Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer
File:                     E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer (raw, json)
Hash identifier:          zgOo+XbQtcJNOhzF03KurjFCJpYh/5yLpOKym+4qM58=
Subject key identifier:   E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       476AF0A4E9C5F71D9B7FC20A606415F4B1BB4063
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Feb 2024 18:19:38 +0000
Certificate not after:    Mon 03 Feb 2025 18:24:38 +0000
Subordinate resources:    AS: 52743
                          IP: 177.85.164.0/22
                          IP: 2804:65f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6a:f0:a4:e9:c5:f7:1d:9b:7f:c2:0a:60:64:15:f4:b1:bb:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 18:19:38 2024 GMT
            Not After : Feb  3 18:24:38 2025 GMT
        Subject: CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:5d:ee:bc:93:0a:90:aa:4c:d8:2c:92:ed:
                    da:51:e3:81:65:01:50:6d:60:79:42:cb:a5:b6:7c:
                    a0:99:df:99:5c:e7:3e:91:b8:3a:34:47:32:88:9a:
                    e8:13:ac:2b:a6:9e:17:cd:cf:7c:9e:12:0c:98:fe:
                    20:37:e8:3b:8c:0d:95:35:7f:f5:c2:7f:66:28:b5:
                    55:2a:c2:a9:cd:db:a2:69:16:92:3d:72:d0:f6:67:
                    23:75:de:fe:c7:2e:be:16:3c:2e:4a:44:9d:15:ab:
                    a3:b9:21:ea:af:b5:59:73:01:7e:2e:c1:36:33:39:
                    5e:b5:18:83:82:2c:4a:8b:02:c4:32:5f:3f:83:13:
                    e4:27:aa:90:8d:0b:6c:dc:f7:b7:e7:99:11:5f:38:
                    52:03:6d:a8:d4:b6:4f:c8:07:cf:e6:dc:85:26:f4:
                    44:1a:b3:65:a6:fe:ec:8f:e3:87:69:29:90:0c:a2:
                    d0:52:53:f7:4e:5d:58:56:f4:8b:e4:1f:14:17:86:
                    1f:65:c7:c3:fd:0d:ac:e4:fd:57:05:4a:1d:54:5b:
                    ad:61:b7:66:ea:4c:db:73:e0:a1:e7:ff:e4:cb:7b:
                    fc:77:75:ba:4f:69:4c:4e:5d:49:7a:43:a0:00:96:
                    ca:1f:19:50:22:7b:ab:f7:d5:e1:d4:53:c1:75:a1:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22
                IPv6:
                  2804:65f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52743

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:1d:34:27:29:52:41:41:05:5e:43:03:32:2f:64:ae:67:
         fb:87:ca:af:8c:b8:d3:aa:ff:5b:f2:c6:9d:12:57:b9:1d:43:
         a9:7e:29:41:3d:64:45:2a:21:2e:81:0e:40:d4:5a:b5:8b:70:
         9f:0c:26:d4:90:f6:0b:91:ab:70:0f:d6:ec:cc:0b:c4:35:f6:
         1e:18:c0:b5:0a:fa:98:06:0e:5b:21:d9:69:9d:be:ca:f3:70:
         bb:46:24:2a:2f:9e:fa:63:b6:fe:3f:93:3b:70:d9:8c:c4:ba:
         5f:31:36:21:41:c9:95:be:81:0b:2f:f0:45:0d:98:dd:da:c5:
         c4:15:1e:94:63:1f:6e:52:7d:35:22:cb:76:3a:c2:4d:13:6b:
         91:16:e5:4d:c2:45:e1:72:ab:c6:f8:2e:67:f6:d3:95:bd:30:
         75:00:d7:d6:82:43:3c:9c:73:da:62:79:02:4e:0f:ce:4b:a3:
         04:78:a5:11:e1:08:ad:20:33:2d:35:5f:c4:4a:07:42:53:9b:
         60:7b:b3:a8:ba:1c:e1:27:e6:a1:43:74:f8:14:20:7f:c3:9c:
         ef:59:e9:4d:30:0d:ff:be:c4:b7:e6:39:46:3b:ee:14:25:39:
         5f:9a:9c:92:9d:dd:9f:24:63:ef:85:c3:ac:b0:11:e8:a5:17:
         76:f4:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----