Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.cer
File:                     BA369A59CECCAD650C5EE504F3F20571DE938C4D.cer (raw, json)
Hash identifier:          FTN+aODp3f0BrcZEjvxXw+R9nY8avUP3rUXSfJh/dL8=
Subject key identifier:   BA:36:9A:59:CE:CC:AD:65:0C:5E:E5:04:F3:F2:05:71:DE:93:8C:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3637CC50B95756D8BE1A51759BFD49957A632B8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Jan 2024 09:44:38 +0000
Certificate not after:    Fri 10 Jan 2025 09:49:38 +0000
Subordinate resources:    AS: 269033
                          IP: 45.177.84.0/22
                          IP: 2804:5e70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:37:cc:50:b9:57:56:d8:be:1a:51:75:9b:fd:49:95:7a:63:2b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 09:44:38 2024 GMT
            Not After : Jan 10 09:49:38 2025 GMT
        Subject: CN=BA369A59CECCAD650C5EE504F3F20571DE938C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:60:08:2e:11:40:ec:30:c1:53:0a:94:41:
                    89:25:d4:e6:1e:b7:7a:4d:91:d9:e8:8f:98:7a:2b:
                    25:20:aa:5e:af:70:b1:1b:ca:13:7a:f4:ee:3d:51:
                    a1:35:d2:83:c2:8c:42:ff:10:13:fb:6f:91:c0:e7:
                    fd:ad:43:42:c6:c3:57:8f:05:fe:ce:25:bb:25:b7:
                    47:99:5a:97:53:7d:d9:0b:9d:9c:02:24:3c:13:74:
                    85:4c:88:7c:7a:81:2a:a9:9b:43:71:27:d9:b2:43:
                    08:1e:14:ec:22:c8:23:f8:55:75:e9:75:a9:4a:f6:
                    88:0f:83:ad:8b:e2:d6:7e:65:34:c4:93:11:2b:ab:
                    bb:6c:97:2a:92:8f:a1:9e:4d:51:a9:4f:e4:30:06:
                    78:8d:ae:76:06:3d:1f:2d:f1:93:b8:9c:4c:aa:9a:
                    43:a6:a2:2f:d2:fa:4f:cf:d9:6a:60:ac:02:eb:52:
                    7b:96:81:3c:82:d9:be:4e:c3:5d:39:20:90:0e:85:
                    51:b5:39:2c:1e:64:11:c3:fa:87:0a:fb:2e:f6:7e:
                    8c:ff:12:fa:ed:36:f2:34:11:8e:2a:98:d1:53:b1:
                    51:64:c7:09:68:b5:73:18:98:c3:ee:c7:85:4f:8e:
                    ca:47:4f:ba:6d:06:dd:2b:19:d1:22:65:40:d3:97:
                    04:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:36:9A:59:CE:CC:AD:65:0C:5E:E5:04:F3:F2:05:71:DE:93:8C:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/0/BA369A59CECCAD650C5EE504F3F20571DE938C4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.84.0/22
                IPv6:
                  2804:5e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269033

    Signature Algorithm: sha256WithRSAEncryption
         35:01:98:3c:29:ac:dc:4e:98:70:39:dd:d1:51:e0:c9:11:b2:
         0a:78:87:f1:41:41:30:7d:25:df:d3:43:1f:92:bd:dc:a6:1f:
         47:0d:a1:54:15:44:20:40:65:66:b9:dd:09:cf:28:13:d7:d2:
         bc:36:e6:02:4b:8d:67:d3:74:23:85:bf:ba:16:56:fb:07:a3:
         bd:55:7f:02:f4:44:52:0f:b7:d7:80:d5:7e:f5:33:b1:79:cb:
         8b:62:bf:81:4c:05:3f:90:31:6d:9c:dc:94:32:a0:0a:c7:a7:
         6f:ab:14:55:7b:96:e7:d7:56:c7:a8:52:80:bc:c9:a6:62:2b:
         f9:4f:0c:d9:8d:06:e4:9a:97:ed:17:dd:98:be:b6:22:9d:ef:
         5c:a2:66:d6:11:20:14:2f:38:a5:0d:33:eb:7f:1e:4c:b5:d5:
         d2:c8:7b:9b:80:9b:d9:38:74:9c:8e:8d:6e:69:0d:bb:da:d0:
         36:2b:0c:c2:e3:7d:2b:be:9c:03:1d:f4:81:79:f5:26:e7:fc:
         be:a2:48:3c:16:c7:be:7b:08:35:a7:cf:5f:2f:d0:a8:55:df:
         7a:d5:76:0a:97:bf:38:80:25:00:51:65:9d:50:c2:fd:74:55:
         79:11:9e:eb:df:b5:a6:9c:09:91:53:9b:dc:16:9b:33:de:4c:
         eb:02:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----