Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer
File:                     EFC6D9641E6897F52BC48673F154FC946766AD90.cer (raw, json)
Hash identifier:          pDGOiEb2Xg+lQvGd7+1XE4g4wZ0YfCPfjxVo3/Ra8nw=
Subject key identifier:   EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5722AC0D4A1FFB88F0E90F59D362A22E5839AD5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/EFC6D9641E6897F52BC48673F154FC946766AD90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:21:48 +0000
Certificate not after:    Fri 11 Apr 2025 13:26:48 +0000
Subordinate resources:    AS: 263080
                          IP: 187.33.48.0/21
                          IP: 189.201.208.0/20
                          IP: 2804:964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:22:ac:0d:4a:1f:fb:88:f0:e9:0f:59:d3:62:a2:2e:58:39:ad:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:21:48 2024 GMT
            Not After : Apr 11 13:26:48 2025 GMT
        Subject: CN=EFC6D9641E6897F52BC48673F154FC946766AD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:ac:5f:9a:ce:25:93:41:a1:2d:ad:a9:ad:
                    4d:3f:dc:51:c1:13:ee:7c:d5:80:1b:f6:9f:d5:21:
                    b7:66:34:1c:6b:d1:a4:6a:60:34:65:8c:a3:51:31:
                    49:96:7d:11:11:58:54:f8:e7:04:93:92:ea:bb:b7:
                    a3:37:11:c6:6a:b9:e6:f1:bc:f4:9a:5d:be:86:9e:
                    77:4e:53:69:75:3f:d5:03:d7:51:13:f7:2a:78:a7:
                    3b:6d:45:91:2c:92:d0:c6:fe:18:d8:55:fd:e9:be:
                    5d:92:55:10:ec:dd:a5:b8:28:29:98:44:90:59:78:
                    df:98:20:a3:ea:1f:a8:1b:20:50:c8:2b:33:47:e1:
                    f7:79:53:d6:e1:49:28:96:c1:3c:3d:7e:e0:c7:06:
                    4e:fc:ba:ec:9e:44:3d:1f:a1:da:9c:1e:66:1e:54:
                    a1:d7:9a:64:35:58:4a:a8:89:b9:ce:45:14:6f:0f:
                    ff:99:02:2a:38:12:76:fa:20:bd:b4:7d:90:0b:55:
                    b6:21:bd:08:a5:28:e0:7e:f1:af:35:f4:be:e2:a4:
                    ed:99:31:a9:ef:97:a4:fd:43:a3:ee:71:82:76:ce:
                    9b:09:59:f9:60:ae:fb:7c:a6:92:4a:d7:ac:46:d6:
                    0a:e3:8c:81:53:fb:11:3c:c9:1e:83:50:3f:32:93:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/EFC6D9641E6897F52BC48673F154FC946766AD90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.48.0/21
                  189.201.208.0/20
                IPv6:
                  2804:964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263080

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:ca:1a:fb:06:4c:81:f6:e5:a1:01:18:24:cb:f4:90:c5:
         61:0e:78:b4:3e:07:ab:70:a6:fd:90:56:83:ec:e8:37:9a:de:
         ee:e0:e9:4b:66:23:d5:0e:a2:bb:7a:56:97:b1:2f:a2:79:4a:
         9a:2c:62:5d:11:d9:99:26:1a:6d:2f:0a:0e:72:50:d2:27:7e:
         2d:13:1f:17:42:07:8a:4a:23:69:a0:19:7f:9c:25:16:15:a8:
         a4:1c:51:5c:b2:a4:8f:00:9b:1c:52:97:98:d1:88:dc:8b:3d:
         15:7f:c8:35:17:97:0b:94:be:d1:0e:f3:1c:df:ab:9a:5f:d6:
         e6:88:b9:8a:71:ca:ce:29:66:38:4a:6e:a3:1e:00:c7:b3:40:
         6d:d7:b6:14:5f:d7:d0:4a:e8:f3:f3:06:16:96:78:09:91:6e:
         12:96:56:14:25:e2:f0:8f:8f:d7:00:bd:89:11:c1:a7:89:1f:
         28:2b:1d:66:46:cf:ea:03:7a:09:ea:67:8c:8c:f4:2e:6e:da:
         78:3d:dc:13:7a:89:7d:1c:17:37:55:80:b6:42:d8:5e:94:96:
         f8:7a:80:aa:08:7a:11:74:59:c1:6a:cc:fb:49:52:5b:50:02:
         0b:5b:09:d6:a2:1f:5a:64:3a:0d:a1:67:ef:4f:6e:52:87:49:
         94:b4:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----