Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer
File:                     CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.cer (raw, json)
Hash identifier:          g6u3fNedPXCfzyFne52UGSfjY+9FCUSnxECreX3crPc=
Subject key identifier:   CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14CF7513F40F83698E450319FB2218734A4B2B7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 19:39:43 +0000
Certificate not after:    Tue 31 Dec 2024 19:44:43 +0000
Subordinate resources:    AS: 267610
                          IP: 45.70.248.0/22
                          IP: 2804:4438::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cf:75:13:f4:0f:83:69:8e:45:03:19:fb:22:18:73:4a:4b:2b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 19:39:43 2024 GMT
            Not After : Dec 31 19:44:43 2024 GMT
        Subject: CN=CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:a1:f2:50:ad:a7:f0:1d:08:21:64:bb:69:
                    9f:e2:cc:07:bb:42:05:89:5e:d2:74:84:a1:87:b1:
                    87:99:a8:f0:2d:c1:ea:0c:85:dd:8a:4b:ba:5f:bb:
                    f0:38:0a:cf:c7:0b:0f:e6:2c:44:7b:d6:82:e1:60:
                    44:c6:8d:66:e6:dc:ce:e7:6f:1d:ce:fd:dc:6f:df:
                    1e:8c:8a:d5:e8:bd:3d:dd:38:a4:b9:a5:40:31:cb:
                    28:fb:71:85:f0:35:42:a3:3b:9d:03:a9:b6:43:27:
                    11:b8:21:a6:40:12:c7:c6:65:a0:d3:c5:ad:47:f7:
                    35:ce:ec:b1:bd:7c:81:ab:79:b4:58:42:0a:51:56:
                    54:92:2a:4a:19:3a:d7:a3:67:9f:9d:00:2a:f0:af:
                    2e:0e:61:5c:58:9a:fd:0d:88:3f:c5:ef:a3:b4:6c:
                    cc:68:6e:2d:41:74:93:54:f8:b0:65:9d:43:35:b1:
                    ee:e1:2c:7c:28:04:6b:e3:d1:2b:5a:c8:01:0c:f1:
                    fb:8f:66:8e:f1:78:90:3a:44:40:a2:d4:27:78:a3:
                    d1:ea:9f:02:66:ad:98:93:b0:25:61:04:d1:4f:bb:
                    b7:59:ee:a6:f9:3e:0a:8e:4a:fe:c9:56:2f:59:30:
                    74:02:5a:4d:d8:36:1b:1b:ba:17:fb:12:78:93:f5:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:9A:4E:28:9A:0F:1C:A3:1B:E0:31:4A:93:BF:DC:01:DC:EB:0E:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/0/CE9A4E289A0F1CA31BE0314A93BFDC01DCEB0E0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/22
                IPv6:
                  2804:4438::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267610

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:4d:81:68:c8:70:89:b9:9a:ca:88:d6:e7:ef:32:67:90:
         35:82:04:51:89:3b:95:7f:82:46:f9:b2:51:03:4f:4a:c3:fc:
         23:64:43:7a:2b:ad:f2:e3:ec:3b:72:bb:6c:07:4c:dd:c6:d2:
         09:a4:56:37:df:4e:ae:71:f8:5e:4b:c7:28:af:19:44:aa:0a:
         5b:e3:36:17:7b:c7:8a:1f:a9:6f:27:2b:f1:3f:80:47:93:78:
         b5:d6:0f:7f:9f:0a:d3:28:a4:f5:9a:30:9e:6c:56:ee:2b:72:
         20:2e:fc:a4:bc:67:41:c7:ad:80:88:2f:d1:7f:64:62:88:be:
         9f:78:63:8c:0d:8e:fc:a0:37:ea:f8:d0:20:f5:b7:78:b4:41:
         78:31:c6:7a:cd:cb:44:a2:4d:fd:5c:59:b0:9a:07:f9:6c:47:
         cf:e2:d4:55:f1:72:52:55:1d:e1:2b:83:a8:8d:03:d4:15:28:
         f3:78:fa:1a:61:20:dc:c2:6a:df:c3:04:f9:64:28:b7:74:40:
         d2:b9:bf:1d:44:e9:87:d1:3e:c1:06:2b:ab:c3:64:7b:1c:41:
         fd:f7:1a:5a:d1:07:f0:ff:5f:e8:02:5d:d0:31:97:de:9e:db:
         b0:1b:6e:44:54:1f:c4:be:f5:36:c5:1e:fc:76:53:de:85:bd:
         35:91:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----