Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer
File:                     F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.cer (raw, json)
Hash identifier:          +8irnSdopJGidVQRhQDLxXxarPuqsg6xeURNOiRzVyU=
Subject key identifier:   F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11DE73444D9834875B4DDF4283CB563FD30E0E1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 15:23:50 +0000
Certificate not after:    Mon 20 Jan 2025 15:28:50 +0000
Subordinate resources:    AS: 271104
                          IP: 179.42.4.0/22
                          IP: 2804:7654::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:73:44:4d:98:34:87:5b:4d:df:42:83:cb:56:3f:d3:0e:0e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 22 15:23:50 2024 GMT
            Not After : Jan 20 15:28:50 2025 GMT
        Subject: CN=F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:46:d7:ef:f5:00:9f:e1:5d:64:fa:0e:fe:
                    01:07:82:10:a4:f9:6f:c2:91:4e:dd:a2:ec:1e:25:
                    51:3c:4d:f1:f3:dc:ac:d4:1a:e4:be:6e:93:59:8d:
                    1a:62:f1:2c:2b:55:b3:42:ff:a9:df:d5:21:28:65:
                    32:f4:60:b6:32:eb:a4:99:8d:fe:a6:e6:66:51:c5:
                    33:ea:a8:03:b4:e6:5b:f9:d3:6e:bc:73:05:bd:bc:
                    6e:24:f8:12:0c:85:98:3f:9c:8b:2e:8d:a9:13:1d:
                    28:6f:8c:c0:92:23:c7:09:03:46:a0:ab:6a:68:b5:
                    7a:92:5e:68:df:0a:4c:05:24:de:8c:a5:6f:57:34:
                    5f:77:fa:e9:19:74:d6:40:5c:0d:c0:7e:16:c2:a9:
                    a7:e9:94:9c:3a:d8:14:29:1f:ea:66:89:9f:02:01:
                    7b:a7:3a:b6:1a:54:e1:24:1a:31:e1:f1:81:2c:55:
                    83:86:4a:02:7b:32:4c:31:b1:e3:10:69:5b:0c:44:
                    92:ad:0a:f3:96:38:48:fb:fb:0e:ef:9b:51:ce:4c:
                    f5:42:98:6e:81:3d:e8:71:3b:50:28:e3:4f:b4:41:
                    e6:0d:31:d4:ee:d8:e5:3f:14:ca:f7:bb:a3:b1:51:
                    b4:04:4e:97:1b:76:7b:e7:1a:bd:93:e0:86:cf:13:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:E2:77:D5:D1:FA:8A:0B:BE:EA:47:34:CD:60:14:9E:6D:A6:0B:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/1/F8E277D5D1FA8A0BBEEA4734CD60149E6DA60B50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.4.0/22
                IPv6:
                  2804:7654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271104

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:2a:a6:49:2c:b8:cb:d3:b1:57:59:11:77:2c:77:03:a8:
         50:7e:26:26:f8:ad:c6:1d:e3:85:8c:67:c9:14:ce:50:a4:30:
         25:37:70:c4:d4:44:0e:2f:a8:a9:9d:2e:9e:d4:42:a5:ae:43:
         eb:94:f7:9f:9f:ff:b6:1e:f9:c6:c3:0c:74:97:51:86:95:ee:
         dd:9d:f5:7f:33:ac:ef:27:cb:d7:76:bb:ab:7b:08:ee:80:03:
         da:1a:44:cf:34:a3:58:a9:7f:79:98:bf:68:51:c0:2d:83:74:
         f4:42:60:34:57:82:df:ba:dd:21:78:55:26:78:b3:b8:84:a4:
         96:43:8d:13:ad:ec:3c:f9:4f:22:09:78:51:71:4b:cf:b6:43:
         de:29:cb:d9:dc:32:aa:3f:a6:52:2b:5e:37:4b:9a:93:7f:96:
         7f:c8:95:ae:8e:ff:d1:01:a9:4b:53:1b:8b:8a:47:d4:ce:90:
         6f:d6:d9:82:89:98:28:33:61:7b:b5:81:c1:85:3b:37:c3:5a:
         6c:1c:f6:62:9c:18:53:be:e9:70:96:24:0b:ac:5f:a5:66:61:
         22:e5:ad:dd:bc:99:9e:bd:01:3d:60:1c:b1:c0:de:23:91:84:
         57:42:0a:0f:5b:94:49:82:72:80:b6:e0:f4:ad:7e:a1:85:15:
         de:09:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----