Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C086F933844AE977142A610348BAC966E4D6B7B4.cer
File:                     C086F933844AE977142A610348BAC966E4D6B7B4.cer (raw, json)
Hash identifier:          fHLQ6nKPYP1p259nKNK4XZsYLPfYeGlAFP6Jxkg+QIk=
Subject key identifier:   C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58D86CEBAE9FD3A245E41CB189D40257CCD45164
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 00:44:30 +0000
Certificate not after:    Mon 10 Feb 2025 00:49:30 +0000
Subordinate resources:    AS: 265242
                          IP: 168.0.20.0/22
                          IP: 2804:2cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d8:6c:eb:ae:9f:d3:a2:45:e4:1c:b1:89:d4:02:57:cc:d4:51:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 00:44:30 2024 GMT
            Not After : Feb 10 00:49:30 2025 GMT
        Subject: CN=C086F933844AE977142A610348BAC966E4D6B7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:0c:bb:5c:8f:66:39:87:ce:98:40:dd:c1:
                    29:36:46:65:4c:8f:74:46:81:fb:d8:93:b5:8e:f0:
                    1f:56:bf:97:ce:5e:2b:e8:0c:b7:fe:98:23:f0:f1:
                    41:9a:59:d1:a2:cc:0b:63:90:22:21:e9:5a:9e:87:
                    33:7e:a2:ee:fa:e3:c7:8f:6e:1b:b6:c3:25:f8:04:
                    dd:ae:0a:9d:76:3a:5c:b2:5c:c6:2d:38:09:ce:2b:
                    4b:89:8b:c9:38:1d:3b:67:49:84:4a:18:5e:cf:b4:
                    2b:39:4a:9f:1e:5d:7c:a1:cc:4e:f4:ab:49:0b:27:
                    c7:03:03:39:f3:b2:aa:b7:22:91:3b:47:6f:6c:50:
                    f3:f2:75:3c:dc:d2:df:ff:b3:67:99:5e:9e:82:bc:
                    78:e2:c5:c8:54:9c:d8:f9:07:56:d7:af:56:ad:ee:
                    9b:08:8c:3c:fd:7c:89:68:95:17:42:ba:b5:04:c4:
                    28:b4:c2:c4:3d:78:98:55:ad:3a:2b:d0:28:0e:ff:
                    ec:d5:82:0b:69:cc:77:b6:15:4b:fd:08:46:68:c4:
                    85:f2:2c:ac:b9:f4:13:9a:9e:47:5b:9a:4b:91:93:
                    73:4d:31:26:ab:70:74:91:85:e1:e5:d0:b3:6c:89:
                    71:53:e9:f8:cf:be:5c:ed:2e:93:3e:c1:68:7c:03:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:86:F9:33:84:4A:E9:77:14:2A:61:03:48:BA:C9:66:E4:D6:B7:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/C086F933844AE977142A610348BAC966E4D6B7B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.20.0/22
                IPv6:
                  2804:2cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265242

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:6c:3d:fa:96:c0:eb:c3:e7:66:f0:54:5e:7c:a5:c0:26:
         a9:73:8c:9c:02:a7:1b:d5:f5:00:1b:3b:86:55:01:d3:56:b5:
         41:be:98:15:26:6b:6c:0b:8a:6f:0e:44:97:44:5b:64:8c:c4:
         7f:57:a7:66:bf:6f:1c:f1:b6:50:2a:75:88:3c:df:85:a3:df:
         8f:8a:c8:d3:c1:6c:02:3a:e7:c4:03:88:b6:d4:15:2b:f1:00:
         ff:6b:84:d0:af:d3:ab:9d:b7:e7:9c:56:7c:f7:d0:70:70:86:
         15:df:f4:ed:8d:73:f8:52:ee:69:12:4d:61:9a:cd:7a:3c:13:
         d5:07:3e:ad:cf:84:29:9f:60:33:b4:b7:3e:06:c8:21:3a:b0:
         4a:21:73:d4:02:2b:a1:40:25:b6:2e:ff:e4:7c:0e:5f:46:f1:
         97:43:f8:06:00:67:58:49:d6:6d:cf:f9:a3:e4:29:e3:f4:a8:
         05:92:ea:f9:53:e2:2e:06:9a:81:fd:43:0a:d2:77:96:20:b9:
         b1:2a:17:f2:bc:f9:ee:b8:6e:7b:f6:69:53:d9:f3:2f:b2:70:
         02:c0:f4:dc:77:76:d7:25:bf:65:ab:41:de:9b:bb:18:11:39:
         a9:75:a0:f7:d2:00:3e:1b:72:f2:20:76:e1:fb:27:03:7f:fb:
         44:78:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----