Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.cer
File:                     C2E766FF08C2E10FBAC140414BCC53321D358C79.cer (raw, json)
Hash identifier:          MWkUsu6PJS2ZjDlos16opDX4a44V4TvpNX+6Lshy39E=
Subject key identifier:   C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78B7A16DCDAE7EC0F3A0F535EC2E8A132F248A4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 11:26:23 +0000
Certificate not after:    Tue 01 Apr 2025 11:31:23 +0000
Subordinate resources:    AS: 262830
                          IP: 177.8.32.0/20
                          IP: 2804:2a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b7:a1:6d:cd:ae:7e:c0:f3:a0:f5:35:ec:2e:8a:13:2f:24:8a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 11:26:23 2024 GMT
            Not After : Apr  1 11:31:23 2025 GMT
        Subject: CN=C2E766FF08C2E10FBAC140414BCC53321D358C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:e1:05:61:cc:57:d8:e6:c7:6a:4d:e4:c9:
                    4c:ab:b0:26:d7:6e:33:67:bd:6e:96:fa:e4:4f:5a:
                    e3:64:48:4c:ea:ee:33:67:1a:7b:57:cc:e5:96:30:
                    fa:d7:f9:09:f8:9d:eb:c7:01:91:e0:f3:10:b4:da:
                    7a:f7:b3:e3:0b:9d:91:bf:bc:f6:5b:ef:8c:18:23:
                    bc:fa:68:39:7f:4a:68:fd:e2:ce:14:2e:8b:ed:a1:
                    26:be:f8:bd:fd:43:b0:e4:12:b5:d6:75:2d:7b:b4:
                    79:46:d0:f5:bd:90:c3:be:a2:d3:88:b2:54:9b:59:
                    2b:f0:2d:fb:26:cc:06:82:1b:f9:cd:0a:57:8c:c4:
                    bb:1c:44:a7:ad:a9:c0:40:db:76:63:34:9c:34:a2:
                    e1:7a:f6:f4:0d:23:cd:37:a9:7a:23:2b:68:91:13:
                    19:1f:bb:4e:71:fe:3e:4d:80:a5:07:c2:75:7f:c2:
                    4d:ef:c4:f3:47:49:02:c5:f5:ff:29:bd:37:e3:bd:
                    13:41:9f:dc:8f:f5:6c:54:35:50:5a:21:de:33:e4:
                    17:4c:e1:8b:3d:1f:e6:ff:5b:c4:99:75:07:f8:89:
                    1d:2f:52:f7:c4:55:1e:9f:3c:97:e2:65:48:09:b3:
                    d4:e0:0d:9d:6e:70:a5:b8:5c:2f:b1:5f:71:ee:13:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:E7:66:FF:08:C2:E1:0F:BA:C1:40:41:4B:CC:53:32:1D:35:8C:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/0/C2E766FF08C2E10FBAC140414BCC53321D358C79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.32.0/20
                IPv6:
                  2804:2a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262830

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:19:ee:10:1c:a7:4b:20:3c:84:94:99:7a:98:c4:25:88:
         42:00:4e:63:69:4a:62:81:9a:05:da:93:30:a1:79:ce:76:ec:
         03:99:1d:bd:8f:35:ea:ac:13:40:4e:6f:fa:92:a0:8f:24:76:
         22:c1:6e:71:bd:53:48:d3:46:0a:57:73:bd:f9:8b:95:d4:05:
         fb:17:f6:f7:49:f5:dc:b3:70:d6:cf:e7:91:30:e0:14:a9:04:
         28:95:94:a5:9d:d5:13:6f:01:14:4d:b6:a5:e8:e5:59:d0:27:
         93:1c:ee:76:29:14:f4:5b:d5:94:b3:31:6e:00:e4:01:76:5c:
         7e:70:94:ae:f3:ee:c1:f2:1c:1a:66:6d:70:4d:79:f4:3d:71:
         ad:ff:31:9b:b5:ef:c6:97:79:bd:dd:72:ca:6b:7a:88:33:aa:
         b0:75:a5:6a:22:d4:aa:cc:ab:6c:e8:67:03:0a:81:22:55:1a:
         35:77:ae:04:92:0b:18:46:60:15:cd:16:39:20:7e:1e:eb:76:
         fb:8f:95:f7:f1:97:c2:e4:7a:37:83:79:23:90:43:99:1a:ae:
         16:8b:86:cd:38:82:7b:64:c4:ec:7e:d1:ae:0e:b6:20:9d:9d:
         c0:0c:57:d7:6f:c4:1c:fe:b3:31:06:e3:c3:89:d0:43:51:84:
         8c:1d:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----