Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer
File:                     C514D08EB668AD6D569B52F363DFFB0D6D5BB212.cer (raw, json)
Hash identifier:          XSm1SqJexDEq4NJ/jNWhjSdkYAMsJkI/qgEwvNpJzJI=
Subject key identifier:   C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AD6854DD0B288E4DCE58DCA0FDB734249899901
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 20:05:20 +0000
Certificate not after:    Tue 04 Mar 2025 20:10:20 +0000
Subordinate resources:    AS: 268858
                          IP: 45.174.160.0/22
                          IP: 2804:5b9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d6:85:4d:d0:b2:88:e4:dc:e5:8d:ca:0f:db:73:42:49:89:99:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 20:05:20 2024 GMT
            Not After : Mar  4 20:10:20 2025 GMT
        Subject: CN=C514D08EB668AD6D569B52F363DFFB0D6D5BB212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:bf:f3:f5:83:59:f4:79:d0:c8:ed:36:e5:
                    11:ed:20:d6:54:88:b5:e8:c9:a4:fc:13:17:c7:5f:
                    61:fd:89:e3:e4:38:65:60:bd:70:46:31:be:dc:e8:
                    d2:9f:d2:d9:3f:5d:b3:c4:d3:39:9a:1c:49:d5:dc:
                    0f:b3:64:da:ff:3d:6f:db:f9:83:52:f8:f4:87:29:
                    4d:c5:c9:e6:e4:57:c1:15:9b:ed:14:e6:0b:ab:15:
                    48:c9:3d:59:2a:47:ca:82:fa:e8:4f:32:47:57:9b:
                    59:cb:e9:90:79:ee:4b:39:78:48:d1:f3:9a:a6:44:
                    6e:53:46:96:4c:56:27:bc:69:cf:a5:08:21:4a:c7:
                    fd:d4:95:7f:30:ad:9c:d9:38:53:62:d9:bb:0b:4e:
                    ce:76:de:1b:0d:e3:4a:2a:3b:ad:24:fa:0d:67:91:
                    82:31:5d:42:19:08:83:7c:02:ca:92:c7:74:92:49:
                    9b:81:73:13:f3:75:90:b2:5f:ab:11:67:7c:33:35:
                    74:20:92:12:c0:32:d1:51:3f:da:ba:76:3c:ed:d8:
                    06:d6:3a:bb:81:4e:48:5e:7b:e6:10:b9:f3:ca:25:
                    12:d9:8e:69:7f:b6:c4:29:ce:96:97:22:e0:08:80:
                    01:f3:25:80:58:7e:9d:f5:9d:a1:78:d1:7c:5d:a0:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:14:D0:8E:B6:68:AD:6D:56:9B:52:F3:63:DF:FB:0D:6D:5B:B2:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gcm3ibAtBdnkt1YDk9wzy6dB6YUazf8RKSgULUPzGaBy/0/C514D08EB668AD6D569B52F363DFFB0D6D5BB212.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.160.0/22
                IPv6:
                  2804:5b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268858

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:eb:1d:2d:2f:15:99:4c:75:9d:90:88:52:19:de:d0:75:
         ec:b3:f0:31:49:c0:a4:22:16:f1:d2:f0:f8:90:b4:e2:74:cc:
         19:a1:b5:11:ba:5e:62:14:2b:44:9e:b2:fb:3c:c0:b6:40:85:
         37:78:ee:fc:12:b8:a8:09:a5:58:10:82:65:f0:8d:65:13:7f:
         cc:02:18:58:b8:bf:9c:71:c0:13:8d:00:83:2b:ec:15:e2:c3:
         a0:01:56:a4:77:92:82:34:58:df:0f:f3:78:39:1d:44:43:29:
         23:9c:af:8c:33:ba:3f:58:d1:4f:10:be:69:ce:85:2c:01:07:
         e0:aa:06:17:59:80:10:91:46:71:80:e1:0c:5d:89:9b:5f:c0:
         97:a8:ec:a7:7b:1b:8a:b3:2e:4f:e0:51:49:5c:34:4d:c6:70:
         59:76:17:75:68:a2:74:04:71:51:75:a2:dc:fe:7e:04:ff:23:
         cc:75:aa:b4:6c:c8:d1:eb:20:a2:66:5d:db:82:c5:45:b3:21:
         6d:fd:2a:f4:e6:67:9a:cd:b9:8f:02:a8:54:d0:48:50:75:9c:
         76:6d:fa:95:da:f0:76:7c:02:f3:75:33:4c:6b:be:a0:48:47:
         a7:37:57:2b:51:02:f4:68:14:9c:87:bd:ab:90:b9:c3:9b:fa:
         0c:63:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----