Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.cer
File:                     F33964B1ED87508677A8F011D0970E1ED41A02A3.cer (raw, json)
Hash identifier:          U5tea8hEWOL2+i5fLvikTa5XktXfazUOvY04Wf4G/lU=
Subject key identifier:   F3:39:64:B1:ED:87:50:86:77:A8:F0:11:D0:97:0E:1E:D4:1A:02:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56CC883C460FD5A5B2BA3386A45BB2723294727F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 13:07:12 +0000
Certificate not after:    Fri 14 Feb 2025 13:12:12 +0000
Subordinate resources:    AS: 270928
                          IP: 190.123.2.0/23
                          IP: 2804:73a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cc:88:3c:46:0f:d5:a5:b2:ba:33:86:a4:5b:b2:72:32:94:72:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 13:07:12 2024 GMT
            Not After : Feb 14 13:12:12 2025 GMT
        Subject: CN=F33964B1ED87508677A8F011D0970E1ED41A02A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:99:eb:7b:9e:be:f4:71:2e:24:6f:b5:70:
                    34:9f:f2:04:a4:17:91:95:51:2e:3d:44:1a:e0:a1:
                    13:53:19:1c:be:03:a9:77:60:59:eb:a3:5b:51:f7:
                    77:da:7b:ec:09:f5:16:53:d0:9e:be:6a:f8:e9:9a:
                    a8:e0:d5:4d:21:fd:50:00:a7:c5:3e:67:24:46:af:
                    45:74:78:2b:57:f1:cb:bc:bb:81:85:6e:6a:92:b1:
                    51:fa:da:ec:dd:ca:68:a2:eb:28:fc:66:cd:97:45:
                    7c:79:a9:b2:b4:1c:3b:8e:a2:c3:9e:e5:91:d5:2c:
                    c3:a3:4c:52:0b:38:47:84:55:9c:bd:27:6f:31:df:
                    49:38:6e:16:58:fa:6b:4a:0f:d3:e2:e7:c0:a2:92:
                    a1:5f:c3:e0:5d:3f:cd:b5:bf:44:2e:f3:49:c8:31:
                    c5:49:ad:2b:5c:20:a9:68:90:34:33:ba:10:31:e3:
                    bb:ac:81:f0:e9:03:62:71:ad:32:24:d4:13:b1:cd:
                    1c:a6:26:65:03:27:cd:cf:29:83:24:f2:da:b1:76:
                    a4:f4:de:c6:3e:a0:88:58:cb:39:d8:56:d1:40:a8:
                    21:89:4d:ad:d0:b9:9a:d1:49:30:ec:45:16:d6:7e:
                    b1:3a:0c:19:ac:cc:54:be:36:b2:43:e0:b4:c7:a6:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:39:64:B1:ED:87:50:86:77:A8:F0:11:D0:97:0E:1E:D4:1A:02:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/0/F33964B1ED87508677A8F011D0970E1ED41A02A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.2.0/23
                IPv6:
                  2804:73a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270928

    Signature Algorithm: sha256WithRSAEncryption
         a4:a6:fe:06:21:86:68:82:7c:0a:f6:8a:63:27:e6:21:c1:67:
         b4:b0:f4:69:1f:f2:e7:d9:64:2e:bc:c1:64:12:e9:a6:ca:6e:
         a0:b5:57:f9:53:f4:c5:cd:d2:fa:9c:a3:f9:04:1e:fd:7b:d5:
         8c:62:83:03:84:46:bb:31:b7:2b:4f:23:be:0e:b8:60:17:ae:
         fd:8f:e6:79:9e:95:33:a2:c0:d3:58:12:71:cf:8d:a2:a8:a0:
         91:b3:8a:a7:d5:eb:59:6f:3a:de:13:f2:f8:01:1d:c3:27:37:
         e1:79:7f:f7:a9:be:d5:a4:75:36:88:45:34:74:d2:12:15:78:
         a1:04:92:aa:56:3b:a7:bf:01:f5:e7:8b:bc:fe:5b:c6:3d:57:
         92:0d:79:e8:3c:a3:7e:26:5e:e7:c8:f0:eb:19:b9:ac:27:ed:
         e2:dc:bb:70:e5:81:ae:9a:87:b4:17:d8:26:50:6a:43:67:5d:
         2b:c4:4a:5f:06:31:55:ad:aa:6c:03:58:02:67:d6:5e:7b:6d:
         a8:1c:f4:67:bf:c0:2c:03:1e:be:23:b0:88:a8:11:44:e5:7d:
         43:03:85:59:4e:f4:fd:02:97:c9:47:05:36:f2:86:65:aa:e6:
         79:84:f3:5c:c5:7c:54:f1:44:a4:7d:87:ab:b1:2c:e3:e6:d5:
         59:a0:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----