Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E81A19E563697A2F5EE389B8B7C9E8E3DBD3EC65.cer
File:                     E81A19E563697A2F5EE389B8B7C9E8E3DBD3EC65.cer (raw, json)
Hash identifier:          dnSGApSBwpblkEDi51+BXeZ1ZKZJdUJOnXciTbZudgQ=
Subject key identifier:   E8:1A:19:E5:63:69:7A:2F:5E:E3:89:B8:B7:C9:E8:E3:DB:D3:EC:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34157477740862A3FB297C49FD6C66DE66DF940A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/E81A19E563697A2F5EE389B8B7C9E8E3DBD3EC65.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 12:46:08 +0000
Certificate not after:    Fri 28 Feb 2025 12:51:08 +0000
Subordinate resources:    AS: 268914
                          IP: 45.174.4.0/22
                          IP: 2804:5c88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:15:74:77:74:08:62:a3:fb:29:7c:49:fd:6c:66:de:66:df:94:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 12:46:08 2024 GMT
            Not After : Feb 28 12:51:08 2025 GMT
        Subject: CN=E81A19E563697A2F5EE389B8B7C9E8E3DBD3EC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:35:ba:65:c4:9e:d4:4b:31:82:bc:f9:6b:
                    00:52:04:bf:5b:68:1b:eb:47:04:bc:57:83:f1:99:
                    46:53:52:d6:38:dd:d9:1b:3c:27:c1:62:62:32:44:
                    cb:65:97:3d:ed:3e:02:23:d9:28:9f:48:e3:75:43:
                    1f:c9:53:0e:ff:13:3c:77:d5:fb:3b:fc:22:80:5c:
                    82:04:e7:51:e8:b5:ea:6f:38:02:ff:ad:78:9f:2f:
                    f1:cd:7a:35:46:61:a5:17:30:72:3b:e5:23:27:a4:
                    32:75:d5:1d:4c:98:30:42:3b:43:05:1a:2e:07:3a:
                    a4:27:42:2e:60:cd:56:41:ea:f1:b1:f3:a1:94:f2:
                    3c:7e:36:f0:9c:09:c9:d7:dc:4d:d4:8f:03:6f:b8:
                    16:90:93:4e:89:98:14:1d:e2:03:e4:4a:6a:7a:83:
                    4a:e0:2f:f2:ce:4e:45:3e:85:59:cb:80:de:5d:5e:
                    75:ca:2c:86:5f:a5:c5:fe:55:54:39:e9:a1:a6:1c:
                    74:02:02:fa:d1:2e:d2:b8:64:9b:ab:d4:d8:23:3b:
                    f2:83:93:18:80:48:2b:d9:0d:3e:ea:10:32:81:94:
                    eb:aa:d4:d6:81:bf:38:6c:7e:ac:40:e3:20:5a:a5:
                    50:08:78:42:50:e6:fc:91:61:17:6a:47:46:b3:05:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:1A:19:E5:63:69:7A:2F:5E:E3:89:B8:B7:C9:E8:E3:DB:D3:EC:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/1/E81A19E563697A2F5EE389B8B7C9E8E3DBD3EC65.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22
                IPv6:
                  2804:5c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268914

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:f7:99:56:2f:ac:62:34:68:bb:9c:bb:2e:dc:a5:d0:c8:
         eb:47:35:7a:76:1b:d9:1a:1f:7c:5e:a0:4c:cd:2b:76:3c:39:
         08:db:bb:2d:60:6f:0e:7c:b6:f4:a3:4e:ed:8a:15:c3:5f:0d:
         37:86:7f:1d:d1:f0:71:dd:03:e0:69:8d:27:c2:c4:30:cc:f9:
         b5:85:4c:87:8e:43:6d:8d:a1:28:89:32:00:b6:71:63:9c:eb:
         62:b5:a1:ba:72:7a:80:ce:4e:f6:c9:4a:1c:78:ba:fc:f6:38:
         c0:58:2c:96:15:f2:51:ef:d2:d7:b8:ff:f5:e7:eb:99:b8:56:
         31:0f:9f:68:63:47:19:1c:ea:e4:ca:06:e2:7a:4a:8e:04:62:
         82:04:ed:a1:5c:18:94:2b:df:cf:97:fd:00:5a:6f:b7:46:88:
         4f:b4:1a:5c:88:dc:1b:7e:74:2d:dc:3b:af:5e:56:07:b4:95:
         b5:69:4c:5c:bf:13:28:f7:fa:10:cf:38:06:df:ab:54:1f:89:
         d0:e6:bb:90:78:24:bf:cb:21:68:d3:d8:20:3d:a7:41:ed:d9:
         cb:bb:de:ff:22:70:7f:8a:cd:de:1c:31:00:52:dc:04:05:60:
         55:ba:44:8b:4c:b6:26:ec:17:ae:40:5f:a0:8f:9f:dc:4a:26:
         4d:a8:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----