Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer
File:                     D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.cer (raw, json)
Hash identifier:          jijsjHgsEaE8enbHAGwECiq51nOpWLv3tCvJLttWPuE=
Subject key identifier:   D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04ED8958FEE1D7D58F0442B77CD980FEA45A4DA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 13:32:33 +0000
Certificate not after:    Tue 07 Jan 2025 13:37:33 +0000
Subordinate resources:    AS: 273389
                          IP: 2804:8de8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:89:58:fe:e1:d7:d5:8f:04:42:b7:7c:d9:80:fe:a4:5a:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 13:32:33 2024 GMT
            Not After : Jan  7 13:37:33 2025 GMT
        Subject: CN=D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:03:06:d1:e7:6c:7e:08:91:05:45:2d:09:
                    71:47:d7:b2:04:1a:db:44:53:c0:68:75:45:c4:c5:
                    b9:86:66:f8:05:27:08:6c:b7:5d:19:cc:1a:45:4e:
                    10:f4:4d:89:8a:06:bc:b5:5b:b4:07:d6:dd:c3:e7:
                    5b:e6:4e:e2:10:d8:ec:88:ed:a4:6a:3a:a7:de:26:
                    b6:92:61:1f:70:da:9c:9c:de:c0:1b:8f:55:67:c4:
                    6e:02:4c:36:3a:50:18:d9:8b:68:39:34:aa:b9:96:
                    90:c6:a5:ff:c3:6d:44:50:dd:47:5e:80:59:5a:81:
                    a5:0d:12:da:f1:1f:79:33:08:95:36:7e:fe:c2:85:
                    a3:71:d8:ed:8c:af:78:09:d1:4a:c1:62:cf:b6:f4:
                    78:1b:dd:ae:0c:41:3c:05:04:38:ae:54:51:5b:19:
                    66:a5:ef:18:c6:1b:25:d3:8b:55:15:76:7f:fe:12:
                    4b:66:e4:77:5f:20:28:c5:1c:eb:6b:a3:04:a9:28:
                    bc:5c:2b:26:d0:4d:83:ce:08:ec:87:fe:d7:b4:1a:
                    a6:df:5d:16:3c:65:ac:ff:ad:64:46:55:7d:ce:bb:
                    76:8b:4d:27:fd:16:3b:5b:bb:9b:56:11:bb:04:03:
                    94:02:e7:dd:66:fb:4a:18:74:f4:bd:3d:0f:fd:55:
                    9f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:51:E6:FF:BF:AE:DF:E6:42:82:A6:CD:43:D0:F3:D1:50:74:CE:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/0/D051E6FFBFAEDFE64282A6CD43D0F3D15074CE29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273389

    Signature Algorithm: sha256WithRSAEncryption
         32:38:15:3c:82:74:06:0d:16:b4:35:0e:01:f9:9f:1e:68:f2:
         fb:6a:2c:5c:81:81:56:90:27:a2:3d:d0:74:ac:cc:ac:27:8c:
         f6:f0:a0:32:0a:a2:17:60:e9:e0:d0:f4:49:54:51:82:50:2d:
         c4:c5:a4:6f:15:ff:0b:ac:b0:97:be:ea:9b:f4:38:a2:44:5b:
         4e:09:9e:2d:a6:3e:25:b8:b9:f6:c0:1b:76:1a:a9:51:a8:64:
         6f:fb:56:68:98:3c:2a:13:1f:61:f5:de:f5:a2:a7:2c:d7:c6:
         08:4b:a6:6f:62:fc:84:af:85:ba:fa:0e:89:cf:c0:71:fc:bc:
         a8:4d:5d:38:da:d6:10:17:dc:fa:14:03:28:c4:cc:7d:75:79:
         d1:2d:f4:20:ba:c6:9f:08:b3:d5:dc:fd:62:5e:a5:29:de:91:
         63:9c:51:ed:02:33:c1:28:f2:1d:a7:73:a6:fe:c0:21:b8:55:
         10:6a:63:b4:cd:e9:d5:30:f4:87:ea:2c:83:d9:61:de:0a:c5:
         aa:ca:18:bf:62:f0:a2:f1:c5:ed:61:0a:fc:42:a8:25:43:a0:
         b4:4e:8a:4d:17:54:27:11:6d:ac:7c:26:1e:ed:d5:d4:6b:24:
         f7:e3:90:57:0c:2c:fb:48:74:4b:bc:85:64:e1:d4:4e:bb:fd:
         9a:77:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----