Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer
File:                     E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.cer (raw, json)
Hash identifier:          sXOVH+p0tvU2UAAqbOk9sfrWRxKn+JB2Xxd/eItxSmY=
Subject key identifier:   E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48D3024938BE877F6C98F50B38B7A5BB5C4984B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 12:47:25 +0000
Certificate not after:    Thu 06 Feb 2025 12:52:25 +0000
Subordinate resources:    AS: 273691
                          IP: 2804:8ac4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:02:49:38:be:87:7f:6c:98:f5:0b:38:b7:a5:bb:5c:49:84:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 12:47:25 2024 GMT
            Not After : Feb  6 12:52:25 2025 GMT
        Subject: CN=E8A7437AF4AE5C7941AC3596DC385F13E6034DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:fe:29:f2:04:f0:78:64:15:fd:5d:cd:fc:
                    3d:e6:3c:76:41:28:78:2b:4b:03:e8:f1:29:51:69:
                    73:1b:a7:13:ea:9d:50:75:48:20:59:ca:ae:b7:f3:
                    ae:5e:a6:d7:17:e3:34:15:1a:8f:a9:4a:4d:36:af:
                    61:93:f0:5e:78:ab:fe:13:ab:43:1a:fb:ea:62:32:
                    23:dd:48:af:14:ec:f4:71:41:26:0e:4c:22:c3:01:
                    1e:51:76:5b:1e:5e:e5:e5:6c:07:5a:44:b4:6c:54:
                    b8:10:80:34:dd:bf:57:ab:91:6e:3b:2b:61:bf:9c:
                    96:1e:f8:4a:2d:0d:f6:16:86:70:ba:8b:a7:83:19:
                    ba:04:8c:ae:ab:33:1c:1d:f1:a7:fb:dd:d4:ee:31:
                    08:02:0d:c2:04:71:31:2c:e3:32:29:44:a3:f3:6d:
                    ff:4f:a2:c4:e2:d1:c2:19:cc:c3:63:7b:ce:81:cd:
                    c0:80:6f:c8:04:37:b6:7c:d5:ea:02:46:e4:68:9f:
                    49:ce:ea:de:0e:55:1c:0e:a7:e9:04:9e:21:2f:74:
                    78:ad:33:a1:82:58:32:83:37:ff:fb:8a:92:30:3f:
                    22:b3:57:f4:1f:77:d5:54:3c:aa:c2:94:50:f9:e4:
                    37:e0:94:12:4a:28:f6:05:25:3d:24:4a:03:e6:96:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:A7:43:7A:F4:AE:5C:79:41:AC:35:96:DC:38:5F:13:E6:03:4D:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ASipeTL7apH2NCaHUJ3Nu7heXcouCsMxT6vcujqwUcMi/0/E8A7437AF4AE5C7941AC3596DC385F13E6034DAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273691

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:c8:98:5e:bc:01:fd:d4:85:f4:d2:38:d3:76:c5:8d:ca:
         91:1d:9b:4d:5a:09:54:8a:89:43:ca:04:ff:fb:10:17:73:49:
         fd:4f:df:67:8a:ce:97:de:41:87:9e:b6:d7:d4:38:5c:2a:41:
         4c:f0:e3:e6:8d:c7:7d:8e:46:8d:b0:64:4b:8a:77:c1:45:ec:
         49:3b:f7:a5:c8:7c:1a:f6:3d:42:63:11:bb:a1:e0:57:77:a3:
         72:b8:33:31:51:cf:f7:fa:5a:0b:b1:96:a6:6e:be:bf:0a:f5:
         39:76:eb:2b:07:c3:e3:25:08:07:e1:db:f4:6e:08:89:3a:35:
         6a:d4:29:21:56:94:10:16:74:ed:72:77:53:1e:5b:47:e1:d5:
         77:e0:ee:81:df:29:c8:66:be:ee:b5:ad:6f:96:01:c8:36:d3:
         ed:76:a3:5a:ef:e2:77:69:0f:2c:ca:09:b2:52:1c:fb:7a:53:
         f7:18:c5:fc:02:15:c2:73:1b:b5:c9:63:6b:49:4a:71:04:4e:
         36:2d:b4:c0:ff:36:80:d1:0f:37:35:a8:a9:12:03:b9:9e:80:
         f1:60:07:25:9a:ac:1d:e4:03:7f:bc:87:c1:4c:1d:4e:22:d1:
         10:92:66:9f:3e:95:07:c6:a8:9d:b6:63:87:3c:bb:59:7b:0c:
         3d:a5:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----