Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer
File:                     D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.cer (raw, json)
Hash identifier:          uf3+XrwzOoaAsELbw39N+3j/tgsb2VpPR49qSCH/K7s=
Subject key identifier:   D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21D66DCA76B18666D58C8CC0DCC7CE04CBADF174
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 15:19:48 +0000
Certificate not after:    Tue 11 Mar 2025 15:24:48 +0000
Subordinate resources:    AS: 266272
                          IP: 170.78.148.0/22
                          IP: 2804:3528::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:6d:ca:76:b1:86:66:d5:8c:8c:c0:dc:c7:ce:04:cb:ad:f1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 15:19:48 2024 GMT
            Not After : Mar 11 15:24:48 2025 GMT
        Subject: CN=D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:5d:63:30:97:3f:52:07:1f:ba:40:84:3a:
                    04:98:45:a6:f0:ee:37:c8:5c:d5:fb:08:69:20:b3:
                    ce:56:55:56:7f:77:8a:2b:fb:41:b5:f2:ce:d3:0e:
                    a8:cd:11:4a:e5:a7:77:f2:c9:ae:46:80:27:76:f7:
                    be:ad:85:03:5a:ba:70:d5:6e:63:f1:31:83:83:f9:
                    55:1f:9a:00:82:9e:c7:2b:da:b4:a5:f2:77:ce:c4:
                    f8:13:58:2e:56:5f:7d:13:4b:b4:81:12:60:3b:8a:
                    d1:a1:b6:50:94:5a:67:20:44:6e:2c:93:a3:85:cd:
                    03:34:35:f6:f6:ec:7a:a0:de:f9:ab:61:19:5a:10:
                    fb:c7:1d:3d:4c:69:5e:43:4d:ad:53:60:22:23:65:
                    c1:b3:73:51:68:af:2b:58:9e:8b:af:8a:f1:cf:19:
                    d9:43:2d:94:7f:d8:36:8b:b7:b0:33:d0:99:a5:95:
                    a6:51:65:13:6d:6d:7d:a9:ae:b8:e8:67:2a:07:db:
                    2b:99:c5:65:00:49:2d:90:dd:5e:2a:3e:39:42:39:
                    6b:51:63:9f:3a:63:6b:b5:0f:9d:36:61:b1:62:e5:
                    f1:eb:3b:4c:73:ce:25:65:28:12:fc:b7:e9:b3:26:
                    d5:6f:d4:3a:53:e9:7d:14:9e:2b:e9:f5:ff:20:c5:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:15:D7:5A:9D:7F:3B:0C:E1:E1:5C:23:89:B2:03:A2:94:4D:9C:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bk8MvfiHfcGG737DPUfJXDRn9ryqms3yAycDwe4BPrpV/0/D415D75A9D7F3B0CE1E15C2389B203A2944D9C8B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.148.0/22
                IPv6:
                  2804:3528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266272

    Signature Algorithm: sha256WithRSAEncryption
         22:47:97:a6:a1:95:54:25:c6:69:fe:1b:c7:27:a3:b1:84:33:
         ce:ea:2f:1d:96:fc:f5:75:e6:1a:94:c5:8d:d4:f5:88:a0:01:
         2f:95:15:41:12:ec:92:ef:d2:79:4b:04:a0:6b:02:d2:7c:31:
         05:47:5c:9f:df:16:00:9f:b9:a5:6f:2c:9c:1b:3e:64:d9:d5:
         f5:ee:69:48:8d:02:55:c5:c2:80:5d:3a:44:31:96:04:d9:c0:
         17:cf:1f:f5:52:b4:42:13:3e:47:8a:ae:52:1f:75:74:55:0c:
         a4:0b:39:7b:ba:8a:0b:45:e9:ac:a5:9f:af:5e:84:d9:15:56:
         dd:08:a9:63:d3:40:32:32:ff:3a:02:f9:70:88:12:20:68:a9:
         d6:a0:fd:20:9a:0d:d7:d2:2d:19:3f:38:7e:d0:d2:8b:27:f9:
         e8:34:11:44:c8:03:25:83:1f:05:bf:55:6d:83:54:74:96:48:
         88:66:d0:5a:1f:f6:5d:a9:fe:87:02:49:5b:28:3d:42:70:e4:
         b1:6c:20:6a:86:c1:23:13:2b:b1:82:c4:e0:0d:80:cd:77:02:
         14:96:19:29:8b:21:3c:68:e5:e2:de:dc:97:e8:7e:c0:73:b4:
         d0:73:d9:85:31:b9:c8:78:99:f6:4f:3c:26:b0:8f:ff:75:0a:
         2b:91:bc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----