Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer
File:                     EA3A7BB80CD32604CE43FD275FAF887EB33DF512.cer (raw, json)
Hash identifier:          ecTat7/TMJJDz6vrSf9TvIeGhlfEaEZTVbqTYqc4pFA=
Subject key identifier:   EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       503951EF50D3B1E3DFAFD87C06802B065BF4FF74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 13:05:09 +0000
Certificate not after:    Wed 05 Feb 2025 13:10:09 +0000
Subordinate resources:    AS: 266216
                          IP: 200.71.72.0/22
                          IP: 2804:3c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:51:ef:50:d3:b1:e3:df:af:d8:7c:06:80:2b:06:5b:f4:ff:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 13:05:09 2024 GMT
            Not After : Feb  5 13:10:09 2025 GMT
        Subject: CN=EA3A7BB80CD32604CE43FD275FAF887EB33DF512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:de:6e:66:5c:0a:2b:61:c5:9c:8f:d5:0f:
                    29:f3:3c:7d:96:07:8c:11:40:72:95:b1:48:9f:be:
                    ca:c6:e7:16:a3:31:b9:ec:0b:c0:bf:b4:85:dd:8a:
                    26:9d:89:5c:7e:af:e6:eb:1e:88:77:31:a3:d5:e5:
                    ec:ac:e2:d5:40:a1:9b:29:a0:25:f8:97:8d:01:4e:
                    09:91:74:ae:48:cc:fc:e6:85:7c:12:b1:98:5a:32:
                    55:3c:be:2e:5e:0d:ed:25:15:9d:ec:1a:bd:be:69:
                    d9:e3:dc:79:91:de:c9:b3:e2:1f:0c:e2:e1:18:f7:
                    70:de:29:9f:c0:c3:99:89:13:b8:29:54:40:1a:d8:
                    a9:8e:c1:a6:47:c4:0f:a2:c4:cf:d1:16:08:97:81:
                    1b:55:f9:92:7e:7e:b0:a7:df:6c:c4:72:61:3a:3e:
                    af:a9:00:a7:1d:a6:cf:09:9d:28:a1:11:08:db:d9:
                    f8:06:78:7b:88:6d:23:f4:32:6c:10:ce:29:cd:90:
                    2e:46:fc:6e:e2:57:1d:71:ef:ec:83:ed:58:88:31:
                    24:fd:b6:66:5e:48:5c:cb:e0:2a:86:15:6f:36:80:
                    37:2a:d5:1f:67:3d:55:d9:cd:18:ce:9e:63:0b:05:
                    db:04:fa:f1:12:10:55:c4:89:a4:2b:af:5c:21:39:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:3A:7B:B8:0C:D3:26:04:CE:43:FD:27:5F:AF:88:7E:B3:3D:F5:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/EA3A7BB80CD32604CE43FD275FAF887EB33DF512.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/22
                IPv6:
                  2804:3c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266216

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:47:df:b5:8d:74:fe:ae:26:4a:2c:ce:ad:f5:84:22:2a:
         56:88:ab:88:6f:e8:7e:e9:9f:f5:f6:b5:97:69:1e:1c:73:f3:
         a7:49:19:2d:5d:80:30:60:ce:5b:72:11:25:74:cb:4e:0d:4e:
         7a:fc:16:5e:57:c3:75:cd:0e:6f:5d:bc:48:cb:b8:a2:e1:86:
         04:71:1b:11:2e:44:68:b8:2b:62:e4:96:f5:44:c7:3b:18:be:
         3b:fa:d0:7f:27:5e:a2:79:a0:6f:61:62:17:24:8f:9c:4f:01:
         b8:e2:8b:2d:49:86:87:b9:3e:cc:85:46:ff:ec:dc:66:59:18:
         49:95:60:99:4c:65:8f:92:d6:39:2b:1b:18:49:93:0c:92:d1:
         92:09:71:4b:21:1a:b2:f2:1f:a0:0f:bb:3a:a7:59:b7:0a:60:
         4f:1f:c1:35:e1:1c:be:5b:a5:07:21:6c:05:51:1f:cd:d8:9b:
         34:55:3d:20:5f:b9:84:64:ae:80:ad:f3:ff:a7:86:f8:95:b5:
         12:d4:1b:22:87:c0:a4:a2:6e:66:d0:a6:82:78:84:9b:1a:2d:
         3b:a0:54:ea:e2:ac:40:a6:a1:fe:a0:86:15:44:78:d9:80:0c:
         45:14:80:14:e9:87:60:d0:cf:29:6a:e2:a4:7b:e5:8a:8a:c0:
         23:48:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----