Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D835807A2809E495ACCC08BF63BDD444071C7563.cer
File:                     D835807A2809E495ACCC08BF63BDD444071C7563.cer (raw, json)
Hash identifier:          InfzoQ62bmsA4MUCNRLsEy+TEt8hH2vE6I1JxSZ9QcQ=
Subject key identifier:   D8:35:80:7A:28:09:E4:95:AC:CC:08:BF:63:BD:D4:44:07:1C:75:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FE8DE3FBBE592420EEFE8F21E7BA3FA1348D805
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 21:35:07 +0000
Certificate not after:    Tue 18 Mar 2025 21:40:07 +0000
Subordinate resources:    AS: 269553
                          IP: 45.185.192.0/22
                          IP: 2804:665c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e8:de:3f:bb:e5:92:42:0e:ef:e8:f2:1e:7b:a3:fa:13:48:d8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 21:35:07 2024 GMT
            Not After : Mar 18 21:40:07 2025 GMT
        Subject: CN=D835807A2809E495ACCC08BF63BDD444071C7563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:20:2d:a7:39:1c:e1:0d:b6:c5:f2:c9:ff:
                    9d:6b:4f:ee:c7:49:4b:cf:35:6b:9e:ee:a8:f0:7a:
                    4d:4e:28:9d:c7:ba:b9:30:cc:a0:17:99:06:74:7b:
                    c1:45:27:fb:d5:e4:5c:c1:75:75:b3:e3:e2:01:f6:
                    28:2c:31:bc:69:50:b3:74:8d:45:99:f4:4c:fa:8d:
                    a8:1a:be:eb:9a:e4:32:90:25:d4:0f:de:9f:83:48:
                    8b:c8:d4:ea:f4:c2:92:20:2a:0b:dc:5a:3e:28:c6:
                    c9:95:df:3d:0e:e9:c2:24:b8:9d:68:e6:f0:84:b5:
                    32:8f:df:eb:38:03:41:c9:36:1f:e2:98:a5:fd:04:
                    f1:02:c2:50:c5:f7:a5:01:2a:2a:6c:73:7e:70:90:
                    96:c7:53:25:23:be:53:12:6d:af:51:8a:55:c2:67:
                    ca:57:3e:b2:00:8a:d3:29:fb:9e:d3:0f:c4:ce:18:
                    56:a9:15:b5:b2:7f:58:05:9a:59:5f:76:3c:82:8a:
                    8a:64:c5:ef:19:56:f0:48:96:a0:42:c2:3f:5a:3a:
                    90:01:b6:1b:86:f2:ad:90:5c:fd:fb:9b:50:25:a2:
                    c4:68:4d:d3:09:a7:26:3e:5b:11:8f:4f:f6:38:21:
                    d2:31:5b:cc:1a:b8:ef:48:20:c8:72:2b:28:60:ac:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:35:80:7A:28:09:E4:95:AC:CC:08:BF:63:BD:D4:44:07:1C:75:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHwwTkyP8xNBQ5rfz27TrA4KepBRk64vemLdoZyHYizW/0/D835807A2809E495ACCC08BF63BDD444071C7563.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.192.0/22
                IPv6:
                  2804:665c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269553

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:68:ed:d8:66:90:fe:66:e8:41:15:47:eb:a0:ad:54:24:
         c6:e5:9e:fa:68:0f:33:f8:4a:fb:ba:bb:bc:2a:c7:40:ce:ee:
         b4:75:cd:c8:ad:1c:f8:80:e7:05:74:3a:24:52:d5:1f:73:c0:
         7a:e8:3b:55:fe:86:8d:07:bd:67:2d:d3:2f:a4:27:d0:ef:0b:
         ce:af:b2:12:ac:6a:95:e6:48:c4:c8:b5:15:22:1f:1f:fc:9c:
         c1:8a:65:29:eb:39:5e:31:25:be:22:eb:6d:bd:9a:c4:75:0d:
         c2:ca:6a:da:6b:3e:61:ad:1f:af:45:63:6b:74:2a:24:13:e3:
         79:01:6e:5f:68:8d:12:b0:33:ab:a8:aa:2c:f9:7f:cf:e5:3f:
         1b:9d:49:28:82:dd:07:fd:42:0b:52:e2:18:86:58:9e:f2:38:
         c1:a4:bc:6d:30:f3:61:7e:c6:90:2a:48:a1:22:7c:bc:fe:57:
         f6:e1:25:6c:42:92:08:f7:7c:59:0a:68:b9:f9:bd:f9:07:69:
         98:e3:0e:cb:69:11:76:3a:5d:c0:92:95:c6:bf:ab:ec:aa:5f:
         3d:77:8b:2d:6c:bd:c4:9a:13:0d:04:ea:e8:e3:53:8c:b2:b0:
         44:af:1d:b0:71:18:01:7b:17:65:5c:fe:d6:96:e4:80:68:1a:
         24:de:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----