Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
File:                     C5AD5C7C55718BD3536091127969815277D3DE7F.cer (raw, json)
Hash identifier:          Utj+4pJufLEMpDSB+hYv9XeTD93VI5iVWKIZc7fcuAk=
Subject key identifier:   C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0C73758B446F1BA2F203B809CB8C09285C0887BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:33 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:33 +0000
Subordinate resources:    AS: 268269
                          IP: 45.237.100.0/22
                          IP: 2804:4e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:73:75:8b:44:6f:1b:a2:f2:03:b8:09:cb:8c:09:28:5c:08:87:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:33 2024 GMT
            Not After : Mar 31 11:03:33 2025 GMT
        Subject: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:77:68:84:61:70:6e:0b:c4:02:23:bf:36:
                    02:4c:bf:62:ac:0d:25:50:30:7b:0c:18:bd:4e:ae:
                    c2:ca:35:5d:b4:0e:3a:ab:49:75:0a:05:15:54:1e:
                    c4:11:4a:6b:38:75:27:1e:16:07:9c:d7:53:59:44:
                    b7:fa:dd:eb:8a:db:84:35:aa:11:87:25:f9:25:3c:
                    c2:d8:7b:e7:4d:05:74:bf:b0:7b:ca:f9:2c:37:88:
                    ce:b5:c4:c4:66:3f:51:14:59:ad:ac:2b:e5:11:e9:
                    71:43:28:69:04:2e:a7:99:94:bd:05:8d:47:59:be:
                    df:d6:e3:36:b7:60:24:76:3c:b9:42:c3:88:6a:9e:
                    2f:6b:0e:b4:93:57:42:4c:1e:b5:18:4e:d2:3a:d6:
                    21:50:62:3f:d4:75:3a:42:0a:6c:15:52:8b:50:84:
                    20:4e:1b:51:73:72:22:eb:86:c3:f5:83:76:de:19:
                    3c:e9:fc:8a:8a:84:91:a5:96:17:1e:6d:03:7c:b5:
                    6e:3c:bc:d3:f6:65:14:18:b0:b5:51:ab:27:52:b8:
                    ee:b1:d9:71:b5:4c:28:fa:43:3a:9a:7c:89:ed:18:
                    10:ee:3b:e8:00:53:a2:a4:51:2a:42:7e:be:a5:8c:
                    54:b6:8e:a0:fb:8e:55:33:f0:7c:63:0b:a0:2e:3b:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/22
                IPv6:
                  2804:4e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268269

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:ba:af:7f:8c:c4:00:e6:57:41:6a:9e:92:a3:6a:cc:76:
         b4:03:48:67:1e:06:34:10:3b:c7:05:0a:41:90:3e:35:74:a5:
         60:e4:b8:12:3c:e8:fe:b3:0c:3e:5c:9d:48:8c:c6:b9:f8:55:
         b0:6f:a5:f8:2d:6f:94:68:70:2b:a9:63:2b:ae:28:ca:72:b5:
         f8:a8:67:14:7b:ee:a7:2f:10:ad:8b:ed:9c:ea:d7:b1:14:03:
         1e:54:2f:30:0c:f1:07:fe:78:c9:3f:3f:92:da:28:5a:62:7b:
         9f:6e:03:0c:42:b9:47:f8:0d:76:22:f2:c3:d3:fb:a3:d8:60:
         63:de:74:d6:9d:bb:3e:cb:ef:a6:1e:47:a8:84:b1:e8:11:2c:
         3d:a6:e1:1d:c5:f8:52:da:38:23:6e:34:42:c2:bb:a1:42:c2:
         55:6c:c3:8f:de:dd:05:7b:b8:21:9b:7f:43:ff:b1:b0:f1:e0:
         f0:90:55:77:b0:18:ac:0a:f4:f4:79:32:db:2c:b8:7e:83:9a:
         b7:cc:52:74:8e:67:fb:9c:f6:2f:bf:9e:ff:06:01:78:bc:4a:
         dd:93:12:be:18:c1:1e:b5:0b:b9:80:4f:ab:8b:af:af:c7:21:
         da:a2:0a:0f:19:57:a7:db:40:c2:fe:89:58:5b:09:29:f9:e2:
         b7:4a:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----