Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.cer
File:                     EED473537DEB3209C2A2A780B900F78F3D1B267E.cer (raw, json)
Hash identifier:          i7pJMAm1x3MvqZGTxHqdK+SPzxoVpKHuMUJZJjW8/jg=
Subject key identifier:   EE:D4:73:53:7D:EB:32:09:C2:A2:A7:80:B9:00:F7:8F:3D:1B:26:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2836740FA193AB167F77CDEC74403D5E5D89259D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 18:29:55 +0000
Certificate not after:    Wed 26 Mar 2025 18:34:55 +0000
Subordinate resources:    AS: 269410
                          IP: 45.186.40.0/22
                          IP: 131.161.160.0/22
                          IP: 2804:6428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:36:74:0f:a1:93:ab:16:7f:77:cd:ec:74:40:3d:5e:5d:89:25:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 18:29:55 2024 GMT
            Not After : Mar 26 18:34:55 2025 GMT
        Subject: CN=EED473537DEB3209C2A2A780B900F78F3D1B267E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:c5:27:2f:d4:dc:d7:77:87:d0:cd:ee:13:
                    7c:7b:3c:bf:cc:f3:a7:fc:ef:c0:ee:00:f2:5e:7f:
                    74:cd:38:42:95:81:ea:8c:28:35:e8:85:cb:20:48:
                    f5:40:50:62:8d:77:35:cf:bb:66:79:17:11:fa:cb:
                    1e:ac:93:e0:7e:d1:7d:a5:b4:e9:19:d2:02:a3:66:
                    12:68:25:3d:25:5b:a2:67:cf:d5:a9:50:46:4d:fe:
                    fd:87:d3:4c:77:50:4b:f2:96:0a:69:bb:6c:e8:f7:
                    bf:60:37:57:97:68:4c:db:81:86:65:ad:4d:1b:d5:
                    80:86:ea:24:7d:38:8d:81:a3:15:1f:60:72:7a:25:
                    ae:08:e0:12:3b:29:65:dd:fa:58:31:ff:05:ec:70:
                    3e:32:0e:2e:11:74:18:f9:5f:00:36:e1:1c:be:7c:
                    85:6f:2e:fd:b3:cf:13:9d:ed:35:49:53:dc:34:29:
                    c4:82:7b:ae:07:6a:8d:b2:70:8f:2e:04:36:f4:9b:
                    30:cc:9b:63:70:c6:85:2b:a3:78:1d:d1:dc:15:48:
                    cf:bd:ce:b5:57:46:b3:26:d7:92:ab:3a:f9:12:bd:
                    e5:9d:37:97:45:ae:fb:0b:00:29:20:87:4c:ce:c7:
                    2a:82:3a:1c:e9:1e:51:8e:b9:e0:44:32:ee:c8:2b:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:D4:73:53:7D:EB:32:09:C2:A2:A7:80:B9:00:F7:8F:3D:1B:26:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/0/EED473537DEB3209C2A2A780B900F78F3D1B267E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.40.0/22
                  131.161.160.0/22
                IPv6:
                  2804:6428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269410

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:8c:93:e7:4e:aa:78:2b:57:e1:64:63:f8:66:93:7b:ca:
         07:f0:72:3f:32:df:ef:b2:3d:f4:cb:4a:fe:4c:79:96:a0:55:
         7c:11:41:1b:8a:c9:f9:9b:6a:57:29:c5:14:7a:ec:ab:51:86:
         d0:22:ff:c3:52:7d:62:39:da:93:ff:94:6a:cf:00:ef:f0:7b:
         dc:d3:82:f8:78:80:30:9d:e6:fe:1d:9a:62:4e:43:2a:c1:0b:
         34:26:5d:1c:4b:d7:e6:3a:8a:47:43:be:99:cf:33:be:df:27:
         4c:d1:18:80:83:47:ab:a8:4b:25:89:f8:bf:e6:58:6d:98:63:
         cd:5f:ab:b9:50:39:3c:1a:7a:52:8c:db:2b:ff:80:eb:ba:8c:
         45:e5:25:76:a5:a3:59:58:62:f7:22:13:a5:c3:18:df:0e:a9:
         bc:b4:c1:2c:4b:db:0e:e9:2a:86:e1:9b:8c:55:1e:c5:93:7d:
         d5:b3:bc:a2:6b:97:f4:ad:6a:3f:b9:47:58:03:c7:88:1b:09:
         1c:e6:40:75:d3:db:f2:46:22:b7:49:e4:4c:0a:d9:ba:b3:22:
         a5:6d:7b:54:07:50:0e:59:eb:c1:97:d8:1d:76:a6:cc:4a:10:
         e4:9a:b8:8c:6a:05:54:a0:1b:d6:53:8e:34:41:83:05:6c:de:
         1a:76:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----