Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
File:                     E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer (raw, json)
Hash identifier:          oL9e7wf29ncNCNLxbaDFy5MS7RpG6aE91TZdygaJda4=
Subject key identifier:   E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C2C553760DC98E55197B1AD6EF663C512A2780D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:51:32 +0000
Certificate not after:    Mon 24 Feb 2025 14:56:32 +0000
Subordinate resources:    AS: 269175
                          IP: 45.181.92.0/22
                          IP: 2804:1f4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:55:37:60:dc:98:e5:51:97:b1:ad:6e:f6:63:c5:12:a2:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 26 14:51:32 2024 GMT
            Not After : Feb 24 14:56:32 2025 GMT
        Subject: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:df:f2:90:23:bb:1b:d8:47:b4:48:62:3f:
                    b5:31:49:ba:ff:33:3b:82:8b:16:14:10:a0:c1:3d:
                    d0:4f:9b:e9:f5:8b:15:78:01:0a:ab:26:74:37:38:
                    b3:d7:b5:c1:74:cf:46:fd:01:4f:d8:4f:69:65:04:
                    03:93:21:76:d9:e6:0a:1b:75:41:4c:a0:06:fa:5f:
                    95:04:c0:4c:58:87:00:9c:25:0a:41:fe:89:0e:18:
                    52:58:4d:cc:ee:97:68:98:d6:ef:37:07:42:ab:10:
                    09:f4:1d:d2:df:9c:0d:9f:d1:cb:bb:58:84:81:c5:
                    e8:16:83:c1:8d:3e:6f:07:49:d4:9b:e0:0b:6e:b0:
                    bb:47:e9:df:5c:a2:52:73:b2:0d:7f:ee:f1:a7:25:
                    db:12:1f:a0:68:ba:10:bd:da:3a:65:c5:e1:6f:25:
                    80:bb:07:8d:ba:ae:a8:4f:9c:2f:fc:9a:e2:38:c3:
                    50:66:df:b9:1a:cf:f2:99:22:64:ef:0d:79:b8:14:
                    0f:ca:91:91:ce:14:25:42:d4:27:93:d2:5b:e4:29:
                    97:97:11:1a:12:df:24:eb:5c:00:e3:53:bd:49:a9:
                    c9:bc:ee:c3:3b:4a:06:32:ba:18:16:3a:8b:79:52:
                    f1:81:76:e8:39:07:58:37:45:14:a5:1d:8a:5a:04:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22
                IPv6:
                  2804:1f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269175

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:c8:28:f5:9e:a4:2d:47:e1:88:7f:ee:01:c0:ef:a3:03:
         4c:d2:99:c3:51:eb:36:3d:a4:e7:59:b3:b4:be:ae:0a:6e:31:
         a4:8d:b3:79:23:b8:72:06:21:1a:18:b6:f8:03:0e:4d:4d:f9:
         2f:b4:e7:e7:1f:44:0a:6f:e8:a4:f7:96:0f:55:db:e5:1a:e1:
         35:d0:7c:6f:c1:c4:58:44:f5:81:82:79:f1:b0:fa:46:05:01:
         d7:32:89:70:c1:60:f3:e4:10:3c:8c:d9:04:c0:68:99:bb:da:
         b1:ff:be:c5:06:1d:a8:03:dd:01:2b:07:5c:9c:9c:44:b6:22:
         c9:fd:45:47:e1:2e:68:34:a6:76:98:a8:3b:d4:74:48:ea:3d:
         a4:cc:38:58:a4:09:ad:c3:76:3f:b8:54:a8:f7:d2:72:b5:3d:
         da:1c:e3:e2:de:c0:64:70:65:e2:8c:a4:0d:16:23:b6:aa:57:
         b3:a9:22:37:aa:db:74:ec:69:46:e1:ad:d0:cb:ce:76:04:7f:
         88:65:9d:39:88:f8:c9:36:99:f7:11:c4:c3:9b:74:06:50:dc:
         3d:49:8d:0c:bd:5b:3d:99:97:79:4b:69:52:35:34:1f:7c:e1:
         6b:0a:7b:42:a2:0b:0b:48:18:2a:aa:3e:d9:fd:a9:4f:c6:ac:
         08:ea:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----