Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
File:                     B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer (raw, json)
Hash identifier:          UUodaoUzjgLjZCYH+M8O4MMcpvEMDEWPaC6n4BfK8Bo=
Subject key identifier:   B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E18F90FB8890F023E685103B97211BA8C41A5DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 18:09:39 +0000
Certificate not after:    Fri 07 Mar 2025 18:14:39 +0000
Subordinate resources:    AS: 61874
                          IP: 131.0.56.0/22
                          IP: 2804:1aa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:18:f9:0f:b8:89:0f:02:3e:68:51:03:b9:72:11:ba:8c:41:a5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:09:39 2024 GMT
            Not After : Mar  7 18:14:39 2025 GMT
        Subject: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:66:b8:14:bd:3b:30:1d:69:ff:32:9a:95:
                    b3:86:f4:40:7c:95:e9:06:46:9f:de:bc:78:f7:63:
                    46:85:c4:b0:5d:75:66:c5:4b:74:f3:29:88:3b:6b:
                    6e:e6:a8:db:ac:21:53:69:84:c5:17:f1:f5:57:dd:
                    6c:12:82:d5:51:34:2c:69:a1:b1:f3:92:d2:e8:dc:
                    05:96:81:51:2e:bd:5e:b3:fe:ab:6c:73:48:88:07:
                    0f:d4:b0:93:8f:57:fb:df:29:ad:be:8e:0b:af:e7:
                    28:4b:33:87:60:92:37:35:3a:26:3c:de:5f:f7:ba:
                    67:9c:38:6b:d7:09:83:a5:0f:4a:ac:4c:76:ce:e8:
                    9f:04:b3:57:cd:fe:c8:bc:06:3c:65:eb:84:1f:21:
                    85:a8:1f:1a:8d:20:2a:f0:f6:4a:14:9a:ce:e1:f3:
                    0c:0c:f6:a3:a2:94:d5:fa:c6:92:55:6b:d3:4a:19:
                    25:e0:76:a2:29:df:f0:9a:68:db:fd:aa:11:b9:15:
                    d9:1e:00:a1:16:8f:54:32:5f:fc:82:4b:8c:76:f4:
                    5b:fc:56:19:89:38:7a:53:47:d2:62:47:0b:33:5b:
                    da:91:c5:a6:84:1c:36:ed:90:a6:7a:48:61:11:9e:
                    e3:fb:08:b6:d7:e1:0c:85:ed:cb:45:ae:c7:d8:be:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/22
                IPv6:
                  2804:1aa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61874

    Signature Algorithm: sha256WithRSAEncryption
         42:01:55:0c:df:a3:d1:96:6c:72:8e:1a:af:ce:28:7d:68:6b:
         1d:f9:30:a1:8d:a3:d0:c1:d0:e8:24:da:1e:f7:35:33:17:ce:
         99:df:7f:08:12:dc:49:02:34:70:56:dd:10:50:c6:7d:32:de:
         42:03:0f:6d:5e:7c:09:ef:7a:83:ec:20:58:d0:59:1c:12:71:
         45:67:cb:b0:f7:3f:b1:98:04:2c:df:53:cd:ae:1a:bd:47:4c:
         ef:44:1a:7d:f7:39:0a:f2:d7:9b:17:e4:e7:5b:c5:bb:9a:27:
         ee:e1:52:7a:c3:22:37:0c:78:d4:07:70:c6:e6:b7:a8:2f:cd:
         04:82:60:ee:9c:36:92:0a:ef:50:f7:a9:2d:14:f8:9a:0e:ba:
         69:0f:53:f6:a8:5b:88:61:9d:b6:5b:a8:06:cd:df:66:31:b0:
         71:d0:d6:ae:64:a0:ad:39:e9:4f:79:1e:82:a4:a8:f0:71:26:
         12:26:37:8d:87:89:82:74:cc:c8:d2:83:4a:31:cf:42:0f:dc:
         a5:b2:0b:fe:f4:86:06:a3:ef:8b:0d:ff:c5:6c:90:94:6d:2e:
         5b:84:17:9b:9b:68:9c:2f:c7:f5:d2:75:e2:50:e8:3d:8f:b1:
         0f:55:8e:2c:69:c8:cf:bd:2c:63:cc:a4:6d:3f:5b:60:85:cf:
         81:ce:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----