Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer
File:                     FC96EBB6A0A2968F71730ACB4C004194AFD1085E.cer (raw, json)
Hash identifier:          TzesFvVecDvJdpU3VodIawJY/Uu8p8PXQUa/lBym6C4=
Subject key identifier:   FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D4918FAD653C13047AE8019CA87DED4FBD45B56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 12:03:22 +0000
Certificate not after:    Fri 24 Jan 2025 12:08:22 +0000
Subordinate resources:    AS: 264230
                          IP: 190.109.88.0/22
                          IP: 2804:2490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:49:18:fa:d6:53:c1:30:47:ae:80:19:ca:87:de:d4:fb:d4:5b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:03:22 2024 GMT
            Not After : Jan 24 12:08:22 2025 GMT
        Subject: CN=FC96EBB6A0A2968F71730ACB4C004194AFD1085E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:e6:d3:79:37:98:df:0e:08:d8:81:44:9b:
                    bb:5c:c2:52:a9:80:1f:c8:ce:96:a7:cf:cc:21:5b:
                    b9:f0:96:b8:33:1c:cd:75:c0:33:26:db:94:15:7f:
                    9a:0b:1a:ef:b3:97:0c:e5:60:f8:cb:99:c0:79:6b:
                    94:89:13:2b:68:34:92:e6:a4:72:2f:99:e1:ca:41:
                    d3:ec:4b:2f:b8:ed:b0:db:6b:28:10:03:2f:36:b7:
                    a6:8f:5d:f3:a0:b9:56:04:6c:f4:ba:6d:26:a5:d9:
                    4c:1b:77:62:65:5f:36:3e:bb:78:23:40:e3:dd:ba:
                    02:f9:46:53:93:56:a5:07:7c:15:67:11:c4:4e:fa:
                    69:de:ea:0a:ee:b2:42:55:8d:fe:62:b6:c7:26:43:
                    8d:7a:a8:f0:5f:c0:ef:10:b2:8e:d4:18:70:67:86:
                    c8:e9:cd:eb:bd:9f:24:10:74:30:09:40:76:9c:b3:
                    13:72:67:bb:b5:cf:8d:c6:12:4c:88:c1:5b:d7:2f:
                    17:22:10:36:1c:b1:bb:e7:99:ee:97:7b:3b:a1:21:
                    d1:51:a4:65:7e:d2:76:f5:7b:3f:5f:62:69:e7:8c:
                    d2:c4:25:5a:87:e4:3e:d5:e7:48:96:bc:32:c2:18:
                    a4:e4:1c:b0:39:eb:36:b1:11:43:fe:ad:1c:f6:2d:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:96:EB:B6:A0:A2:96:8F:71:73:0A:CB:4C:00:41:94:AF:D1:08:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/FC96EBB6A0A2968F71730ACB4C004194AFD1085E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22
                IPv6:
                  2804:2490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264230

    Signature Algorithm: sha256WithRSAEncryption
         b6:8f:00:6c:c4:20:08:7e:65:6b:ab:50:bc:a8:cb:1b:0d:17:
         20:4f:f3:af:83:ee:a4:1c:bf:5f:8a:ce:2d:28:65:8f:85:8b:
         03:08:1d:23:c5:52:f9:3f:df:d3:77:c9:8f:9d:a2:76:aa:b0:
         8d:2c:7b:ec:90:87:b7:c2:13:05:76:10:72:02:fa:19:94:cf:
         dd:ae:1c:94:ba:cd:ef:df:bd:a6:58:36:c3:a4:2b:dc:32:c0:
         b5:c9:b8:58:f0:03:19:6c:1d:96:72:13:ae:bf:43:8b:e7:99:
         34:2a:e2:be:04:c6:61:8f:2c:52:16:8f:04:8f:10:7f:54:d7:
         35:df:0f:34:45:9b:67:5e:63:1f:b7:b0:42:2f:cb:82:c5:bc:
         d8:3b:44:fa:ef:58:eb:f4:35:30:33:19:0e:69:8d:62:95:be:
         c2:ca:f6:8e:1b:49:5d:f5:bc:c9:23:33:cd:6f:d2:29:d1:a6:
         da:15:ec:57:3d:85:02:2d:6c:f0:57:07:88:4e:28:af:02:bb:
         6d:f7:c8:a1:c6:15:7c:ad:5c:ef:bf:47:23:16:71:a1:e8:7f:
         94:91:76:ca:86:b0:fe:02:8c:87:cd:37:35:e6:4e:e0:80:ce:
         e8:25:90:6d:bf:5a:b1:a7:85:d0:07:79:cc:cf:be:ef:44:8a:
         3a:da:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----