Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer
File:                     E3AD571D3033931838F6BE8CEEF3837B0FEEE757.cer (raw, json)
Hash identifier:          m73i8Wz4yltAn9xQJgPocmjE3WCx7v8zkgx78Bq9hx0=
Subject key identifier:   E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CFFB2BC4A21D0039D5A454DE7071123BD1ABB70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 18:45:10 +0000
Certificate not after:    Wed 22 Jan 2025 18:50:10 +0000
Subordinate resources:    AS: 268960
                          IP: 45.176.240.0/22
                          IP: 2804:5d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ff:b2:bc:4a:21:d0:03:9d:5a:45:4d:e7:07:11:23:bd:1a:bb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 18:45:10 2024 GMT
            Not After : Jan 22 18:50:10 2025 GMT
        Subject: CN=E3AD571D3033931838F6BE8CEEF3837B0FEEE757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:e7:26:3f:ce:e5:60:60:1c:09:27:f0:a9:
                    6d:81:b9:ad:6c:97:ed:5b:a8:25:4c:30:3c:09:97:
                    1c:1e:ae:c1:cb:cc:5e:b2:14:53:49:b9:47:7a:06:
                    9f:cb:67:67:76:f5:29:e0:4d:09:8e:4e:d5:a3:d7:
                    8f:db:e3:5a:a3:11:a7:bb:03:11:c9:4e:d6:bc:86:
                    1f:ec:cd:46:d4:a6:12:d2:25:c8:58:77:ee:75:4a:
                    3c:10:c0:f8:bf:61:1d:7c:b7:68:87:04:27:18:2a:
                    0e:0d:8e:41:3e:f4:83:e6:7f:f2:c6:c9:1e:89:53:
                    3c:14:fb:6e:d4:37:bc:1e:f8:d5:43:61:d5:d1:4b:
                    79:89:00:5a:3f:8c:3e:21:fa:44:47:aa:78:d8:8d:
                    7b:33:de:14:7e:5a:cb:98:49:a6:c6:d5:c6:5d:62:
                    29:cd:83:e9:a8:38:dc:8e:9f:27:57:1a:bf:dd:48:
                    11:57:60:b8:ee:23:57:10:29:92:bd:68:4c:8d:b7:
                    bb:b6:b5:80:37:ed:32:e1:0c:3a:93:21:35:15:8a:
                    f6:1d:dd:61:23:29:48:e6:83:48:46:72:da:e0:ae:
                    63:3d:15:4f:0c:93:f1:70:1d:d6:03:6f:33:e2:6e:
                    92:df:fb:6b:13:e5:b5:ec:3d:20:a1:34:37:ed:fb:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:AD:57:1D:30:33:93:18:38:F6:BE:8C:EE:F3:83:7B:0F:EE:E7:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/0/E3AD571D3033931838F6BE8CEEF3837B0FEEE757.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.240.0/22
                IPv6:
                  2804:5d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268960

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:5a:23:54:6e:55:d5:18:07:34:dc:6e:96:be:50:fd:55:
         fd:bf:eb:f0:48:97:ba:39:26:95:bf:c0:8f:90:ee:12:6d:b0:
         28:9e:0c:8a:1e:4e:2d:6f:cb:4f:04:2d:7e:2f:da:9c:82:1c:
         66:99:80:6c:46:bf:e3:1f:cc:33:9d:fa:04:4b:d8:95:b8:2b:
         aa:69:97:e8:af:a0:47:d6:72:5b:46:ea:bc:55:ce:e8:94:28:
         1c:5c:e1:66:a9:04:77:6b:91:9a:a0:21:16:82:11:5c:66:84:
         9d:6c:41:82:d6:14:25:43:04:f2:ae:e7:f6:15:fb:21:33:43:
         e5:a7:03:1b:48:9e:d0:fb:5f:9d:d1:a5:d0:6c:43:1b:fc:41:
         8f:69:76:35:36:8d:11:65:9b:a8:2f:a2:59:2b:f7:ab:e1:88:
         ea:c3:62:97:de:76:68:6a:22:d9:33:cb:fd:82:4f:40:74:af:
         28:d9:dc:5c:9e:35:13:25:c1:bd:f9:82:8c:f0:c4:45:b7:a2:
         8a:34:cf:ce:1c:ef:05:c1:f6:40:32:9c:fc:ba:4a:86:c8:c8:
         be:3e:a0:80:b9:37:5e:01:bd:6b:6b:25:64:28:61:64:b9:f1:
         22:f6:3b:3c:a2:87:b3:9a:84:b4:d9:0e:35:a3:b9:87:7c:d0:
         87:52:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----