Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
File:                     BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer (raw, json)
Hash identifier:          LQYOBOdkA8H+F6iPQPVVjLMQc/pGZiGMNm6etCzdwQ4=
Subject key identifier:   BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A2A346CCEF3EFA760AB0B6E3C6A22806EDC7E77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Apr 2024 16:44:33 +0000
Certificate not after:    Tue 08 Apr 2025 16:49:33 +0000
Subordinate resources:    AS: 268205
                          IP: 45.236.48.0/22
                          IP: 2804:4d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:34:6c:ce:f3:ef:a7:60:ab:0b:6e:3c:6a:22:80:6e:dc:7e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 16:44:33 2024 GMT
            Not After : Apr  8 16:49:33 2025 GMT
        Subject: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:c2:7e:81:34:08:9f:76:e1:d7:b1:2c:b8:
                    e0:b7:b6:3e:8f:e6:41:ef:0c:d6:cd:61:14:eb:8f:
                    f0:9b:61:9e:a3:68:e2:e8:be:92:49:42:c0:33:41:
                    25:3b:4f:48:19:51:ba:fc:20:39:ca:dd:fd:9c:f1:
                    d0:80:98:1e:c8:fc:14:87:a6:fb:24:eb:2e:8d:a5:
                    f8:a5:00:f0:07:ed:73:cb:70:58:fe:91:ca:ec:19:
                    70:f9:62:a1:31:dd:24:48:6c:bb:94:b1:4f:36:ec:
                    5a:6e:ae:00:7f:6d:bc:3a:d0:cd:82:aa:d0:2b:29:
                    59:b2:81:85:a1:86:e6:d3:47:4d:5c:29:8e:80:62:
                    22:f2:7e:d7:2a:57:77:ba:02:02:b1:91:e9:f3:f7:
                    dd:7c:dd:dc:2b:7b:a7:4b:9c:82:a1:29:13:68:c5:
                    9d:4f:6e:4f:e2:2e:fd:e7:19:c1:6f:a3:aa:3c:8b:
                    56:b4:46:aa:d3:0d:fe:49:50:91:11:5e:18:e1:2d:
                    96:67:f6:e4:7d:45:0c:6d:b5:26:3b:1d:7a:5d:a5:
                    43:6c:37:c9:e0:ed:cc:c1:73:4f:e5:5f:a4:bd:18:
                    d2:e6:99:b3:73:ad:8d:f3:da:ad:76:28:71:2b:c1:
                    d4:2c:15:bf:ab:2f:63:95:bf:53:90:74:a4:14:8d:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/22
                IPv6:
                  2804:4d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268205

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:d6:3b:30:f5:84:54:a6:d3:cb:70:ab:df:f9:2f:11:17:
         73:66:11:f2:ab:d0:8a:ee:25:df:de:4f:25:c8:bc:65:49:9c:
         54:9c:db:90:6c:c9:71:5d:26:f2:bd:ce:30:10:ae:58:2c:a9:
         7a:85:de:f3:c9:95:7d:57:89:68:77:65:c6:76:79:e3:97:3a:
         2d:8e:4d:ae:d4:1b:7e:8d:75:fe:08:9f:37:0c:49:07:ad:3e:
         b2:c2:cc:3c:44:ee:3a:81:33:6f:b9:39:57:f9:78:f9:c5:8c:
         be:c6:96:9e:03:82:cb:81:ad:4d:05:0f:57:b9:34:0d:e1:bd:
         c6:89:7c:be:8d:4b:41:5c:50:b9:77:59:0f:8b:6e:c4:74:5d:
         77:28:cc:ad:4e:1a:ad:28:a0:7e:8d:ba:d0:98:38:a7:30:ea:
         c1:7b:9d:45:9b:68:10:ab:9d:e0:63:6b:ff:c7:11:8e:cb:e8:
         0a:d3:a8:0a:3c:83:e7:57:4d:8c:08:68:d7:36:04:cd:e6:42:
         6d:56:6d:0c:b7:7d:a4:7f:22:5f:34:59:28:03:84:39:f9:bd:
         a3:27:77:a6:c5:c5:64:80:e2:8a:d4:87:b7:fb:04:0a:76:ce:
         ab:75:a3:d6:38:7e:04:8b:dd:77:5e:66:f4:bd:da:49:c4:9e:
         6d:fa:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----