Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B655BC220C7C20908CA98E00554E5C93B2815921.cer
File:                     B655BC220C7C20908CA98E00554E5C93B2815921.cer (raw, json)
Hash identifier:          2ar5tovVulVwkVzJdLGmhJO37TaOm7s34+WKbyfE3TU=
Subject key identifier:   B6:55:BC:22:0C:7C:20:90:8C:A9:8E:00:55:4E:5C:93:B2:81:59:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DCA1C6F8A39FCABDA86B75B0207A83E779A3D1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/B655BC220C7C20908CA98E00554E5C93B2815921.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 23:15:53 +0000
Certificate not after:    Mon 03 Mar 2025 23:20:53 +0000
Subordinate resources:    AS: 270469
                          IP: 187.49.160.0/22
                          IP: 2804:6c74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ca:1c:6f:8a:39:fc:ab:da:86:b7:5b:02:07:a8:3e:77:9a:3d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 23:15:53 2024 GMT
            Not After : Mar  3 23:20:53 2025 GMT
        Subject: CN=B655BC220C7C20908CA98E00554E5C93B2815921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:98:20:a3:33:74:83:43:89:c8:16:b4:7f:
                    cc:b0:be:9c:29:22:39:5d:31:a3:7b:04:af:62:4d:
                    b5:ac:7e:04:bc:d7:09:88:e2:5c:fc:2b:1d:f8:b4:
                    e5:cd:bd:aa:67:70:e2:03:5e:23:78:c0:56:d2:78:
                    d8:c6:f6:65:b4:28:fd:e9:16:b8:8a:57:92:ff:01:
                    6b:26:83:67:63:76:fc:5f:ea:57:8b:ab:e3:e9:3f:
                    b8:75:ec:53:53:5c:42:7e:a2:bc:4c:48:b0:0c:90:
                    4a:10:cf:2a:a9:a8:b2:e5:01:09:29:be:77:19:69:
                    2a:9d:e8:39:fd:34:d1:04:15:20:96:f0:98:f6:73:
                    aa:79:d5:ba:ea:e9:52:44:ec:32:ca:95:92:64:dc:
                    f4:93:5c:c6:76:a6:bf:d2:03:31:d5:bd:d2:3f:53:
                    88:fa:0f:e1:57:18:ef:4e:c9:28:b6:9e:f2:84:49:
                    03:e6:0d:1b:42:b1:55:83:33:23:45:2c:32:f6:a9:
                    f7:79:87:a5:11:93:f0:95:30:f1:be:c3:5a:ec:38:
                    05:e3:1f:28:8e:f8:53:24:c2:b7:cd:55:23:dc:b0:
                    6f:5f:61:f8:1f:e6:52:4e:5d:32:db:04:0f:91:33:
                    a1:5d:91:ff:08:96:52:c7:0b:6b:fa:db:29:fb:8b:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:55:BC:22:0C:7C:20:90:8C:A9:8E:00:55:4E:5C:93:B2:81:59:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/0/B655BC220C7C20908CA98E00554E5C93B2815921.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.160.0/22
                IPv6:
                  2804:6c74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270469

    Signature Algorithm: sha256WithRSAEncryption
         09:73:9a:9b:77:cf:69:3f:0a:24:32:f7:a3:2c:a3:07:c2:c1:
         67:89:02:1d:aa:96:0c:a7:3b:ab:c4:0b:99:3b:0b:0d:0f:78:
         f6:b1:01:2f:52:01:93:35:6f:17:db:be:0d:ed:0d:f0:e3:84:
         76:32:73:1f:f4:b7:f3:9c:e3:9d:6c:f0:33:44:b9:ae:7a:57:
         da:cd:4f:f9:3b:f5:e4:f0:37:1f:93:8d:6d:fd:12:5c:b1:6e:
         f0:b4:93:14:ba:af:94:dd:64:1a:40:1f:9e:8b:1b:63:52:5b:
         88:16:38:19:a4:7d:75:af:2e:ed:21:25:df:c9:84:09:03:84:
         fb:e7:f8:00:04:df:b2:40:ec:39:2d:cf:3a:4a:da:49:f8:4d:
         f6:7f:7d:64:c8:8e:4a:08:5d:25:20:48:b6:c7:56:7f:25:b0:
         8b:88:8a:7d:04:fc:1e:0c:db:71:89:c3:72:44:f1:cd:45:78:
         fe:a1:b1:59:3b:d3:21:38:61:f1:cb:d2:fc:57:22:bb:82:39:
         5f:ab:d8:67:03:53:b2:01:1a:df:f1:5f:ad:19:25:30:bd:c5:
         64:b1:12:e5:22:12:3d:8b:df:c4:94:b5:76:83:76:aa:74:14:
         b7:dc:93:d4:5d:bd:21:c1:e9:37:d1:d3:bf:78:b3:af:bc:73:
         7b:99:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----