Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE138B642DF1CA32ED81973E2984F21F40D85813.cer
File:                     CE138B642DF1CA32ED81973E2984F21F40D85813.cer (raw, json)
Hash identifier:          xhRQtF86c8dipLxgD9/eoX5betoI2euGmzf+jJlopXQ=
Subject key identifier:   CE:13:8B:64:2D:F1:CA:32:ED:81:97:3E:29:84:F2:1F:40:D8:58:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B800CA249931A128F0A147665C9C04F8BE224BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/CE138B642DF1CA32ED81973E2984F21F40D85813.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 19:36:57 +0000
Certificate not after:    Thu 13 Mar 2025 19:41:57 +0000
Subordinate resources:    AS: 267083
                          IP: 45.228.244.0/22
                          IP: 2804:47e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:0c:a2:49:93:1a:12:8f:0a:14:76:65:c9:c0:4f:8b:e2:24:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 19:36:57 2024 GMT
            Not After : Mar 13 19:41:57 2025 GMT
        Subject: CN=CE138B642DF1CA32ED81973E2984F21F40D85813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:59:93:c6:8c:4e:ca:65:e8:ca:d6:cf:45:
                    16:5e:07:6a:08:5e:28:2f:32:20:b5:71:04:83:c1:
                    52:49:65:6e:b1:70:a0:7a:83:e2:7a:3a:25:57:71:
                    c2:51:f2:8c:63:a2:61:be:ec:76:30:2a:69:79:81:
                    fb:04:a0:01:b4:ea:fa:3a:7b:e3:40:e3:a1:27:7d:
                    6a:22:84:c8:e2:9c:6b:9e:da:a7:e3:b8:73:11:cf:
                    b8:f2:76:7e:4d:20:0a:31:e3:63:78:f7:2b:80:7c:
                    a3:7e:2d:c8:f0:38:c2:51:b6:ad:99:e3:c3:e9:20:
                    47:20:24:25:fd:84:ad:1d:2d:b0:9f:28:3b:a7:b7:
                    35:cc:6f:08:30:6b:31:2c:ee:97:15:c3:93:bd:c1:
                    98:01:24:e2:22:bc:ce:f7:cc:d0:50:ba:d5:8c:15:
                    ba:42:59:4d:fd:98:3e:b0:5f:f7:ba:55:5c:e8:84:
                    07:0c:13:c7:32:8c:29:33:e0:8c:9e:91:06:0d:2b:
                    3e:87:b2:a5:40:05:15:29:fe:82:8e:64:26:a5:a7:
                    2b:6c:18:d7:6f:1f:68:d1:6b:43:ec:b1:b0:01:8c:
                    19:26:43:b1:91:b9:7b:ba:26:08:fb:8c:de:49:13:
                    0a:ac:9d:cc:c6:0b:f2:2c:4b:48:53:74:36:08:13:
                    63:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:13:8B:64:2D:F1:CA:32:ED:81:97:3E:29:84:F2:1F:40:D8:58:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/CE138B642DF1CA32ED81973E2984F21F40D85813.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22
                IPv6:
                  2804:47e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267083

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:61:4f:8a:77:cd:94:6f:0b:c7:fa:12:c8:a5:b7:fe:93:
         2d:c3:e9:92:f0:21:3e:89:50:13:03:2c:3f:1f:9e:2e:ce:0d:
         d4:31:65:dd:75:fa:03:b3:db:52:12:81:8e:4e:ab:80:c7:5d:
         93:82:50:f0:d1:73:03:30:6b:22:29:fa:cd:74:7a:63:0b:f0:
         0a:88:f8:67:e5:ba:05:3f:1c:15:89:43:fa:a3:1f:99:88:e1:
         ab:c1:3c:78:28:7a:18:42:00:16:95:29:c9:e9:0a:a3:5b:2a:
         04:67:7a:d7:07:08:64:d3:7e:20:00:0a:4b:05:76:6a:73:34:
         47:3e:4c:1d:36:40:d8:c3:e2:62:e2:1f:59:34:70:b3:c2:2e:
         64:36:96:3f:ea:a7:41:49:fc:e7:a9:b2:4e:47:ff:0f:53:67:
         df:cd:43:76:5f:3f:db:7e:b4:d2:4c:51:f5:c6:8c:40:cd:69:
         43:77:70:8c:cf:a6:9f:d8:de:92:fa:d1:3b:54:f7:26:1f:25:
         58:42:a1:7d:a6:e5:2e:f6:1f:bc:80:ee:9f:6c:66:6b:1c:a7:
         72:6a:d4:21:a2:5d:c1:b0:0b:26:47:e4:f6:cb:79:2b:65:f8:
         f8:90:dc:5d:14:ec:63:4c:d5:4c:43:39:1f:19:c8:da:69:9a:
         87:a8:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----