Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.cer
File:                     E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.cer (raw, json)
Hash identifier:          HyAQUODvFwvQVb56ZWl1f5Oz8M2XqN52gxDd2KsyFJQ=
Subject key identifier:   E6:AB:DC:76:C8:CD:18:89:91:C3:76:BD:C7:A9:A8:55:FA:C4:EC:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6915EE4782136CDA98F0674ADB760DD0D87926FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 13:57:31 +0000
Certificate not after:    Thu 30 Jan 2025 14:02:31 +0000
Subordinate resources:    AS: 262741
                          IP: 186.208.176.0/20
                          IP: 2804:2b30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:15:ee:47:82:13:6c:da:98:f0:67:4a:db:76:0d:d0:d8:79:26:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 13:57:31 2024 GMT
            Not After : Jan 30 14:02:31 2025 GMT
        Subject: CN=E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:52:67:8e:60:ab:6f:0f:48:1c:82:74:70:
                    97:39:e6:05:44:cb:fe:2c:71:87:46:f0:25:fa:b8:
                    b7:21:28:52:44:a5:5a:e9:04:18:1d:4b:73:d3:d4:
                    02:5a:1b:a1:68:49:b9:3c:a2:7b:ed:24:45:5e:50:
                    ae:1e:47:68:e3:72:7c:62:4b:d3:7f:82:27:5c:fb:
                    b8:f8:91:b7:c4:de:b3:cc:86:e7:9f:04:74:0c:66:
                    f3:d0:74:2d:df:18:3d:ae:80:fd:b8:d2:4d:33:74:
                    88:f1:9e:98:fd:f4:f7:ce:8c:61:42:3d:75:9c:33:
                    18:ab:6d:66:e8:90:06:5c:61:01:7e:4f:da:47:f0:
                    05:13:82:2b:de:fd:bb:7f:59:dd:93:1e:25:aa:15:
                    03:46:5d:98:69:2d:d0:53:1e:1d:5b:6f:ea:85:73:
                    3d:44:cd:3a:9b:4d:5f:04:1a:fd:74:9b:8a:7d:c8:
                    67:e8:73:66:45:03:2d:0a:31:64:bc:39:d7:0c:9c:
                    df:30:54:af:0e:9a:68:85:30:8c:df:60:82:97:01:
                    c2:ab:e1:8f:f8:5f:77:42:0c:47:62:c7:37:28:a8:
                    5e:8d:05:cc:d1:23:d4:97:28:5b:32:76:7e:21:e3:
                    9f:e5:05:60:a4:e4:bb:e6:3c:9c:cd:49:a5:9e:d8:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:AB:DC:76:C8:CD:18:89:91:C3:76:BD:C7:A9:A8:55:FA:C4:EC:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/20
                IPv6:
                  2804:2b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262741

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:cf:91:ed:86:70:7d:bd:9c:db:4e:83:d0:7a:9b:54:bf:
         62:52:b8:24:71:5f:ad:71:1b:17:38:ed:3d:82:db:28:36:0a:
         00:83:1a:ba:92:67:67:b3:76:45:71:5c:b8:00:a5:a7:2e:83:
         55:2a:73:08:3b:05:e9:63:e0:d0:64:3e:c3:fa:e6:23:5c:6c:
         35:4a:a9:d1:f9:d0:2c:d3:d3:5a:45:24:54:61:3d:58:ed:a8:
         9e:a5:a6:c9:cc:23:98:f7:d9:28:68:b6:7d:ec:02:bc:0c:5e:
         4f:79:25:90:7a:a6:36:c7:fe:f8:46:61:49:33:c0:ae:86:32:
         0a:21:65:e0:8c:b2:f4:e7:e8:fd:e1:a7:c9:30:1f:29:2d:97:
         c2:1c:6a:db:b1:9f:cf:18:35:21:e1:4e:b0:48:9e:e5:b4:81:
         c6:95:ee:6f:ca:df:9c:12:8e:b7:d8:f6:a2:2e:43:f4:0d:e1:
         c7:59:b6:8f:dc:a4:5c:7c:54:e3:b2:e2:15:85:fb:60:b9:e2:
         93:ab:62:b9:20:7c:9e:3f:af:5a:7f:9b:cf:3d:7a:87:4a:bb:
         31:5d:11:c0:5a:13:a5:7d:2b:02:3b:87:c1:65:6e:49:80:bd:
         88:b7:c1:e1:e9:dc:b0:0e:fc:62:97:65:71:d1:e3:30:71:e6:
         d4:ce:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----