Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer
File:                     BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.cer (raw, json)
Hash identifier:          YWMy8yWa/jAjYBKpU3pHcEj6BiHWzke+/8xhTpr+Ic8=
Subject key identifier:   BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37C92E99B28DD74A33A24262D014D042B99072BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 20:16:27 +0000
Certificate not after:    Mon 17 Feb 2025 20:21:27 +0000
Subordinate resources:    AS: 264455
                          IP: 132.255.36.0/22
                          IP: 2804:1eec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c9:2e:99:b2:8d:d7:4a:33:a2:42:62:d0:14:d0:42:b9:90:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 20:16:27 2024 GMT
            Not After : Feb 17 20:21:27 2025 GMT
        Subject: CN=BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:a9:5a:34:74:02:42:4d:21:bc:f7:f6:49:
                    b1:55:7d:71:a5:11:78:d9:1c:64:1d:5d:37:cd:1b:
                    33:12:3e:50:3a:d6:29:d6:e3:73:ed:dc:92:32:cf:
                    0f:43:25:19:07:ff:78:e8:4a:78:b2:90:81:d8:0d:
                    a7:b5:16:d9:4a:9d:50:2f:d8:96:53:a3:96:2c:cb:
                    c0:c7:b4:37:76:34:a7:f9:df:72:cf:0b:71:68:17:
                    63:bb:eb:5c:97:8c:10:82:f8:62:04:3c:9c:2b:b0:
                    61:a0:83:bd:85:2b:67:e6:27:20:82:a7:a0:8c:d1:
                    78:ba:5e:48:81:1a:37:71:ea:2a:28:52:11:90:19:
                    84:9e:c0:07:c8:f6:76:c9:ac:25:95:db:95:09:cf:
                    d5:64:42:0b:cb:c8:15:c6:49:23:d3:66:3e:9c:b2:
                    08:36:a6:57:a7:f0:ad:a5:63:75:b4:5e:13:90:d0:
                    ba:21:98:cb:9b:a1:b1:dd:80:12:5d:0f:b2:c8:ac:
                    db:e5:4a:3f:bf:19:e9:4e:13:81:70:b1:7f:71:39:
                    1c:ed:ca:a6:69:4e:66:9a:a4:db:c3:10:23:70:10:
                    3e:93:78:d6:34:b2:57:ad:de:85:24:79:f8:74:f1:
                    80:00:12:59:fe:99:93:33:f5:28:e8:a1:68:19:ac:
                    d0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:91:9A:A3:A0:FA:6D:DD:DD:71:AB:94:6E:CA:11:DB:9D:13:3B:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/0/BA919AA3A0FA6DDDDD71AB946ECA11DB9D133B11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.36.0/22
                IPv6:
                  2804:1eec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264455

    Signature Algorithm: sha256WithRSAEncryption
         27:87:c6:4d:cc:b3:8a:da:ae:b4:16:11:cf:9b:1b:27:e2:7c:
         c2:10:b2:8e:ed:3c:a6:74:94:d3:a6:9f:82:75:63:30:a0:c2:
         ed:63:8e:0f:21:7d:69:19:19:66:d6:a5:7a:90:61:12:33:69:
         89:2b:18:ac:fc:79:3a:fc:55:10:8d:33:52:74:10:f0:62:38:
         75:1b:f7:b1:7f:d8:08:ea:51:65:ac:0c:35:db:ad:45:7e:f8:
         4f:9b:31:ee:b3:d8:da:b2:d2:fb:18:07:08:0b:42:52:f6:c5:
         86:05:68:f5:64:a4:49:0a:0e:7d:d8:ae:65:6b:f1:c6:57:72:
         ae:f8:36:9e:a0:84:e7:78:d1:68:ec:30:4c:9b:88:8c:9c:9b:
         f9:95:ad:4f:77:80:6d:a5:dd:85:a2:25:07:17:b0:50:97:59:
         6c:2d:0d:6e:b2:79:9f:18:02:9d:58:b2:a6:87:bf:09:4f:c6:
         33:78:7a:f2:b0:98:d7:cf:32:f3:0b:e5:e4:5f:6c:65:11:93:
         0f:70:ef:14:83:55:e5:cf:5f:02:74:b0:91:45:4f:d8:62:63:
         75:37:43:18:a9:6f:3d:0b:63:c2:44:aa:13:e4:23:77:3b:a6:
         22:41:e0:dc:3e:59:13:ae:4d:16:d4:89:cd:83:f4:1c:22:a9:
         e0:7b:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----