Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA96810E4B9650BA4029C422623CDEBDB2A06628.cer
File:                     EA96810E4B9650BA4029C422623CDEBDB2A06628.cer (raw, json)
Hash identifier:          1Dvxd3AhIBv58HOvmK+D6CavIQIvpY83KknCG5kZdCY=
Subject key identifier:   EA:96:81:0E:4B:96:50:BA:40:29:C4:22:62:3C:DE:BD:B2:A0:66:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       751BAA984A8B60B4C73B56ECC474582324DFE714
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/EA96810E4B9650BA4029C422623CDEBDB2A06628.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:46 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:46 +0000
Subordinate resources:    AS: 271473
                          IP: 181.174.208.0/22
                          IP: 2804:7c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1b:aa:98:4a:8b:60:b4:c7:3b:56:ec:c4:74:58:23:24:df:e7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:46 2023 GMT
            Not After : Nov  5 03:58:46 2024 GMT
        Subject: CN=EA96810E4B9650BA4029C422623CDEBDB2A06628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:15:77:cc:3a:88:42:03:d4:bc:5c:ed:75:
                    33:71:97:81:d7:47:2e:4b:fd:9d:1a:cb:eb:d0:27:
                    8d:35:e0:0a:ec:d0:75:95:94:65:be:e8:0d:47:09:
                    54:b0:4d:93:c3:85:99:48:aa:0a:25:86:95:81:88:
                    fe:09:a2:31:28:f6:94:8d:2a:77:2a:b9:04:f9:0f:
                    ce:6d:b8:02:e7:57:8f:16:5f:c4:8f:dd:82:3f:6b:
                    f3:1a:e2:80:87:4e:b6:41:c4:0c:a4:d2:3d:ba:ae:
                    2e:69:50:0c:1a:55:ad:1d:ce:45:e6:43:0b:bd:87:
                    a8:34:44:f1:db:95:84:ec:5d:c6:29:c1:95:be:d6:
                    50:3f:e0:d9:4a:8d:d6:c7:1e:da:2a:d0:29:0a:36:
                    bd:20:a7:6e:c1:79:60:25:d3:76:a3:e2:de:88:c9:
                    0f:19:3a:94:1e:a9:c8:f8:eb:1f:9f:cc:50:a8:f9:
                    a0:4c:09:bd:44:69:51:44:33:e3:53:00:9e:f9:75:
                    21:4f:bf:9e:f1:92:b3:4b:99:17:cd:15:be:0b:b9:
                    ed:20:f5:03:e6:b5:27:1d:52:4d:7d:25:97:12:0d:
                    51:2c:a0:cd:58:e5:b3:77:52:87:ca:90:ca:5b:bc:
                    3f:af:59:0b:b0:eb:eb:49:c0:ef:a2:ac:03:d1:33:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:96:81:0E:4B:96:50:BA:40:29:C4:22:62:3C:DE:BD:B2:A0:66:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/EA96810E4B9650BA4029C422623CDEBDB2A06628.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.208.0/22
                IPv6:
                  2804:7c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271473

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:ce:2c:08:c8:07:95:11:a5:51:15:b7:d7:72:7b:4a:a7:
         28:fc:5f:bc:a4:2b:d6:b6:33:d3:76:0f:d5:50:ff:3a:1d:66:
         5a:80:d3:a6:9e:62:07:64:5b:8c:7a:25:fc:f7:2f:9f:58:28:
         c3:a0:16:56:3b:2c:93:2c:69:1d:e8:46:20:2d:7f:cb:48:d5:
         0c:ea:b4:da:7f:c8:3d:53:c0:69:a6:fe:c8:f7:7b:3d:a0:ab:
         d9:ca:c2:34:38:d1:ce:98:b5:52:86:74:60:74:49:28:41:94:
         62:a1:e6:21:cb:2d:49:4b:1c:b0:70:b6:59:55:a4:9e:f6:14:
         91:e9:d4:5e:c2:f0:8f:0f:44:8a:06:44:1e:5b:a7:4e:29:94:
         72:1f:2d:a5:91:99:76:3f:86:e5:c8:f6:2f:5f:f1:d7:c7:f1:
         b2:c9:bc:35:e8:43:89:17:b7:ca:94:b3:41:d0:1e:de:40:55:
         99:97:89:99:44:57:86:ea:ca:e9:4e:50:10:14:d0:27:1b:e1:
         f7:00:19:73:b3:e9:35:43:e6:f1:87:b8:e2:44:5e:67:c4:fa:
         d7:a2:a5:74:e8:5d:97:17:d0:94:9e:d1:5d:ea:f2:01:b0:83:
         8c:2f:09:e8:81:40:71:59:d2:2a:cc:ea:06:5f:0e:c7:4f:b9:
         e1:c9:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----