Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
File:                     B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer (raw, json)
Hash identifier:          YScd/FACS9/nhV3KhKB8xHbvVSpZffZLStycuxgbi64=
Subject key identifier:   B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1DC4045AD2259238CE79F0E57B140E3357B82511
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 13:48:09 +0000
Certificate not after:    Wed 02 Apr 2025 13:53:09 +0000
Subordinate resources:    AS: 270266
                          IP: 200.115.104.0/22
                          IP: 2804:6960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c4:04:5a:d2:25:92:38:ce:79:f0:e5:7b:14:0e:33:57:b8:25:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 13:48:09 2024 GMT
            Not After : Apr  2 13:53:09 2025 GMT
        Subject: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:59:f4:89:7f:35:ec:ec:1a:d4:a9:04:7f:
                    96:61:fd:27:f8:8e:42:f6:39:db:11:86:ad:75:8b:
                    c3:ad:3d:d7:62:2e:07:1e:2e:b6:e1:65:d3:db:cd:
                    9d:1f:91:32:8e:f2:ad:ee:03:28:cf:aa:65:c7:a7:
                    28:42:66:9a:9d:f2:93:b7:e2:80:ec:5c:49:79:ed:
                    bf:dc:57:25:6b:72:ce:92:2c:7f:c7:f7:fc:27:25:
                    50:98:34:ba:a3:bb:0d:cf:86:ed:6b:71:86:d0:c6:
                    d9:ba:d5:af:f3:36:89:a0:ef:6b:e8:9c:c2:44:ca:
                    29:fc:b9:7f:ab:81:29:f8:de:ff:dc:ac:9e:c8:1b:
                    a0:8f:90:dc:86:50:d0:3b:7a:15:85:bc:af:e4:b0:
                    2c:f2:50:df:09:28:cf:4c:8a:c0:70:8a:09:0b:bb:
                    23:02:81:69:3c:9f:53:3b:e2:43:f3:7d:f6:40:15:
                    82:5a:1f:d9:b1:f4:20:2b:e2:e9:79:9c:b6:75:19:
                    62:29:30:c2:08:62:62:61:04:b6:99:97:d5:db:66:
                    b6:aa:76:d9:94:e2:68:08:da:7a:0a:a7:8f:3e:ac:
                    45:fa:74:75:c6:53:5f:cd:37:84:95:fe:97:e0:39:
                    21:9e:53:21:70:de:c5:76:1d:b5:82:7f:97:2e:56:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22
                IPv6:
                  2804:6960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270266

    Signature Algorithm: sha256WithRSAEncryption
         15:57:1a:c4:58:05:3b:64:2a:ce:84:2a:d0:57:9b:38:b2:58:
         d3:83:72:cd:4e:f3:90:ec:79:54:8d:74:c6:f3:21:fa:61:27:
         e4:0f:0a:c7:74:45:ac:c1:2a:a9:73:fd:6f:45:a1:01:29:4b:
         03:d6:4c:96:1a:53:9c:1e:8f:dc:07:98:68:3f:e4:f0:9b:47:
         33:b3:3f:eb:73:c6:d7:81:91:91:1e:36:3a:2e:25:e8:b6:29:
         90:72:5d:4b:29:bf:ea:23:b2:9c:92:d5:a8:5f:d2:f3:66:7d:
         87:32:25:13:2e:ba:61:b0:29:9a:c9:cf:e5:42:91:d4:c4:33:
         46:a9:6a:65:dd:8e:7c:4b:7e:be:9f:b6:ac:62:df:ac:6d:11:
         e2:97:62:25:a1:2f:6d:e7:e9:44:fe:ca:25:88:dc:9f:46:46:
         5c:78:0a:7b:07:eb:4f:be:f8:f3:9e:2c:b1:64:72:39:e3:5d:
         7e:02:20:1d:f1:e7:75:01:eb:a4:d6:b9:d6:24:77:69:05:f4:
         e3:fe:a6:d2:e0:9f:00:2e:85:03:0e:a1:bc:31:e4:cd:69:80:
         46:d0:69:64:7e:7a:a1:62:2f:29:15:af:8d:a1:02:1c:bf:7d:
         bd:f7:4d:d3:51:d2:2a:eb:e1:dd:8f:15:5d:5c:1d:2a:a5:5a:
         f9:45:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----