:dc:ea:9b:55:68:30:ba:0c:91:cd:33:71:5c:96:8c:ec:
         d9:ca:59:72:ef:25:a9:7e:ff:fa:f6:82:5d:2d:6d:bd:fa:d5:
         23:22:1f:aa:d1:a6:25:39:64:95:64:2c:5a:51:94:a0:ba:8c:
         c3:97:4e:a3:aa:47:b5:99:c0:16:76:06:b4:1a:50:2b:75:b3:
         bf:b0:4e:53:34:d7:c4:6e:b5:95:09:95:fb:17:7d:c0:51:9f:
         61:12:42:d5:db:09:7d:f9:32:94:de:77:b7:91:c1:75:b7:6d:
         ad:21:3c:83:cd:79:da:ee:02:91:76:5c:81:ad:f2:a5:0d:e6:
         b8:4d:98:37:4d:70:49:3a:d2:e5:05:0c:21:28:6b:cf:00:46:
         1f:d8:23:99:7e:6a:eb:61:e2:5a:ec:d6:5b:0f:ea:05:18:fa:
         97:36:bf:b7:f5:0f:b0:b6:14:ee:aa:15:33:74:b2:32:e8:a1:
         0d:25:d3:cd:fc:ff:9c:d1:9e:73:81:f1:57:74:35:b4:d4:fb:
         e1:72:b9:50:aa:33:bc:2c:53:a7:ca:9a:1b:67:c6:07:f5:1a:
         d1:4a:73:70:c7:40:99:7f:ec:61:bb:ef:2d:a1:a4:5f:ef:c8:
         88:d1:c3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----