Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BDA99E980250933567E91C668F5C196B451AE8E0.cer
File:                     BDA99E980250933567E91C668F5C196B451AE8E0.cer (raw, json)
Hash identifier:          uOshh67IeVyv221xYkVuEi4rQjB4vDavQDhn+yTB6as=
Subject key identifier:   BD:A9:9E:98:02:50:93:35:67:E9:1C:66:8F:5C:19:6B:45:1A:E8:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50C755D3BE7C79BA69FC6BF261A351F5D7DCE0A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 23:56:47 +0000
Certificate not after:    Sun 23 Feb 2025 00:01:47 +0000
Subordinate resources:    AS: 269724
                          IP: 45.189.160.0/22
                          IP: 2804:68e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c7:55:d3:be:7c:79:ba:69:fc:6b:f2:61:a3:51:f5:d7:dc:e0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 23:56:47 2024 GMT
            Not After : Feb 23 00:01:47 2025 GMT
        Subject: CN=BDA99E980250933567E91C668F5C196B451AE8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:bc:2a:0a:5d:9c:53:77:25:29:44:56:46:14:
                    f1:31:f1:81:4a:93:86:3b:31:02:90:5c:3d:38:5a:
                    c4:74:77:74:f5:f7:0c:04:0d:8e:1d:ff:f2:3e:c6:
                    70:fa:18:9f:2b:2f:48:17:6d:51:f0:dc:7e:64:99:
                    63:ca:e9:70:b2:fb:3e:b8:a8:83:59:a2:d3:af:82:
                    21:ab:64:8d:73:de:e2:a7:24:b4:d0:5d:50:87:27:
                    3e:b4:41:ca:b3:38:85:c9:da:6a:c5:13:14:5c:66:
                    b6:a2:83:b7:6e:1d:cf:cd:f4:c0:ab:6f:04:93:91:
                    86:c3:f7:f0:43:8a:1b:45:14:c6:9f:24:28:2e:93:
                    8a:83:35:54:01:39:e0:84:7f:bd:9f:27:a4:cc:2b:
                    a7:fc:d0:11:c6:c4:42:25:31:95:cb:2f:0b:63:df:
                    08:90:7e:f8:ca:30:13:87:25:01:4c:87:99:3b:7c:
                    a8:96:78:b9:54:3b:16:02:c9:16:c5:84:13:1e:01:
                    56:df:88:aa:f6:da:e8:47:ab:10:91:88:f4:d7:86:
                    e7:43:cd:5b:25:4b:7a:f2:17:d0:6a:e2:58:c1:75:
                    53:7f:05:fa:fd:33:aa:f4:3f:2e:d2:70:c0:36:3b:
                    94:cb:2a:69:56:38:35:ee:33:2b:cf:40:dc:ff:be:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:A9:9E:98:02:50:93:35:67:E9:1C:66:8F:5C:19:6B:45:1A:E8:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/BDA99E980250933567E91C668F5C196B451AE8E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/22
                IPv6:
                  2804:68e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269724

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:27:67:14:7b:a1:7b:80:c2:f8:bd:84:ca:6a:86:94:e4:
         3c:39:88:3f:c9:3d:5b:59:0a:5a:4a:07:e1:83:5e:c4:04:b4:
         f5:e9:be:2a:3c:7a:b3:b2:82:23:2e:5f:8d:61:62:f1:4d:80:
         31:07:44:28:77:da:4a:89:b3:90:9d:4a:d4:96:c2:ac:1b:72:
         9c:33:24:fe:67:1a:a9:07:c5:80:24:1c:67:b6:53:16:ea:c9:
         13:01:a1:eb:3e:34:9b:42:b5:78:5f:cb:d2:12:f8:0f:f4:9c:
         94:3c:b3:95:78:dc:86:86:70:fe:65:2f:3c:eb:56:39:82:76:
         a9:0f:8a:b8:68:43:44:3c:8e:f4:fe:48:4c:83:37:4f:2b:9e:
         2c:68:b8:ae:00:d7:92:57:38:3f:41:2b:93:1d:54:6d:53:db:
         79:0b:d3:c6:a7:c6:d3:cd:4f:10:66:bd:e2:e4:d4:75:2a:d3:
         e0:c1:3d:25:1d:29:50:c8:83:39:f1:4f:05:f4:66:b9:78:ae:
         82:a7:12:4b:24:e4:77:17:91:4f:9a:29:9e:4b:f8:05:04:db:
         30:ea:9e:9d:ba:9f:23:a3:45:dd:92:4b:93:87:f9:9c:82:b3:
         0b:ca:82:61:67:a7:aa:f9:d2:85:c5:e6:7d:22:48:22:40:df:
         95:30:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----