Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.cer
File:                     B8D4C69F88BC4238C7A92B57634EE1E3AA837140.cer (raw, json)
Hash identifier:          ZXV0Mgjs2Quud/tu/IbborQeCCw8CkjNZ6lpI5iIt5w=
Subject key identifier:   B8:D4:C6:9F:88:BC:42:38:C7:A9:2B:57:63:4E:E1:E3:AA:83:71:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       735D04B83830A284F64E135973DF8BE28AC3264A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 19:10:50 +0000
Certificate not after:    Fri 07 Mar 2025 19:15:50 +0000
Subordinate resources:    AS: 268348
                          IP: 45.239.0.0/22
                          IP: 2804:4fc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:04:b8:38:30:a2:84:f6:4e:13:59:73:df:8b:e2:8a:c3:26:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 19:10:50 2024 GMT
            Not After : Mar  7 19:15:50 2025 GMT
        Subject: CN=B8D4C69F88BC4238C7A92B57634EE1E3AA837140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:69:a9:3f:ac:77:87:1f:59:1f:86:f8:04:
                    e0:73:82:5d:f4:02:d3:a4:b3:d8:01:47:bc:e7:93:
                    b0:dc:52:20:71:47:75:ef:d1:e6:90:66:7d:1d:3f:
                    26:06:1e:aa:b8:d6:10:1a:02:13:dc:0c:d5:25:63:
                    eb:38:a6:cc:07:3a:78:e4:b4:1b:66:50:ae:fc:d5:
                    b6:bd:65:b3:58:da:cb:b7:67:72:67:e1:5a:22:c6:
                    21:bf:c3:7a:3a:a5:d9:9f:7b:6b:04:ef:33:89:d4:
                    2d:9e:d6:d6:f7:c6:13:6c:ac:d0:cb:d4:16:b7:49:
                    89:de:c9:60:42:77:80:79:db:9e:23:61:99:3c:97:
                    56:5a:26:55:20:a0:9c:d3:42:04:64:c8:78:92:48:
                    b9:44:63:e7:b0:4d:8d:15:9d:58:96:8a:de:d9:ab:
                    e9:05:ff:0a:6c:b3:35:97:67:39:25:fa:bb:d6:23:
                    49:ea:21:af:cf:5b:5e:16:73:98:89:31:34:c0:7a:
                    12:90:e2:7d:f3:f7:6c:41:07:d2:b9:4b:d3:4e:4f:
                    e9:77:4f:22:c7:8b:98:b8:7a:4c:f7:3c:8c:31:6f:
                    47:76:53:b2:e7:2a:c2:10:41:79:9f:cd:47:11:36:
                    9d:86:da:8c:a9:64:fc:d7:b4:8d:9a:20:53:52:be:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:D4:C6:9F:88:BC:42:38:C7:A9:2B:57:63:4E:E1:E3:AA:83:71:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/B8D4C69F88BC4238C7A92B57634EE1E3AA837140.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22
                IPv6:
                  2804:4fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268348

    Signature Algorithm: sha256WithRSAEncryption
         13:52:91:55:8c:85:4a:de:c1:d8:01:2c:73:00:b0:c5:a3:81:
         f3:59:5e:cf:bb:aa:9d:41:37:c0:0b:f0:18:e7:12:ec:45:68:
         ec:d3:cd:02:62:1c:ef:a5:63:d7:b2:f7:5e:90:db:d8:dd:cd:
         1a:62:7d:12:9d:7d:3b:b3:d9:27:55:21:5e:95:ec:bd:6e:b2:
         52:a4:44:14:f1:15:6a:71:61:1e:ad:05:c5:5d:7e:9e:ee:c8:
         61:e8:18:b4:10:38:ee:67:c0:c0:4a:6f:80:b3:cc:7c:63:f1:
         33:33:09:d1:03:91:66:ce:33:9c:56:95:43:ea:c8:0a:d9:20:
         61:39:fd:4e:f7:a6:33:ad:83:3b:ff:c5:84:73:f1:f7:05:68:
         16:9d:23:e8:ae:26:56:f3:89:01:70:cc:b5:3b:e0:fc:16:37:
         b9:0d:88:95:00:6d:1a:dd:35:eb:a0:e8:37:83:e8:4a:a8:67:
         5a:16:72:28:66:d0:14:f1:96:8f:cd:9f:d9:6a:db:b8:24:61:
         dc:4f:47:dd:f6:72:95:84:48:9a:7c:54:71:95:23:ff:a9:a8:
         28:e6:35:cb:8e:a0:d9:a1:1c:4d:74:08:f8:30:0e:e2:6e:cc:
         9c:2d:55:50:0a:1b:76:7b:79:85:39:d9:b3:e6:0f:bb:00:59:
         00:06:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----