Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B20C19BE837487F270BE3762AA874E14A967E6EC.cer
File:                     B20C19BE837487F270BE3762AA874E14A967E6EC.cer (raw, json)
Hash identifier:          jaUct4IdkSTZeYOeXkHEzJcgQu3LH73J9TXn93k9630=
Subject key identifier:   B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C42F9E896D5DDAC893860DD455D62D5E52439C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 20:17:05 +0000
Certificate not after:    Wed 09 Apr 2025 20:22:05 +0000
Subordinate resources:    AS: 268328
                          IP: 45.238.72.0/22
                          IP: 2804:4f74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:42:f9:e8:96:d5:dd:ac:89:38:60:dd:45:5d:62:d5:e5:24:39:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 20:17:05 2024 GMT
            Not After : Apr  9 20:22:05 2025 GMT
        Subject: CN=B20C19BE837487F270BE3762AA874E14A967E6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:93:cd:65:b6:54:37:dd:a0:3c:4e:f1:dc:
                    63:ec:ac:dd:5a:ef:5d:be:83:d7:e7:5b:65:36:13:
                    14:46:06:c4:11:17:d2:1c:5c:d8:8d:58:1c:95:b8:
                    98:e6:a9:ee:ff:47:72:5a:e4:7d:73:5c:b8:a5:d4:
                    c8:a1:04:a5:18:75:bc:0b:06:25:74:4b:81:ca:cd:
                    5e:31:41:c5:c1:03:8e:3a:eb:56:c6:fb:d3:74:1d:
                    e0:6b:d5:94:e1:74:06:dc:1a:17:64:47:2e:7f:d0:
                    10:47:b2:8c:8e:8f:ae:e7:25:9a:b6:27:dc:76:31:
                    0e:1a:e8:c5:b1:33:92:a3:b0:b8:c9:74:6e:97:53:
                    e5:7e:df:aa:a8:96:fc:04:42:c8:9f:68:d7:f5:5e:
                    69:ff:44:4f:96:44:34:ed:df:c9:76:20:01:72:3c:
                    d4:4f:31:66:86:3d:0c:00:b8:54:18:82:86:a4:96:
                    32:30:e9:c8:3a:20:7a:bb:1f:b3:e7:d4:91:38:d5:
                    a5:99:30:84:b0:3e:f0:96:71:21:da:e0:f3:e1:f7:
                    d4:26:cf:c7:67:63:cc:0c:fe:c2:c5:2b:82:79:9a:
                    a7:c9:e7:fa:ed:8d:dd:17:bb:f4:19:f7:ee:f9:e5:
                    e5:cd:6d:c0:c0:59:e2:22:1c:ec:88:ec:69:44:1f:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:0C:19:BE:83:74:87:F2:70:BE:37:62:AA:87:4E:14:A9:67:E6:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9oestgdJWNpTepHDb1Ew4SvRkpQYu6AQoKrHsVt9V2LX/1/B20C19BE837487F270BE3762AA874E14A967E6EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.72.0/22
                IPv6:
                  2804:4f74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268328

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:65:91:dc:c7:0e:83:c2:d8:ee:fe:71:ed:28:64:0a:76:
         0c:29:8a:7d:2c:2f:07:59:2d:c8:d1:d2:db:6e:dc:6a:74:44:
         fe:f6:8e:e2:64:73:1b:57:7d:d4:6b:b8:a1:c9:9c:ab:46:85:
         0d:f6:cc:56:c5:d2:67:3b:6c:c0:fb:1f:67:70:81:a4:e3:c4:
         a5:f7:05:59:e7:bb:9c:ea:21:a8:d0:43:26:b2:e9:b2:4c:93:
         a5:a0:6f:3f:ed:cb:e7:9a:82:05:14:bd:8c:67:a0:2a:56:25:
         f8:ac:62:cd:22:8a:4e:e0:b6:31:5e:f8:21:a7:55:f8:82:01:
         df:a7:af:bc:c1:77:b2:58:de:4e:b2:f1:a8:f8:75:1e:84:d4:
         b4:e8:42:89:4c:65:a2:fd:d5:36:03:ad:f2:82:f1:ab:dd:94:
         2c:2d:22:b5:66:86:f5:d3:bc:4f:fa:c8:a3:a7:63:e4:c1:8d:
         2b:7e:55:a5:82:8b:54:9e:8f:25:d3:72:ce:3b:aa:f7:8b:ca:
         9c:48:9a:35:7e:d3:cf:cf:94:de:07:1a:21:be:c8:e6:a7:75:
         2c:47:39:05:4d:16:be:e9:f9:be:69:95:70:26:96:63:9a:8c:
         50:00:eb:38:c5:c4:43:a9:b0:21:90:3f:e3:ec:63:05:54:5c:
         04:0a:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----