Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.cer
File:                     F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.cer (raw, json)
Hash identifier:          f+NBjoDhNXO7iVHWt2xCQ6ZsFZNsxY0Ph3qwSFWC2ek=
Subject key identifier:   F5:14:DA:40:EC:B6:D5:EA:10:58:D6:19:CF:C2:BC:18:CE:0B:98:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A8CB64A43FDC384DCF4EB0B31C5B26B33119B68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 13:31:27 +0000
Certificate not after:    Fri 14 Mar 2025 13:36:27 +0000
Subordinate resources:    AS: 267083
                          IP: 45.228.244.0/22
                          IP: 2804:47e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8c:b6:4a:43:fd:c3:84:dc:f4:eb:0b:31:c5:b2:6b:33:11:9b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 13:31:27 2024 GMT
            Not After : Mar 14 13:36:27 2025 GMT
        Subject: CN=F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:8a:b3:55:77:f7:9c:fd:08:b5:f3:c3:11:
                    ed:2e:b0:76:45:ea:f8:a4:bb:f6:57:87:30:f2:8a:
                    23:8d:01:ba:f7:b2:87:c8:89:48:ff:83:17:39:80:
                    ad:42:12:02:b8:e2:f2:6c:5f:2c:7b:90:eb:23:16:
                    69:da:42:5d:08:9e:57:c7:18:2d:7a:28:58:7c:90:
                    b7:40:f6:a3:4e:f6:d4:8c:d3:ce:b3:60:0a:55:92:
                    ba:55:e2:7b:38:ee:2e:27:75:3f:94:d3:fa:fe:a3:
                    85:23:af:da:36:63:12:7b:5a:ca:4a:bb:d7:98:62:
                    bf:f4:14:91:24:ed:d9:d0:f7:a9:d1:7a:b2:68:86:
                    e7:9a:ad:1e:fc:04:f9:11:26:9c:3d:cf:06:49:89:
                    5b:6f:43:a3:e3:a1:88:12:0f:09:ef:8f:15:bc:c6:
                    34:1e:aa:28:b9:55:b8:02:57:5f:c1:b4:37:96:4e:
                    89:14:7e:1c:f2:36:f8:06:4e:1e:d9:84:3f:9a:94:
                    cc:cb:8c:f1:bb:98:a9:8d:0b:ff:e9:b9:94:01:77:
                    32:0a:11:22:2f:fb:5c:76:1b:5e:61:56:3b:55:2f:
                    fc:82:a9:f2:7c:91:ba:65:82:b1:02:e9:62:4e:76:
                    29:00:c7:8d:9f:cf:6b:7b:69:2f:ba:01:e9:69:2c:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:14:DA:40:EC:B6:D5:EA:10:58:D6:19:CF:C2:BC:18:CE:0B:98:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/0/F514DA40ECB6D5EA1058D619CFC2BC18CE0B9859.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.244.0/22
                IPv6:
                  2804:47e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267083

    Signature Algorithm: sha256WithRSAEncryption
         9b:a7:23:7f:c2:d1:d1:53:f5:00:cf:a1:9e:ce:28:77:d7:14:
         7b:c6:79:5b:56:f1:f7:ae:f8:da:fc:10:1e:a3:b6:64:21:34:
         8a:9a:75:14:1a:7d:b1:57:a6:df:1f:02:bb:49:cf:62:f2:19:
         d0:bb:08:43:57:26:23:c1:34:bb:9d:d5:3c:86:8c:3a:73:04:
         e4:8c:0e:6f:b3:37:ab:92:8d:58:7b:40:9d:0c:2b:7b:7d:de:
         1a:d6:07:ea:d1:45:8a:6b:a1:3e:78:24:37:4c:86:75:e7:6d:
         dd:a0:fd:cb:88:46:c4:af:80:a1:30:ba:23:d0:76:8d:ca:f4:
         8b:44:d1:92:c5:8b:c7:c6:65:fa:5b:a4:cc:8f:49:bd:8f:82:
         f1:19:d0:02:55:f5:48:03:a2:f8:32:79:ec:23:bf:d1:e3:5b:
         22:d3:55:bf:b4:2a:1c:e3:d4:31:e7:19:d3:86:d0:c4:ec:5a:
         e7:63:dc:13:12:01:00:92:04:48:56:42:41:e4:07:1d:14:49:
         ca:72:1c:7d:2b:c0:5f:63:2d:76:32:f4:63:80:e7:1c:1e:69:
         38:09:da:32:9a:92:82:e8:c9:ae:f6:80:57:66:c3:a4:7b:0f:
         8e:48:cd:96:f3:54:47:c1:5f:13:af:88:4c:c9:0c:17:d9:e6:
         2c:31:2e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----