Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D199E452DD16BC3504717F50CFCE5B2601483997.cer
File:                     D199E452DD16BC3504717F50CFCE5B2601483997.cer (raw, json)
Hash identifier:          0crVUbn1Ay0g72pvSqzSYFhHpTBFQATrnJU7FZeP3eo=
Subject key identifier:   D1:99:E4:52:DD:16:BC:35:04:71:7F:50:CF:CE:5B:26:01:48:39:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A7978062D459F8CBF2D0F3EB3715245E14F046B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/D199E452DD16BC3504717F50CFCE5B2601483997.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 15:22:31 +0000
Certificate not after:    Thu 13 Feb 2025 15:27:31 +0000
Subordinate resources:    AS: 273381
                          IP: 2804:8dcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:79:78:06:2d:45:9f:8c:bf:2d:0f:3e:b3:71:52:45:e1:4f:04:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 15:22:31 2024 GMT
            Not After : Feb 13 15:27:31 2025 GMT
        Subject: CN=D199E452DD16BC3504717F50CFCE5B2601483997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:fa:7c:0b:e6:80:47:16:87:66:e3:a6:bc:
                    4b:6b:43:64:aa:4e:e4:67:1e:3f:82:99:7f:8e:9b:
                    be:3c:1a:7d:cb:d0:1e:54:f5:d1:bf:2e:d1:02:ec:
                    d3:31:4c:7f:c4:c2:d4:d2:c9:7d:c7:76:a3:11:f4:
                    fc:63:29:47:96:b0:0b:5f:4c:32:a1:77:a2:cb:5e:
                    16:f3:54:b2:7e:3d:6f:2a:81:d8:7a:7e:20:c2:66:
                    fd:69:7d:cf:92:d5:60:17:84:a1:d5:7a:d7:c1:80:
                    75:d0:af:c1:8b:20:b5:de:20:3d:6f:41:b7:50:32:
                    7f:f8:a5:41:1c:2b:09:5e:37:a6:02:5c:71:3a:45:
                    10:74:28:51:d2:49:4b:0b:16:eb:8c:8d:46:26:2e:
                    72:c0:3a:a7:b3:b5:48:14:17:ad:6c:47:ac:6b:88:
                    6c:4f:ba:3a:85:6f:0f:a7:d4:15:5d:d8:11:49:f7:
                    70:0c:78:d6:f5:45:62:7b:33:95:95:6d:4e:09:63:
                    05:8b:4c:fd:cf:25:44:f9:04:3d:d7:90:65:78:0c:
                    84:2c:72:97:89:52:ce:02:5d:9f:65:85:d3:5e:aa:
                    1c:0a:25:e0:c5:05:3e:dc:60:c3:8a:2b:9f:c5:29:
                    97:5d:b4:5e:18:aa:e1:5a:45:85:2e:b0:98:0d:18:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:99:E4:52:DD:16:BC:35:04:71:7F:50:CF:CE:5B:26:01:48:39:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/D199E452DD16BC3504717F50CFCE5B2601483997.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273381

    Signature Algorithm: sha256WithRSAEncryption
         40:36:d9:9c:75:5c:4a:2a:2d:25:e1:d5:e1:75:f7:0a:ed:e1:
         0c:0a:4c:27:19:d8:c8:28:24:65:2c:c2:19:33:b9:1a:c9:b4:
         69:28:74:03:8b:d8:ff:f6:91:e2:b3:b8:53:e4:f6:98:09:a0:
         57:a0:77:0a:d0:78:d3:a3:4f:97:df:bf:13:8e:c5:ce:12:99:
         34:ec:35:7e:b2:6d:0a:d7:bb:7d:45:2a:71:ca:11:62:17:45:
         c7:a5:24:f5:ca:be:8b:2f:50:32:24:ba:6a:49:7f:93:98:91:
         25:87:1d:4f:d0:2a:74:d6:e5:22:6b:26:17:38:ed:ff:90:f6:
         ba:47:a4:b7:d6:91:00:d1:e0:c5:f9:2a:c4:5e:5d:d4:d8:05:
         dc:1b:f2:81:bd:39:69:6c:1d:2d:3e:b6:6c:a5:31:7e:9d:c8:
         0f:28:1f:d3:4c:5a:f4:27:d3:19:79:51:13:aa:85:34:95:99:
         a7:fa:59:e3:8e:af:51:b7:bf:54:6b:b4:9b:c1:4f:6c:ae:19:
         63:05:79:83:35:6d:a9:d6:fc:cd:68:17:8a:97:1d:2b:9f:67:
         46:34:3c:83:69:57:a4:ed:2e:33:74:c4:88:86:ad:2a:61:85:
         74:03:3e:d7:cc:1b:ee:31:54:74:35:21:14:93:c8:b4:bd:bc:
         b5:1c:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----