Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer
File:                     D4E7FC5209A271F113E974568598FBFD5E252646.cer (raw, json)
Hash identifier:          9LKqaJchQhaq631OEfOfL1bzD6o264AKckuWSBgq4w8=
Subject key identifier:   D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14F98A62B319B775007ABA97A1AF26DA6BF0631F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 14:02:31 +0000
Certificate not after:    Mon 10 Feb 2025 14:07:31 +0000
Subordinate resources:    AS: 267312
                          IP: 45.233.128.0/22
                          IP: 2804:4b88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f9:8a:62:b3:19:b7:75:00:7a:ba:97:a1:af:26:da:6b:f0:63:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 14:02:31 2024 GMT
            Not After : Feb 10 14:07:31 2025 GMT
        Subject: CN=D4E7FC5209A271F113E974568598FBFD5E252646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:73:57:d3:18:f4:d4:9c:6a:8c:0d:57:9b:
                    ff:61:aa:d3:dd:a7:85:2d:0e:01:a6:ce:a6:0f:3b:
                    5a:47:79:c1:0d:9f:99:8f:0e:4e:1e:7c:c2:68:16:
                    c3:69:17:df:a3:09:d8:0b:b8:5d:de:8a:9b:a6:ef:
                    3c:3d:51:8d:88:fc:7f:de:7e:9f:30:3c:14:9d:ae:
                    48:de:a4:a8:83:b9:4b:da:de:87:93:d3:0b:ed:db:
                    56:b6:db:cd:09:a6:d3:d7:e8:2e:59:e1:d8:2b:39:
                    82:32:3b:a6:4b:34:64:86:91:bb:cb:ad:c2:61:a0:
                    28:79:50:df:b2:ef:47:a0:62:18:c0:d6:7a:3e:88:
                    dc:b9:3d:ba:bf:fc:bd:c7:97:aa:c0:1e:7b:5c:86:
                    f2:ce:33:43:cc:b5:4a:76:21:cb:12:9c:50:05:7d:
                    93:54:00:a5:27:9d:33:63:e1:27:b5:8b:be:7a:06:
                    bc:2d:df:ee:7c:86:c5:14:ed:f6:f9:f5:f8:94:65:
                    bd:3b:d3:01:fc:49:4c:fc:bc:c2:56:67:bb:47:35:
                    6b:b3:a1:68:74:aa:3e:55:a4:55:93:a8:82:72:5b:
                    38:76:c5:11:1d:81:45:54:14:0f:d9:29:ac:e7:d0:
                    ae:8f:5d:3d:1a:20:4c:9f:5c:20:26:b5:0f:0c:73:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.128.0/22
                IPv6:
                  2804:4b88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267312

    Signature Algorithm: sha256WithRSAEncryption
         44:54:8c:b0:41:29:58:00:ff:50:82:0a:61:6c:40:45:ef:7b:
         3a:24:f9:32:19:0f:da:9b:61:34:4c:d0:cd:15:e5:38:69:cd:
         43:de:57:27:d3:19:a5:0a:5f:f3:75:b3:08:a2:d8:5f:d5:5a:
         33:f4:69:d3:b3:6a:71:48:d0:3a:70:89:a3:7f:97:d0:60:a0:
         32:58:d8:35:fb:59:de:82:87:22:1a:3c:03:71:a0:d7:03:01:
         a6:6a:df:05:bc:f6:84:5d:c8:b0:ce:24:31:a3:44:d6:a9:29:
         20:d0:b8:8f:f9:0e:85:8e:bf:a2:7d:82:f8:6b:97:44:1a:d4:
         9b:62:32:22:93:79:9d:1c:5a:77:81:a4:34:4f:23:ce:3d:30:
         f5:ae:0d:b8:28:53:4d:ab:d5:c3:9a:ab:5e:a6:3e:db:46:f5:
         12:21:05:dd:ff:5f:79:dc:0b:0e:28:c7:b4:75:7a:62:74:d4:
         95:ab:28:e6:86:72:97:18:90:37:36:48:70:a2:29:0c:5d:6e:
         a8:36:ad:cb:8e:e7:35:ad:fb:69:f5:15:14:8a:32:4e:fe:ff:
         3c:52:6f:e6:fa:68:8d:d9:88:ac:7e:34:fd:d0:23:9b:a2:64:
         b0:45:82:d0:5b:3e:8a:9a:28:01:2c:24:8f:6b:1f:6f:cf:4b:
         12:f6:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----