Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
File:                     E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer (raw, json)
Hash identifier:          +JEtYUWPZ9AOjVVqjMB4M4V2Y5MMTDzqwPWWJe/6cuc=
Subject key identifier:   E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59C0882AB819891C061460642D2B178BEAB6CD32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 19:37:29 +0000
Certificate not after:    Thu 20 Mar 2025 19:42:29 +0000
Subordinate resources:    AS: 264091
                          IP: 143.208.128.0/22
                          IP: 2804:2abc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c0:88:2a:b8:19:89:1c:06:14:60:64:2d:2b:17:8b:ea:b6:cd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 19:37:29 2024 GMT
            Not After : Mar 20 19:42:29 2025 GMT
        Subject: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e9:d8:bb:b2:5d:29:9e:f2:f9:06:82:48:4c:
                    3d:00:c2:4d:bc:22:d5:2e:d4:5b:d8:36:96:7b:70:
                    a1:84:4a:7f:ba:72:9d:42:3d:d2:3d:f9:58:19:aa:
                    73:f7:8d:f3:8d:4a:ac:c6:4a:d9:ba:6b:7a:37:0a:
                    e2:af:9a:a5:09:27:6e:db:02:6d:30:76:3d:29:70:
                    9c:0e:e0:47:8c:b8:65:7c:1d:74:3b:a7:4e:4e:5c:
                    79:1e:45:cf:16:f3:73:f7:f2:48:5e:7c:f8:57:f2:
                    b9:8e:27:81:9d:69:c6:9e:91:4f:7e:95:4f:9e:09:
                    79:ec:77:66:d3:7a:78:0f:d6:39:d2:35:56:f1:2a:
                    3b:f1:f1:7c:2d:cb:27:96:a8:9c:18:d4:aa:0d:5b:
                    6f:a5:af:6c:20:1b:d5:1c:a1:2c:4d:aa:16:dd:34:
                    6e:1b:d4:d4:d4:0b:3b:ae:b2:58:38:bd:a6:4a:c8:
                    23:82:f8:42:a4:15:6d:c3:46:03:e8:2b:4c:79:7b:
                    4e:cc:60:cd:e8:97:ec:8c:97:a9:a8:00:4b:af:ad:
                    5a:de:35:f7:c1:07:f4:bb:9c:c9:f5:e8:5a:aa:68:
                    db:85:db:6d:6e:c7:9d:a8:85:ef:28:cc:a5:6e:ba:
                    ee:f7:43:45:c4:ca:fd:c8:b4:d9:1d:d3:17:92:53:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/22
                IPv6:
                  2804:2abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264091

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:cb:33:fe:e8:a7:87:ef:db:2b:3a:66:da:bf:e4:00:16:
         cf:9a:dc:33:66:d1:0c:e5:cf:51:48:4a:ca:b2:8d:d8:c8:ce:
         b0:6c:96:b9:66:77:09:8e:0a:2c:65:8b:ee:41:0e:49:e1:9d:
         80:8b:c2:e8:45:aa:3d:74:30:fa:b6:ac:b7:03:26:46:3a:39:
         2c:ec:fc:9a:07:9b:fb:3e:51:fb:a8:86:10:55:ff:e8:cc:f0:
         0b:8c:0c:d2:71:40:c2:31:a6:1b:dc:68:b5:81:4e:e0:79:9f:
         f8:63:05:ab:c5:26:47:24:8f:ac:40:3f:81:24:7c:b1:ad:12:
         f7:d3:eb:e8:a5:81:5a:e4:6f:97:80:f6:e7:0e:f3:84:c9:80:
         37:76:84:3f:fa:e0:cb:df:5c:01:c9:c5:c3:6b:c3:85:53:b0:
         46:04:eb:bc:41:1b:da:13:c5:88:d9:f7:55:26:62:d5:36:f3:
         d7:e1:3c:be:d5:5c:f5:56:ac:f8:c3:49:a4:32:1d:f2:2f:9f:
         67:38:d7:fe:cf:0e:5e:8b:34:1a:19:6b:3d:6d:65:0a:dc:5f:
         f6:8d:d0:13:4f:2a:98:10:0b:57:9f:85:80:9a:36:ee:a5:55:
         15:e6:ff:b4:7e:5b:ec:8c:36:5c:1a:83:d2:a3:d2:6d:22:a9:
         e0:13:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----