Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE5A5033277982357A8E8C44E9D433956B167F1D.cer
File:                     FE5A5033277982357A8E8C44E9D433956B167F1D.cer (raw, json)
Hash identifier:          QRqlGh/b4cXT9NiChOs6P4kPS4F+7TfvPaPUw0fARDg=
Subject key identifier:   FE:5A:50:33:27:79:82:35:7A:8E:8C:44:E9:D4:33:95:6B:16:7F:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A3F23BEC1283BA738E75B2E03248AF4966AE25D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/0/FE5A5033277982357A8E8C44E9D433956B167F1D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 02:08:11 +0000
Certificate not after:    Wed 29 Jan 2025 02:13:11 +0000
Subordinate resources:    AS: 271000
                          IP: 177.223.128.0/22
                          IP: 2804:74bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:23:be:c1:28:3b:a7:38:e7:5b:2e:03:24:8a:f4:96:6a:e2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 02:08:11 2024 GMT
            Not After : Jan 29 02:13:11 2025 GMT
        Subject: CN=FE5A5033277982357A8E8C44E9D433956B167F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:1b:13:00:d3:fa:ee:59:9e:58:6d:46:27:
                    03:ee:17:d6:56:fc:80:b3:ec:c8:47:97:13:59:27:
                    45:28:49:24:28:b4:51:fb:b3:fd:bd:b0:17:1f:fa:
                    5a:51:4b:50:dd:78:a7:ec:08:58:16:ee:1d:eb:74:
                    7f:e7:09:89:e7:00:64:dc:7e:64:03:a7:d9:be:8d:
                    88:33:c0:c2:5b:3a:20:dd:22:97:e8:1a:8a:48:6e:
                    e6:c5:7c:02:e0:db:be:2f:22:fb:14:a3:03:e6:4a:
                    3e:26:c6:b3:3f:ce:9c:6d:83:a4:9b:6e:21:3b:e2:
                    d9:f4:c4:81:b5:46:c4:15:ed:b4:3a:72:da:d1:2e:
                    89:c6:ee:6e:8b:a1:e9:b6:2d:31:dd:9b:29:87:e4:
                    62:e2:1b:da:da:04:e6:72:e7:ee:80:e5:b4:e0:93:
                    e4:ca:b0:1a:94:55:95:ca:87:e4:a0:7a:49:e0:cb:
                    03:ee:44:61:dc:f0:46:1e:a0:f0:f9:76:5c:c2:2a:
                    63:06:28:d9:82:11:63:90:a3:29:21:67:7e:27:9a:
                    87:7f:b8:2c:8d:58:6e:60:e7:84:b6:b8:23:31:e6:
                    01:89:b1:ab:df:fe:8c:40:9c:16:42:23:3a:12:fc:
                    fc:ee:1b:28:f4:af:dc:a7:f8:69:87:c4:84:6b:b9:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:5A:50:33:27:79:82:35:7A:8E:8C:44:E9:D4:33:95:6B:16:7F:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/0/FE5A5033277982357A8E8C44E9D433956B167F1D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.128.0/22
                IPv6:
                  2804:74bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271000

    Signature Algorithm: sha256WithRSAEncryption
         60:80:76:3c:f4:73:49:07:7a:31:e9:af:1a:f8:8d:72:23:26:
         e9:1e:6e:39:9a:9d:66:d5:6a:09:8c:5b:a9:b4:7e:66:d6:48:
         3b:6f:25:70:1a:8b:3e:b9:8a:f4:12:f6:0a:ec:63:06:09:1e:
         1e:11:0d:23:e3:d1:4d:9a:42:b5:98:8e:2b:7e:73:a7:1c:19:
         01:2d:5d:d2:ff:86:1d:1e:03:80:b9:4a:b1:ff:ef:c3:40:6e:
         4e:b2:c2:99:9f:45:1f:c2:9a:a2:0b:f5:b7:9e:15:6b:3b:bf:
         ff:fb:bc:f9:c8:2a:d0:f3:ea:89:3e:cb:3c:29:5c:26:de:d6:
         98:ad:93:72:37:19:53:a1:bb:58:53:0f:ed:3f:2a:93:be:e6:
         54:36:82:d8:d6:98:78:b2:44:b5:1a:d7:ac:12:03:12:63:56:
         ae:b6:5e:49:11:2d:83:90:0e:4b:84:14:51:58:73:9e:fd:c2:
         51:41:43:3d:76:69:11:fc:6b:6b:a3:28:35:6f:c3:cd:77:2b:
         18:2e:52:12:46:f7:e0:36:e3:07:80:f6:80:ae:c4:d0:6b:8e:
         fc:f3:07:9e:bb:10:a6:f6:91:aa:95:39:6b:f1:17:ea:98:98:
         aa:73:5b:77:de:76:8a:3f:d3:8d:2c:e4:2b:42:8f:f9:ac:6d:
         ab:85:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----