Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B286DC4ADA1266D19596D82A464951E0C029EE82.cer
File:                     B286DC4ADA1266D19596D82A464951E0C029EE82.cer (raw, json)
Hash identifier:          QI+WxvqAeOMT25Gb7v5xaXFx/ev0t40nY+D/mqFdFnI=
Subject key identifier:   B2:86:DC:4A:DA:12:66:D1:95:96:D8:2A:46:49:51:E0:C0:29:EE:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64E00303ABCD3D24E2FB7C71F8C67553A6C3ACB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/B286DC4ADA1266D19596D82A464951E0C029EE82.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 16:17:24 +0000
Certificate not after:    Sun 16 Feb 2025 16:22:24 +0000
Subordinate resources:    AS: 264531
                          IP: 138.0.72.0/22
                          IP: 2804:2114::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e0:03:03:ab:cd:3d:24:e2:fb:7c:71:f8:c6:75:53:a6:c3:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 16:17:24 2024 GMT
            Not After : Feb 16 16:22:24 2025 GMT
        Subject: CN=B286DC4ADA1266D19596D82A464951E0C029EE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:a1:f9:e9:42:5d:12:d8:d1:27:cc:c9:93:
                    42:29:cc:df:09:3b:3e:18:3a:77:56:aa:b7:7a:ad:
                    60:67:7e:80:68:34:c0:92:0d:b3:36:94:40:df:bf:
                    a2:cf:50:1e:34:51:30:b4:12:5b:bb:e4:64:38:06:
                    79:d1:e2:30:7b:42:bc:5a:2c:79:6f:15:b3:94:e3:
                    1b:e1:0b:ef:85:88:de:e9:f2:a1:35:ff:36:45:05:
                    d7:2c:f3:8c:4e:e5:52:95:66:51:8a:99:b4:4c:1b:
                    5d:42:32:07:cc:c5:b4:7d:9e:f7:20:2e:37:e9:3a:
                    a7:6a:9e:62:f4:fa:44:ea:99:17:ca:93:12:a8:14:
                    98:ab:ee:6e:d9:9b:57:4b:cc:e4:84:98:64:da:2d:
                    0f:c3:13:f6:2c:e4:d4:d6:e6:0b:82:81:0c:90:0b:
                    29:6d:15:fd:d9:5a:a2:d3:c5:8e:d9:81:f0:4c:42:
                    94:8d:07:7c:86:0e:13:c4:d4:52:c1:e0:15:8b:55:
                    1e:46:db:70:8b:29:9c:e3:91:91:19:83:6b:9d:25:
                    c4:df:20:ce:f2:c9:e4:05:e2:70:ae:ef:ae:d2:2f:
                    0a:81:7a:c2:09:36:5b:f6:25:2f:f8:98:40:d8:a2:
                    dc:b3:82:75:d8:4f:26:43:5d:31:b5:c8:a1:5d:b7:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:86:DC:4A:DA:12:66:D1:95:96:D8:2A:46:49:51:E0:C0:29:EE:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/0/B286DC4ADA1266D19596D82A464951E0C029EE82.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.72.0/22
                IPv6:
                  2804:2114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264531

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:c9:97:41:4b:d7:e9:00:87:55:36:3a:c4:e5:5f:6f:4e:
         23:3f:03:79:d5:c6:39:5b:d3:5d:e4:79:cb:15:81:9a:90:7a:
         5b:66:a2:4c:1f:53:dd:49:3d:3c:da:37:85:0f:0c:04:9c:ec:
         b0:1f:7a:c8:8d:96:62:c7:f8:60:e8:f6:82:c8:e9:f8:83:3d:
         d0:ca:a8:f3:27:b5:7f:96:6f:16:0f:be:bd:0c:0b:32:70:2a:
         17:50:94:15:de:1d:a8:81:79:d9:7a:20:70:4a:ec:44:85:32:
         7c:49:10:fe:88:25:e7:23:84:76:db:24:77:d2:23:cd:72:66:
         d8:b2:f8:5f:55:e5:88:d8:18:8f:9a:fe:20:b5:0c:3b:1b:f3:
         2d:3a:ca:13:94:07:08:0e:8f:38:a5:91:69:9d:e4:e7:49:4e:
         21:9c:de:99:4f:d5:5c:68:22:75:2f:d2:3c:7a:15:2c:90:a1:
         80:1f:f7:06:58:b7:8f:cb:e6:c3:b9:28:3a:75:34:f5:f4:e4:
         b3:4c:70:b0:98:47:e3:fc:ef:10:f0:9d:ec:0d:a3:85:cf:de:
         07:48:83:3e:f6:90:21:04:be:63:a3:cc:91:83:c3:46:e1:2d:
         2e:12:5a:b3:0d:2c:ad:05:0b:42:60:15:5c:e6:17:62:c0:bf:
         c1:ab:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----