Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer
File:                     D41FBBD4BB9A705D55D26403EB508620E0DBC782.cer (raw, json)
Hash identifier:          sItLRfal3w+ZG+QdPeONsEO6SiQB7aKpnZehO1yQ6i8=
Subject key identifier:   D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       219946DA72948DA1126A7C7A7C235947FFCC71CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Mar 2024 13:16:40 +0000
Certificate not after:    Sat 29 Mar 2025 13:21:40 +0000
Subordinate resources:    AS: 269530
                          IP: 45.188.184.0/22
                          IP: 2804:660c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:99:46:da:72:94:8d:a1:12:6a:7c:7a:7c:23:59:47:ff:cc:71:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 30 13:16:40 2024 GMT
            Not After : Mar 29 13:21:40 2025 GMT
        Subject: CN=D41FBBD4BB9A705D55D26403EB508620E0DBC782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:b1:9b:84:a6:cd:f5:30:eb:60:dd:4e:30:
                    d0:77:2f:70:c9:cb:41:3d:65:aa:d0:c1:72:b1:b2:
                    bf:09:9a:b2:c5:9a:d7:dd:b7:a4:58:22:7d:46:47:
                    92:3f:07:4f:c9:e6:bf:11:05:06:9f:0e:1c:37:12:
                    62:84:fc:f0:e9:54:06:05:e8:f2:c8:9d:e8:b4:06:
                    f8:f4:27:54:e4:0a:98:16:10:52:7c:5b:af:64:25:
                    de:d9:ca:b4:64:37:a2:42:ab:0c:c2:1f:29:7d:b3:
                    18:84:d4:69:98:37:ed:05:95:58:30:a0:1c:1c:bb:
                    1c:88:f3:62:d4:fc:b3:ec:18:05:f2:2f:1d:d9:49:
                    95:cf:ef:f4:60:b7:eb:a4:42:a9:9d:37:7c:eb:fe:
                    70:f4:d2:c8:19:84:5f:52:db:a4:b9:11:51:eb:38:
                    ec:99:02:66:01:bb:0a:69:8d:3e:8e:5a:6e:cd:28:
                    df:5b:17:82:c0:b6:3d:80:b6:c6:a1:7c:ca:62:d9:
                    8f:43:ae:db:50:0b:bd:9e:eb:cc:a2:27:8a:bf:3b:
                    a4:9f:18:31:d1:b5:6e:8a:71:74:f3:6d:72:7a:e4:
                    2a:91:6c:ca:4a:68:7f:03:7c:9b:73:4e:76:0a:85:
                    3a:96:29:a8:ba:83:26:23:f9:e2:cb:8c:dd:98:3a:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:1F:BB:D4:BB:9A:70:5D:55:D2:64:03:EB:50:86:20:E0:DB:C7:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/D41FBBD4BB9A705D55D26403EB508620E0DBC782.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.184.0/22
                IPv6:
                  2804:660c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269530

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:20:e5:8b:69:86:23:d5:7f:95:77:06:7b:7b:05:5a:31:
         fe:2b:81:49:68:a5:5c:81:e7:55:ed:d6:06:10:19:b0:3a:79:
         ca:e4:41:ac:fd:ea:4e:ea:76:4d:c1:a6:67:83:50:60:52:d7:
         0d:43:c4:a5:0d:10:94:2d:be:b1:89:a9:33:c1:f4:00:b7:a6:
         93:cd:e2:6f:65:a0:80:dc:41:82:5f:7b:94:e8:96:42:8f:b1:
         c7:e6:32:04:17:df:90:73:7a:5b:3d:51:f2:b4:bb:85:c2:ad:
         b1:50:df:eb:77:5f:99:8a:c5:42:12:8b:03:b8:3c:6e:5d:c2:
         ce:f2:61:ce:1f:4a:2d:d4:ec:4b:89:10:f0:58:d0:ad:fc:4a:
         2d:60:33:de:73:5d:94:a8:f1:69:96:5e:5d:e4:c4:b9:f8:3e:
         27:73:fc:68:dc:0e:7a:65:bd:f0:30:29:a3:03:f7:d1:a9:ba:
         6a:0c:5e:4c:ae:51:b5:04:66:76:7c:a2:cf:0a:91:ec:2e:a8:
         5d:cb:7b:31:b2:fd:be:31:16:f4:c3:ec:a6:9c:77:62:6f:98:
         9a:71:92:6d:b9:2a:26:f5:3b:d3:72:8f:b6:9d:2a:16:c1:75:
         19:1f:e2:f4:0f:72:42:ee:88:ec:36:a5:0f:7c:b7:a2:2c:b5:
         ae:80:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----