Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer
File:                     B480637B71A5BAB7D8E09175513FD415DB03785D.cer (raw, json)
Hash identifier:          ubB2yTf1LZGRH+1w0rXatI5Jg6wZh0Vd2X42qX0c3EU=
Subject key identifier:   B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       768D6D9F69B084FAE2CEF2959D76125369E22E38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/B480637B71A5BAB7D8E09175513FD415DB03785D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 17:15:26 +0000
Certificate not after:    Thu 27 Feb 2025 17:20:26 +0000
Subordinate resources:    AS: 270778
                          IP: 187.63.124.0/22
                          IP: 2804:7144::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8d:6d:9f:69:b0:84:fa:e2:ce:f2:95:9d:76:12:53:69:e2:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 17:15:26 2024 GMT
            Not After : Feb 27 17:20:26 2025 GMT
        Subject: CN=B480637B71A5BAB7D8E09175513FD415DB03785D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:75:2d:c5:57:f9:2e:c2:27:dc:0f:7b:e4:
                    c5:cf:f4:af:8e:de:a0:a2:49:7e:7f:bb:86:c2:6c:
                    d8:ef:37:b8:c2:12:f5:89:71:fc:ba:7a:87:a3:4c:
                    72:e8:65:c3:f0:54:b1:bb:c3:53:ea:0a:8a:0f:08:
                    07:43:2b:ad:61:55:54:81:7f:99:25:37:a6:16:ca:
                    62:66:cb:a9:38:de:ff:bb:f2:7e:e8:48:ef:13:d0:
                    91:93:b5:f2:f7:8f:a3:ee:54:6b:4a:1a:63:5f:82:
                    f9:28:f8:3a:59:3f:9f:95:49:15:86:d8:13:3a:3c:
                    60:42:32:f9:a0:5e:17:9e:ba:7a:a6:0a:db:2b:85:
                    ba:dd:ff:b9:fc:99:00:a7:8a:bf:2e:48:9e:a5:8f:
                    6e:cc:5a:06:55:00:d1:a5:49:5f:08:7c:10:66:6a:
                    5b:07:1f:a2:69:b6:a9:b7:8a:df:a6:91:fc:e8:b7:
                    d8:08:f2:8a:09:e6:9b:96:d2:de:dc:d9:73:8f:17:
                    e8:45:96:c2:c0:3d:13:9f:ad:dd:2e:ad:c8:4a:b4:
                    ec:11:51:01:c2:98:22:a1:d1:33:5a:eb:58:9f:ce:
                    0a:59:2b:ae:39:db:27:2a:67:cc:85:29:cc:57:3c:
                    c9:11:20:06:e4:55:a8:df:e8:c4:84:29:49:41:86:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/B480637B71A5BAB7D8E09175513FD415DB03785D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.124.0/22
                IPv6:
                  2804:7144::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270778

    Signature Algorithm: sha256WithRSAEncryption
         62:c5:80:13:97:d9:54:c9:7e:3c:91:3f:49:c3:9a:da:bc:3e:
         f1:aa:04:91:ae:f0:b6:c6:3e:3d:70:4c:92:37:02:00:a4:d7:
         d4:44:3e:e1:ca:ad:7c:96:c4:11:3d:93:d1:be:01:2e:55:23:
         8b:df:ac:44:78:61:54:82:8e:f1:5c:7f:39:68:ca:19:b4:6d:
         0e:1c:80:71:4d:e8:dd:a4:fe:4d:82:4f:0f:0e:ec:5d:88:aa:
         1d:ab:8c:3f:b0:4e:94:fb:9b:35:d6:32:cd:ad:1a:c2:68:35:
         1b:92:c0:41:de:13:de:3f:dc:93:95:d8:3e:24:87:5e:d4:ea:
         49:d4:b8:6b:35:cb:74:75:43:49:9f:d6:d3:49:3c:e6:d1:c6:
         c0:6f:ef:5a:7c:d8:1b:80:8f:9b:d6:fd:05:a3:d9:e8:9b:84:
         b7:8d:a3:ad:83:b2:aa:15:b4:86:df:48:dc:c9:34:b6:7d:fd:
         f1:aa:9b:ce:3d:9a:1a:15:3c:87:67:10:6e:af:84:a8:22:f2:
         5e:e5:31:9c:7f:f1:c7:16:72:23:82:3b:1b:42:d3:92:eb:ae:
         3d:75:13:ed:6b:80:d3:1f:6b:7b:a7:ed:fe:e9:99:1e:d7:da:
         a4:33:50:e3:41:c4:bc:7c:73:4a:e1:6e:01:06:6a:f2:a4:d3:
         76:66:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----