Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer
File:                     DEBABA97575B22EB79CB56298FD27EB827D57CE0.cer (raw, json)
Hash identifier:          wjvoraXglkizXI74Yy89yHM1rhrdx2m2/UtoxQKHA1Y=
Subject key identifier:   DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E877C96D0A5F275E124B4277857AFB9E00BD4AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 03:19:35 +0000
Certificate not after:    Thu 20 Feb 2025 03:24:35 +0000
Subordinate resources:    AS: 271708
                          IP: 2804:7fc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:87:7c:96:d0:a5:f2:75:e1:24:b4:27:78:57:af:b9:e0:0b:d4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 03:19:35 2024 GMT
            Not After : Feb 20 03:24:35 2025 GMT
        Subject: CN=DEBABA97575B22EB79CB56298FD27EB827D57CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:15:b7:da:f9:1b:80:20:af:1c:3b:bd:38:
                    2d:73:ab:4b:6e:aa:7b:08:5a:80:18:a0:85:af:28:
                    30:fc:4c:34:4b:f5:e8:3a:4a:06:74:ad:56:71:e0:
                    05:2f:ff:94:dc:b4:10:b8:90:de:91:a6:f9:88:a1:
                    bf:6c:bc:1d:7b:e3:45:04:ad:e0:a6:dc:0d:27:13:
                    71:4a:a2:6a:8e:89:49:f7:54:54:bb:a0:a2:b2:93:
                    16:0c:95:75:6b:7f:4a:66:f8:15:5b:ac:02:17:0e:
                    47:f3:3e:6b:51:f6:fb:40:1e:f1:9b:e1:a7:09:c6:
                    99:7c:84:56:22:eb:5f:00:d4:ae:cb:cd:40:cf:bf:
                    f5:26:35:41:ba:a6:d8:4d:34:49:b3:91:60:b0:8e:
                    eb:5e:eb:92:5b:4c:88:ee:88:d5:eb:ce:44:47:5c:
                    11:dd:2e:0e:0c:5d:98:19:a9:ef:4c:cf:73:7e:24:
                    aa:d8:dd:91:8a:28:ca:f0:45:d3:dd:94:2c:2f:b2:
                    a8:8a:3d:f1:4e:ba:af:f9:a4:ec:80:40:53:46:09:
                    a9:cb:d5:37:0b:dc:3a:9f:de:6c:4d:d2:25:f1:07:
                    2e:c2:2b:4a:aa:1a:af:c1:44:64:55:dc:b6:ca:23:
                    0a:d6:0e:d2:40:d8:fc:92:b4:78:d9:eb:59:db:1f:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:BA:BA:97:57:5B:22:EB:79:CB:56:29:8F:D2:7E:B8:27:D5:7C:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/DEBABA97575B22EB79CB56298FD27EB827D57CE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271708

    Signature Algorithm: sha256WithRSAEncryption
         16:44:8f:d2:cd:5b:cb:35:c4:98:81:ab:1c:61:84:3b:e9:c1:
         0c:ee:d3:de:ab:cf:2b:fd:c6:c4:b6:ed:07:a7:59:fc:b2:79:
         e1:88:30:40:33:ef:97:b3:72:c9:f4:71:73:f7:4f:41:68:91:
         6d:40:f7:8b:1c:48:09:69:4d:49:3e:b1:0d:e9:da:74:b3:91:
         df:92:3b:5f:b0:4c:e5:1b:29:3f:24:8f:c2:bc:0b:a6:69:41:
         dc:c3:c6:02:5e:ef:7f:95:1b:5c:c9:07:a4:6f:c8:4d:86:83:
         7c:5a:26:0c:74:b9:65:6f:2a:27:b4:68:05:86:de:ff:0c:53:
         f0:4c:ba:d3:7f:90:d2:02:fe:69:16:6d:d5:ca:54:00:63:b5:
         f2:ae:07:3f:0f:83:2b:88:33:ff:88:a5:6d:c3:19:90:31:ae:
         0f:32:0d:b7:74:7d:30:31:e0:35:e2:e2:34:02:44:c6:10:af:
         59:3b:6c:fe:48:55:e7:7a:4a:57:8f:7c:46:5c:42:0d:b1:38:
         0b:5b:50:fb:a5:ad:41:94:a3:0c:17:e5:0f:78:4e:54:ea:84:
         34:46:84:73:c9:d5:5b:b6:be:4a:7a:6d:f5:75:a6:7f:54:95:
         99:ae:29:db:5d:31:b9:43:53:01:e0:9b:09:63:e2:bf:b1:9d:
         74:ec:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----