Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B972E6C020508D0A414EE6D0F0E456F40E486260.cer
File:                     B972E6C020508D0A414EE6D0F0E456F40E486260.cer (raw, json)
Hash identifier:          T4icnD+valDMTnvfhfU/nlGlF9AmavY4a/VRiYIhtpA=
Subject key identifier:   B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6788C3A8E86C67A4BDB490D9C8F4DCE0A438C1D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/B972E6C020508D0A414EE6D0F0E456F40E486260.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 14:44:41 +0000
Certificate not after:    Fri 21 Mar 2025 14:49:41 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:88:c3:a8:e8:6c:67:a4:bd:b4:90:d9:c8:f4:dc:e0:a4:38:c1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 14:44:41 2024 GMT
            Not After : Mar 21 14:49:41 2025 GMT
        Subject: CN=B972E6C020508D0A414EE6D0F0E456F40E486260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:98:8b:71:d1:c5:1e:4d:c0:69:8d:61:d9:
                    a7:90:33:c3:42:9a:98:65:0a:9e:4b:43:11:9f:ab:
                    3a:d8:81:1a:e7:7e:24:74:a2:4a:99:63:93:72:fd:
                    db:7e:07:47:70:42:a5:bc:fa:18:ae:18:ec:f6:7a:
                    5a:e5:03:e9:d3:e0:6c:0d:bc:81:33:8f:bc:e7:a0:
                    96:4d:eb:98:f4:05:4f:4a:36:42:12:14:98:7c:23:
                    39:f6:28:cc:11:a8:61:35:db:cf:fe:1c:69:97:68:
                    15:49:61:86:5c:fa:93:aa:aa:68:ba:7e:ae:a6:90:
                    fd:0e:93:ae:72:e9:1e:74:35:5c:cc:92:71:67:d6:
                    57:de:ea:62:6a:02:e2:5c:d2:8f:b9:fc:6b:1d:c2:
                    f0:8c:17:71:44:31:f8:46:84:c5:73:96:e9:1d:55:
                    23:8c:ef:75:81:90:46:9e:9b:4e:8b:e1:39:23:61:
                    46:c0:ba:cb:0b:e4:fb:ac:bb:bf:34:00:b2:de:2e:
                    63:89:29:1e:a8:3f:98:9d:3a:ca:9b:84:55:f7:8d:
                    12:99:c3:eb:62:fe:3a:3a:4e:9a:ab:02:0b:a7:3d:
                    38:6b:fc:df:da:73:1e:59:f0:f4:81:e2:93:bb:ee:
                    c8:a7:41:69:48:3d:0d:3e:ca:79:f6:00:32:8f:aa:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:72:E6:C0:20:50:8D:0A:41:4E:E6:D0:F0:E4:56:F4:0E:48:62:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/B972E6C020508D0A414EE6D0F0E456F40E486260.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         03:72:8b:8a:8d:6d:16:ed:e4:02:62:5c:c3:f4:bc:c4:c4:f5:
         9c:1a:05:05:83:da:ad:86:46:63:a4:16:8f:42:c1:38:9f:f1:
         f4:b8:11:62:a8:1c:dd:ed:23:0e:74:30:8f:5e:38:9a:3c:ce:
         39:cc:1a:3d:45:cc:24:f6:3c:3e:66:0e:8a:81:55:2a:04:1f:
         85:f0:24:b2:02:fc:69:f4:20:b5:f7:29:39:36:13:c4:53:cf:
         8e:19:d7:6f:13:1c:c2:e3:6e:4c:a1:b9:79:6b:2e:32:cc:aa:
         10:3a:ce:cc:22:8e:a3:86:89:28:6f:52:95:10:b0:f6:4a:ce:
         f1:73:9b:f0:40:9c:13:2f:1e:65:06:b6:3e:27:4a:3f:b9:47:
         5a:a7:2b:b7:e2:a3:40:c0:92:45:4c:7e:20:ee:b2:93:6f:d0:
         7e:7c:93:d3:09:9b:70:96:86:e3:e6:df:0e:ad:c0:8a:3a:91:
         9a:81:77:bd:6d:34:72:5b:ee:52:1d:64:13:66:00:d9:2e:00:
         7b:58:c3:8c:fb:d4:74:f3:88:b6:d0:4d:4b:f1:b9:c8:a7:fd:
         20:f2:95:35:bc:cf:b7:44:86:72:a9:a9:28:78:a9:dd:ca:1d:
         02:5d:20:96:95:05:84:fb:82:c9:db:1c:4f:1b:22:53:f9:a0:
         7f:e8:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----