Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
File:                     D4043FF361E9F3F8626E866CD52D1D952930B170.cer (raw, json)
Hash identifier:          lpE2L1skO3GpFoSngqkyYF5vd86WrcJ2x7Pe6Hmtkz8=
Subject key identifier:   D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75906E6FBB1A94AEAF130F4922452F1395BB186A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 02:15:12 +0000
Certificate not after:    Thu 13 Mar 2025 02:20:12 +0000
Subordinate resources:    AS: 262687
                          IP: 187.87.192.0/20
                          IP: 2804:385c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:90:6e:6f:bb:1a:94:ae:af:13:0f:49:22:45:2f:13:95:bb:18:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 02:15:12 2024 GMT
            Not After : Mar 13 02:20:12 2025 GMT
        Subject: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:14:98:c5:55:79:5b:e0:94:be:b7:6c:c9:
                    bb:73:1f:89:df:05:48:29:12:77:c6:11:06:9c:21:
                    82:b8:e9:60:04:c3:dc:a6:eb:1d:29:e5:f5:52:21:
                    40:91:64:10:c0:10:4a:f6:a9:d3:d8:f8:68:b4:26:
                    41:d9:7a:30:af:c3:39:e9:d7:c1:41:b9:16:88:66:
                    5f:2c:2a:38:47:bc:24:82:7e:de:12:62:b2:4f:3b:
                    51:db:54:9c:d1:e7:b1:81:34:99:b4:8b:d4:8e:a3:
                    c4:25:5a:ce:75:94:64:7a:76:b9:52:43:de:e3:c9:
                    5a:79:85:a7:7b:56:07:1b:13:39:df:39:86:9c:2b:
                    7b:14:44:24:92:3c:08:b2:08:1e:5a:b5:ae:8a:a3:
                    92:62:7c:9a:3d:ad:d6:4a:c8:0a:56:c7:2d:d7:98:
                    74:d7:ee:cc:21:8a:53:0c:fe:c7:29:ad:4f:3e:5b:
                    da:f2:ef:0b:f3:74:45:a9:6b:3b:9f:64:68:4d:d4:
                    0e:f2:f8:8a:36:56:6b:15:ea:d4:d8:16:9d:d0:8d:
                    8e:77:87:19:34:ed:5e:02:7f:03:97:12:a7:b7:12:
                    fb:13:07:4d:7b:04:09:2b:f6:74:86:4b:7c:c1:5a:
                    d8:44:5c:82:99:f4:27:6e:cc:1b:07:ca:11:5f:cb:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/20
                IPv6:
                  2804:385c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262687

    Signature Algorithm: sha256WithRSAEncryption
         19:da:e8:a2:c9:46:5e:6f:c5:f0:11:02:6c:6e:09:f0:49:44:
         4c:b4:c6:7e:88:34:be:cf:4c:b6:e4:e6:83:0f:bb:a3:12:76:
         45:9c:d9:bf:5a:68:66:c8:c8:0c:43:57:25:56:b7:cd:8a:0c:
         05:80:1a:48:47:79:38:f1:4f:1b:2b:4b:61:b7:6c:87:10:b9:
         95:05:6c:75:12:ea:97:e1:e2:29:14:a5:1b:67:e6:62:a2:87:
         ea:2f:f1:48:3c:6c:f1:f1:ba:b6:48:73:99:0b:65:15:db:16:
         13:24:e7:b4:de:80:12:89:03:fc:10:48:2a:1c:61:03:28:a3:
         62:4e:7c:14:b4:8d:d3:76:57:d0:9c:41:db:0a:a1:52:05:13:
         40:38:17:23:2f:5e:5e:0a:7d:9b:b8:1e:91:88:af:82:0d:7f:
         e0:da:02:08:5d:21:b3:af:69:90:fa:1c:b3:36:8b:cf:a5:39:
         e8:9f:9d:0a:e0:20:a9:fe:14:e0:4c:63:51:a1:27:7d:7c:89:
         6f:24:9f:9f:00:bd:f9:b6:3f:c6:b3:10:a7:19:cf:88:cb:27:
         b5:36:1b:fe:93:07:5e:34:4e:73:e2:01:55:68:11:f3:ed:ba:
         b7:c2:ae:41:cd:50:a6:1f:ed:cd:ce:c7:dd:5f:2e:69:5e:43:
         87:dc:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----