Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D42D29C9891BDE413C13732669E71A699D0E7E86.cer
File:                     D42D29C9891BDE413C13732669E71A699D0E7E86.cer (raw, json)
Hash identifier:          EqfaJDUsyjjemAmdN5VMEPB7Fb0BhdEwOE8AaVB97Ho=
Subject key identifier:   D4:2D:29:C9:89:1B:DE:41:3C:13:73:26:69:E7:1A:69:9D:0E:7E:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AF7A1F47D05E34D243C656B9B6ED399263CA2B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/D42D29C9891BDE413C13732669E71A699D0E7E86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 18:03:50 +0000
Certificate not after:    Mon 20 May 2024 18:08:50 +0000
Subordinate resources:    AS: 262578
                          IP: 177.84.32.0/21
                          IP: 2804:658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f7:a1:f4:7d:05:e3:4d:24:3c:65:6b:9b:6e:d3:99:26:3c:a2:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 18:03:50 2023 GMT
            Not After : May 20 18:08:50 2024 GMT
        Subject: CN=D42D29C9891BDE413C13732669E71A699D0E7E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:40:d7:7f:56:28:79:38:85:c9:f7:f6:7a:
                    17:83:1c:a6:a8:2a:a9:35:11:68:0c:19:61:68:86:
                    80:d7:6c:01:89:e5:c1:88:66:bc:04:a5:83:0f:23:
                    ac:ef:f0:62:34:49:8f:53:6a:dc:6e:88:f9:57:39:
                    02:d7:4b:95:c4:39:58:27:72:c5:a3:63:30:0c:bf:
                    ea:f2:d8:e6:cc:c5:e2:f6:61:44:09:4e:76:b9:db:
                    d0:f4:25:68:b0:af:e6:4a:d0:8d:e4:01:3a:d4:c0:
                    38:df:e3:34:9e:cd:a9:f2:49:8c:61:91:3f:4a:8c:
                    a0:65:60:a9:bc:fd:8c:35:a3:6a:b4:6e:1f:06:69:
                    5f:6e:b3:de:d2:ad:10:e3:b1:e1:1c:00:d8:33:4a:
                    41:fe:b0:92:d3:03:3e:5c:3a:58:9e:08:14:e2:45:
                    e0:87:37:79:ab:8b:c0:b8:65:47:84:2f:1c:ad:5c:
                    7b:f2:ff:4b:df:f5:20:b4:cc:f5:19:13:b4:89:e5:
                    f0:9d:64:d7:1f:1e:84:c2:e7:65:23:cf:84:34:47:
                    4c:f8:c8:d3:44:07:94:ca:c2:1c:93:a4:9e:5b:4c:
                    53:55:15:77:47:2e:04:87:52:34:fd:cd:76:8d:06:
                    24:84:cd:59:71:f2:56:6f:32:a7:43:23:17:59:00:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:2D:29:C9:89:1B:DE:41:3C:13:73:26:69:E7:1A:69:9D:0E:7E:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/D42D29C9891BDE413C13732669E71A699D0E7E86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.32.0/21
                IPv6:
                  2804:658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262578

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:2f:08:5f:4d:67:8c:35:13:35:b2:f6:aa:72:f3:64:00:
         04:59:d3:c4:d0:65:f9:28:a9:09:b8:e6:75:5b:80:56:65:66:
         8c:b5:a4:18:64:b7:3b:2d:98:62:cc:f2:5a:95:9a:0f:14:16:
         95:7d:0c:61:f9:85:f2:59:9e:7d:90:d7:9f:e3:5e:1c:b6:32:
         1b:87:54:14:9f:d3:41:b6:d4:6a:61:4e:21:6a:5e:06:a9:ae:
         c7:28:6e:37:1a:f3:37:e4:67:6f:af:19:1f:6a:3e:40:22:f2:
         ad:f2:ea:45:0a:71:69:45:4e:5a:e5:9b:1c:96:ab:ef:4b:b7:
         40:49:83:15:98:fb:92:a2:bf:57:b8:52:89:4f:ba:3c:31:22:
         73:bf:ff:72:ec:b1:0c:77:fe:44:39:b9:e8:dc:6a:64:f4:a9:
         d5:fd:f9:bd:5b:79:7e:c3:4c:04:3c:75:3c:c1:1f:00:7a:e2:
         a9:2e:9a:a2:16:24:c3:3b:39:8b:99:0f:5e:67:c1:31:3a:9f:
         bc:19:bc:f0:2e:5a:35:d8:b4:b4:bd:22:6e:7d:ee:5a:eb:08:
         31:f4:e2:2e:30:73:07:ab:8e:5c:5e:c8:2a:04:6d:5c:f2:2c:
         d6:4b:c7:1d:fb:a1:09:13:cc:a5:3c:ce:20:4a:c3:af:1b:62:
         ac:d8:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----