Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.cer
File:                     D436C26BC53142761B397F4B5DE3C0E21F27A199.cer (raw, json)
Hash identifier:          KD8YsTSIhdCrQvByXy/hw7EOG7vpbPrkQjD9TEfRZjw=
Subject key identifier:   D4:36:C2:6B:C5:31:42:76:1B:39:7F:4B:5D:E3:C0:E2:1F:27:A1:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26D32979AA6A5286867907CA9E86433CB90AD958
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Apr 2024 06:24:53 +0000
Certificate not after:    Sun 06 Apr 2025 06:29:53 +0000
Subordinate resources:    AS: 269302
                          IP: 45.182.164.0/22
                          IP: 2804:6288::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:29:79:aa:6a:52:86:86:79:07:ca:9e:86:43:3c:b9:0a:d9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 06:24:53 2024 GMT
            Not After : Apr  6 06:29:53 2025 GMT
        Subject: CN=D436C26BC53142761B397F4B5DE3C0E21F27A199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:ae:bd:3f:f9:45:ca:4e:a6:a2:7e:8f:81:
                    ca:8a:0b:8c:30:08:19:84:93:91:2f:2e:f0:ff:88:
                    bc:2e:a9:15:b5:72:93:e4:e9:9c:f2:5b:83:89:6d:
                    5e:df:4b:65:59:6c:60:00:af:6e:7a:3d:9b:4d:95:
                    de:47:0d:9b:90:96:08:e5:38:2f:a3:26:9f:c3:3c:
                    ce:89:0a:d8:91:7d:2a:92:64:0a:fe:f1:cf:6d:80:
                    e8:54:74:a8:d4:86:b0:61:3b:7c:8e:d0:22:0e:63:
                    c8:d5:42:66:d4:c5:42:91:ab:68:bf:63:e0:48:8e:
                    bc:5a:e6:49:cc:dc:f5:07:7a:f7:c7:46:34:59:03:
                    64:17:1c:08:a7:34:2a:b0:04:ee:4f:c1:68:2e:72:
                    54:44:0e:d2:9c:21:df:49:19:36:ab:ae:40:76:23:
                    0e:9b:37:26:1a:98:b9:34:c2:0c:fc:52:fa:93:06:
                    46:82:81:f7:f0:79:7c:da:36:95:1c:06:ca:57:d0:
                    c3:42:7a:25:e5:e1:9f:c4:f7:1d:f2:5d:3a:3f:da:
                    2e:c1:87:e8:58:91:03:6c:5c:7b:50:9f:0a:6f:c3:
                    fa:ec:3b:c5:84:19:52:bb:00:36:9b:41:fb:66:66:
                    c8:d4:1e:4a:ce:67:41:af:bf:28:0d:a7:85:9f:94:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:36:C2:6B:C5:31:42:76:1B:39:7F:4B:5D:E3:C0:E2:1F:27:A1:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.164.0/22
                IPv6:
                  2804:6288::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269302

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:9d:a9:ef:52:de:4a:af:2c:65:b7:16:30:e7:11:c5:0e:
         52:1b:b0:23:f8:74:f6:b9:12:5f:3b:51:1a:7b:bc:28:e9:96:
         00:83:8f:1e:e5:54:18:4c:b2:f5:00:5a:e7:c6:06:e3:7d:0f:
         6d:f1:bb:35:a5:32:8b:88:b9:5b:ea:7d:cf:84:9b:0f:7f:24:
         e6:83:92:40:81:65:f4:43:59:d5:ef:23:cf:c9:e8:20:ff:94:
         4d:3b:20:b8:a0:ab:4e:84:d9:4c:9b:7e:83:68:bc:1c:66:85:
         c0:9e:96:cf:d5:3e:e5:b1:a5:aa:bb:3d:ff:bd:b2:08:e9:00:
         99:60:0f:3c:51:eb:0f:be:d8:80:35:da:82:3c:b0:29:6b:cc:
         3c:89:90:99:a5:13:c5:e4:61:c8:63:2b:2e:5a:ba:03:17:cf:
         4e:b7:44:30:a5:c5:51:4b:09:70:28:08:60:71:c3:1e:de:cd:
         27:a5:eb:d5:b8:70:d2:d2:1f:ac:d6:26:11:a3:32:1b:c7:db:
         28:c8:d0:29:ed:36:1d:8b:6f:df:15:4f:a9:c1:71:43:ef:ef:
         ea:e5:03:66:36:3f:9f:12:b0:15:fc:03:60:46:13:f6:3b:08:
         ec:39:5a:ae:f4:d1:64:2d:fd:b2:f1:60:4e:c8:c3:c6:f0:7f:
         66:2c:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----