Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
File:                     DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer (raw, json)
Hash identifier:          L1vq9AqUAMkxy+XRCmZAWOGTeqaehGyxbUsOHm32yvk=
Subject key identifier:   DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1BA3FB1B287343111C2DE4F6721D75D66E66827E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 15:15:13 +0000
Certificate not after:    Fri 21 Feb 2025 15:20:13 +0000
Subordinate resources:    AS: 262942
                          IP: 177.154.16.0/22
                          IP: 2804:e38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a3:fb:1b:28:73:43:11:1c:2d:e4:f6:72:1d:75:d6:6e:66:82:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 15:15:13 2024 GMT
            Not After : Feb 21 15:20:13 2025 GMT
        Subject: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:a8:ec:42:09:7d:ea:90:e8:0a:90:9d:b5:
                    98:7e:49:9b:6a:9f:da:e3:d6:a5:41:34:65:6c:cd:
                    24:db:ae:56:ee:10:dd:88:50:fe:1a:cc:d8:f3:b1:
                    89:a4:72:e0:58:1c:1d:21:c9:02:42:1f:36:1e:b0:
                    d8:58:56:e0:b8:a2:58:3c:75:21:54:81:b8:04:2c:
                    02:a2:07:28:34:e6:1a:b1:51:34:73:a2:06:b9:85:
                    07:73:87:1e:86:44:c7:09:f2:ad:3c:69:b1:b2:b4:
                    e5:83:7b:2d:b5:29:13:c2:cb:fc:ca:f6:fe:f4:56:
                    19:27:8e:42:b2:c1:28:b7:bc:59:be:e4:fe:2d:fa:
                    8e:b9:40:47:04:47:71:9e:ad:b7:4d:3e:8c:5c:7b:
                    f2:7b:e7:36:7c:93:c1:84:06:8d:2a:84:7f:50:f1:
                    cd:3b:08:36:b4:f2:aa:4b:af:25:3b:45:ec:27:77:
                    8e:a4:50:9d:a7:b1:14:30:0e:b9:ac:17:33:80:2f:
                    00:b3:b1:7a:83:47:19:ba:7b:db:d3:63:7d:c2:88:
                    8c:46:86:ae:a6:c7:a2:e3:61:96:d1:22:8a:81:d9:
                    e1:12:18:16:0d:5c:81:87:fd:43:f0:f4:a4:e3:d0:
                    6b:04:77:05:c2:46:5d:69:09:fe:8e:20:27:44:a8:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.16.0/22
                IPv6:
                  2804:e38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262942

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:77:4e:c8:f8:eb:f6:8c:6c:96:93:55:50:3a:d7:e4:b0:
         84:d5:50:ed:95:04:87:d1:da:77:24:08:5d:31:99:64:b9:5b:
         08:12:55:c2:7a:02:bc:c1:7b:25:75:3a:af:30:49:ee:af:9c:
         ba:ba:d7:fc:fe:c9:9a:dd:91:37:67:3c:f2:c1:38:a7:3b:54:
         36:b6:af:16:b9:40:73:09:57:46:81:2b:3b:56:87:b7:50:66:
         57:ef:9a:f3:f4:59:1e:7f:b1:52:91:8f:d0:a7:71:f9:12:7f:
         0b:6a:cf:08:c3:eb:de:54:70:3e:1f:8e:8d:32:47:6c:49:0b:
         41:ae:92:7a:af:16:d5:d4:05:b1:20:9b:92:62:00:4c:ee:ab:
         bd:3d:5a:d5:7e:96:53:e1:c1:0e:11:1c:e3:9d:56:e5:ff:ea:
         7b:61:31:2a:a0:a8:f7:4b:ff:23:f4:24:7f:0f:41:c0:62:ab:
         dc:5a:b3:22:83:71:92:c1:98:d7:c4:59:70:7a:80:0c:52:7e:
         16:7a:72:38:3c:62:3a:7f:bd:3d:4c:76:93:4a:d8:31:ed:d8:
         b5:fd:54:ae:99:b0:4c:e0:de:15:d7:df:62:27:fb:94:44:83:
         d3:d5:34:48:9e:e6:64:8e:70:91:9b:38:00:a8:ab:76:44:79:
         fc:c4:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----