Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.cer
File:                     C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.cer (raw, json)
Hash identifier:          AIbASDz+AYow+g23mFb1TNcmP4I5P99ZEMP8GnQ7/Ck=
Subject key identifier:   C2:F1:DA:4E:E3:B7:56:E0:D2:6D:BF:50:74:8F:6F:6A:3E:A8:95:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       406BFD62DBFE38E2E7359B7A5833E0A5E0066B0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 19:35:07 +0000
Certificate not after:    Tue 28 Jan 2025 19:40:07 +0000
Subordinate resources:    AS: 265106
                          IP: 170.254.132.0/22
                          IP: 2804:32f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6b:fd:62:db:fe:38:e2:e7:35:9b:7a:58:33:e0:a5:e0:06:6b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 19:35:07 2024 GMT
            Not After : Jan 28 19:40:07 2025 GMT
        Subject: CN=C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:c5:a1:f3:df:42:a7:94:3a:9f:3b:cd:fa:
                    b8:f6:54:5c:5a:e3:7f:41:9b:34:2f:1c:cd:d5:e0:
                    2b:31:a3:74:b4:05:90:f0:94:ab:2d:bf:94:c7:b6:
                    9f:35:08:ca:1f:d2:1e:ef:ff:17:2f:05:06:2d:3c:
                    44:dd:de:a6:d9:f8:33:db:18:d0:5c:04:d5:6b:ba:
                    aa:4b:e8:e9:b7:14:c0:b5:53:85:79:c0:44:31:8f:
                    ca:b4:ea:bf:a0:07:45:c2:eb:c2:79:34:e3:0a:92:
                    5f:3a:8a:60:96:52:35:84:a9:d6:c8:84:4e:8e:b4:
                    a8:2c:a3:8a:83:05:40:18:5b:aa:5e:7b:cf:ee:fc:
                    87:e5:b8:a6:12:7b:cd:33:90:54:b9:6d:bd:9f:95:
                    c8:f1:dd:7d:bf:61:dd:da:23:8e:d1:b9:28:de:fd:
                    b2:31:27:93:15:b6:a4:e8:8c:e8:97:a5:24:6a:4f:
                    b6:f4:45:11:62:f9:9b:e9:02:63:4a:9d:e4:f1:8b:
                    7d:f8:e7:03:cc:a9:70:66:d3:f6:4a:e4:7e:bf:fb:
                    3a:7d:78:2b:f0:32:ef:7f:1f:7a:ce:2d:e8:9d:fb:
                    e8:e5:4d:e3:bc:09:8f:b8:fe:77:b6:85:16:2a:5d:
                    e6:8a:f3:02:c2:3f:cc:14:2b:68:68:e5:de:b6:fb:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:F1:DA:4E:E3:B7:56:E0:D2:6D:BF:50:74:8F:6F:6A:3E:A8:95:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/C2F1DA4EE3B756E0D26DBF50748F6F6A3EA89585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/22
                IPv6:
                  2804:32f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265106

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:bd:77:d0:2c:63:b2:2f:27:22:68:f4:4f:40:cc:c8:8a:
         d8:48:e3:6e:a8:19:e4:3b:20:20:07:ce:88:9a:60:21:82:39:
         68:db:63:9c:0e:1c:26:81:89:af:54:7f:be:27:35:7e:08:e9:
         97:0a:0a:dc:77:50:92:2b:ad:84:54:48:f0:c2:9e:9d:f7:20:
         57:e1:23:8e:57:ec:b6:cc:e9:6e:e0:74:72:e6:12:54:17:0e:
         72:a1:39:8a:62:4d:93:6c:3e:13:7f:57:d3:20:ab:bc:5f:61:
         c4:09:ca:72:1d:92:d3:aa:bf:75:c4:f5:38:7d:aa:ba:65:c3:
         8e:58:f9:26:db:59:af:1e:13:7e:df:de:ca:ef:e8:54:34:27:
         43:09:f9:42:e7:e2:f8:c2:36:e0:2f:7e:9c:e9:b3:ff:b9:2f:
         a5:9d:22:d8:81:22:55:46:39:3c:10:1f:31:c2:3a:37:60:c1:
         b5:69:a1:cb:bc:7e:c9:f0:0e:6c:88:48:19:b7:cb:70:a7:6a:
         6a:86:01:92:34:5c:29:9a:92:1e:5d:a5:1f:d1:b8:f0:c3:86:
         29:1a:fb:3b:72:4b:04:ef:dc:4f:54:ca:05:37:3a:1d:65:b1:
         62:22:8b:97:81:a0:26:9c:ee:5b:37:ef:b9:86:c6:63:85:b8:
         b1:e1:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----