Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer
File:                     C37CB2BE57C03AF3294ACFADE9632534F0696AAD.cer (raw, json)
Hash identifier:          pNeX4iZp6Wuxw6aM3Cpc51dqLitwO8vSaLa3iga4i0M=
Subject key identifier:   C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DD410B64DCD531DF41B7A9942A12EDA81D868D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 12:32:36 +0000
Certificate not after:    Thu 13 Feb 2025 12:37:36 +0000
Subordinate resources:    AS: 268761
                          IP: 45.171.148.0/22
                          IP: 2804:5a44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d4:10:b6:4d:cd:53:1d:f4:1b:7a:99:42:a1:2e:da:81:d8:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 12:32:36 2024 GMT
            Not After : Feb 13 12:37:36 2025 GMT
        Subject: CN=C37CB2BE57C03AF3294ACFADE9632534F0696AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:40:04:a3:9e:60:cf:bd:e3:35:8a:f1:c4:
                    86:a5:1e:4c:98:d2:77:a6:28:f5:8c:0a:51:46:ce:
                    8a:a9:1a:38:1a:e4:f0:a9:77:5e:af:16:67:1d:1a:
                    5d:8a:36:01:fb:4f:a1:9c:e4:92:5f:11:a9:c3:4a:
                    3c:c6:66:51:ef:aa:f9:a7:9f:f9:28:70:24:1b:a7:
                    33:27:e8:bc:9a:12:76:b3:cf:a2:7f:ab:6f:79:38:
                    83:2e:2d:af:52:d6:40:ec:8a:e2:13:65:c9:d2:e3:
                    90:ec:2d:20:06:22:67:b4:b2:3d:22:70:bb:11:74:
                    83:d8:98:1b:55:1c:67:4a:40:ba:5e:24:9f:ea:f3:
                    22:32:71:5d:ec:51:ae:33:7d:ee:0f:a7:0e:6c:1b:
                    26:05:61:49:b5:4c:5c:be:f3:be:7a:e8:46:77:ed:
                    5a:cd:06:44:9f:5e:dd:c9:73:06:fa:9a:7a:bb:42:
                    64:26:93:86:33:ef:b4:19:56:70:fd:9c:92:0d:00:
                    ae:36:25:c9:fb:b4:d0:43:bf:21:2f:f1:64:ed:f3:
                    d5:31:e2:bd:3a:3b:f5:ee:f6:1c:01:43:2d:11:81:
                    39:61:3e:d0:07:fd:63:87:35:60:16:82:94:a9:e3:
                    69:60:7c:27:3a:0c:b5:b2:72:4c:c8:85:aa:16:b6:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:7C:B2:BE:57:C0:3A:F3:29:4A:CF:AD:E9:63:25:34:F0:69:6A:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BB6SQScjiJE3JV2LRxgyvKFF9FfKa2BHtmbRNKMT5T48/0/C37CB2BE57C03AF3294ACFADE9632534F0696AAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.148.0/22
                IPv6:
                  2804:5a44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268761

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:33:c4:20:55:45:c6:13:72:ef:e5:e0:a9:9e:7e:39:a2:
         0c:d6:62:bf:35:c4:89:c2:be:d9:90:f0:81:cb:f8:d7:ce:7a:
         5b:94:29:66:42:f3:4f:98:47:ac:41:5c:b3:b6:d2:0e:ae:5b:
         5b:ad:bf:75:e6:61:19:c3:2f:73:48:17:8f:7f:ee:a5:78:5b:
         50:5f:4f:46:b1:8c:29:ef:f0:ee:0f:39:a1:e4:9e:5e:c6:13:
         d0:0f:31:da:a8:2d:47:15:98:ad:6f:10:4b:e5:63:47:fe:47:
         e6:bd:d4:82:0a:15:c4:84:e2:89:a2:ac:1c:b3:33:89:0b:c2:
         65:72:f5:dc:f7:23:d5:68:dc:5b:8e:7a:9c:54:4f:f0:43:f8:
         c9:bf:db:76:6e:24:c7:17:cd:aa:12:57:b6:bd:50:3b:dc:52:
         9b:98:3f:c0:d1:98:c1:e0:27:4b:e8:67:af:ba:b6:97:22:18:
         6a:f5:4a:40:0a:f5:8f:dc:23:d5:c3:70:cb:20:41:8c:82:e2:
         fc:30:90:d8:21:5e:50:e2:e9:41:1f:df:46:86:2b:12:03:36:
         a9:e4:45:e8:a5:6f:9f:46:6d:f0:fd:0d:95:5f:e7:4b:21:00:
         5b:1e:8f:dd:b2:87:c9:38:25:c0:19:1f:4d:36:b0:12:13:86:
         3e:3c:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----