Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer
File:                     F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.cer (raw, json)
Hash identifier:          FoFYC0UB8yOQ72ooYX1Mx10ZPOPBJR55gj7VHVEYzsc=
Subject key identifier:   F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E27794A51A7C47DE2B50782AF9E4047F0088CF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 19:21:38 +0000
Certificate not after:    Tue 25 Mar 2025 19:26:38 +0000
Subordinate resources:    AS: 268135
                          IP: 45.170.4.0/22
                          IP: 2804:588c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:27:79:4a:51:a7:c4:7d:e2:b5:07:82:af:9e:40:47:f0:08:8c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 19:21:38 2024 GMT
            Not After : Mar 25 19:26:38 2025 GMT
        Subject: CN=F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:cf:72:b5:8f:99:65:df:d2:3a:c0:09:8d:
                    78:81:e4:c7:14:90:db:eb:4f:73:aa:aa:2e:b1:a4:
                    d9:7d:a1:c5:b4:68:5f:0d:32:f2:7c:79:a3:60:ca:
                    1a:3b:76:a9:1d:c8:e2:2b:ce:ab:ea:f7:c0:82:50:
                    98:47:f8:1c:ce:12:aa:b2:4c:e5:5b:1f:06:a0:7e:
                    19:15:9c:a2:8f:ae:68:f8:50:6c:1a:6f:9b:5d:f5:
                    ad:ac:ac:6c:7a:68:4c:65:88:42:32:97:68:12:9e:
                    e6:01:70:dd:b4:b8:13:52:15:9a:f4:b9:42:f9:5d:
                    16:51:3e:56:4d:dd:39:f8:e8:d0:94:c2:64:29:fb:
                    ab:5f:74:db:5b:a8:85:dc:92:5d:be:14:dd:9a:81:
                    58:bd:d4:10:d8:9c:ed:c8:42:5a:8b:9d:2e:e9:e2:
                    53:6f:03:65:b9:4f:0d:63:03:44:d7:3c:df:61:15:
                    1b:ab:3a:3e:05:71:43:9e:b6:17:d7:a3:99:23:a4:
                    d8:41:b3:fb:fe:58:eb:c7:66:4a:f4:76:4c:61:29:
                    d6:e6:3e:00:69:aa:f3:1a:12:85:db:b6:0a:27:ae:
                    64:06:59:b7:9c:83:b9:29:9e:14:6c:1a:57:dd:b1:
                    9e:b0:06:5c:e9:85:f2:47:61:10:9c:c7:84:fb:37:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:40:4F:5E:BD:7E:5F:7C:4C:44:10:47:EE:BA:E0:0C:C0:6D:85:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/F7404F5EBD7E5F7C4C441047EEBAE00CC06D85B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22
                IPv6:
                  2804:588c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268135

    Signature Algorithm: sha256WithRSAEncryption
         12:10:97:4c:3b:eb:3f:d8:d5:35:7b:b9:34:29:59:b4:4a:6e:
         c5:96:08:2c:6d:81:4b:9a:56:9d:dd:7c:a9:d7:f1:23:23:27:
         c4:dd:3f:c5:b6:5d:90:0f:64:6e:09:aa:30:58:f7:dc:91:e3:
         a4:3e:49:da:4f:f6:f0:5b:77:df:31:89:dd:b6:24:5a:74:15:
         c3:ad:ae:cc:fb:15:3b:21:3a:4c:7e:21:2c:4f:7b:fe:82:f3:
         07:f6:37:f9:77:dd:9b:8a:da:d7:92:30:59:b6:df:48:b0:a9:
         b2:8b:77:60:56:8c:46:71:df:63:6c:06:84:ec:53:9b:07:59:
         0d:82:99:28:4b:b6:ae:5f:d4:53:23:81:82:d2:fe:28:02:06:
         79:c4:cd:ae:c6:67:94:16:4f:6a:51:f1:42:ee:82:62:de:32:
         00:e9:05:d4:62:51:16:73:e1:30:35:ed:e4:09:22:1d:05:4e:
         17:88:0b:b4:3e:4e:a9:a1:1a:05:e0:e9:5b:52:4b:ba:2c:f2:
         9a:c1:e0:bb:43:96:54:13:4e:1b:29:e0:bf:c9:7b:12:65:c9:
         87:de:64:db:80:9e:6e:50:cd:8f:60:bb:16:9a:82:c2:08:b1:
         50:9e:ee:48:e3:58:33:9e:de:16:c6:85:3b:2a:b2:a9:91:73:
         c0:3e:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----