Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/174404233E84848BC98C79A3014FF75B28A8090C.cer
File:                     174404233E84848BC98C79A3014FF75B28A8090C.cer (raw, json)
Hash identifier:          6mhZYE10NFsq84qcFLTibDTgyEp6fWgFBRNnLfTCApE=
Subject key identifier:   17:44:04:23:3E:84:84:8B:C9:8C:79:A3:01:4F:F7:5B:28:A8:09:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CA2EF636B36B7CFACFC4899E9944264C817C47F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/174404233E84848BC98C79A3014FF75B28A8090C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:28 +0000
Certificate not after:    Tue 21 May 2024 09:25:28 +0000
Subordinate resources:    AS: 268860
                          IP: 45.173.84.0/22
                          IP: 2804:5ba4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a2:ef:63:6b:36:b7:cf:ac:fc:48:99:e9:94:42:64:c8:17:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:28 2023 GMT
            Not After : May 21 09:25:28 2024 GMT
        Subject: CN=174404233E84848BC98C79A3014FF75B28A8090C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:1f:0f:ec:bf:a4:20:5d:ab:2a:67:c1:5e:
                    ac:4d:7b:23:a8:e9:09:d2:57:49:9c:69:3b:9f:7e:
                    ed:eb:89:b0:b4:5b:a1:8b:eb:75:5b:d8:98:e2:f1:
                    2f:e3:a3:bc:e3:98:61:a8:93:31:f6:43:a5:85:ad:
                    1a:54:88:48:75:6c:af:a7:9f:07:3d:f2:11:42:a2:
                    a7:c7:f1:d0:e4:72:85:6b:bc:94:ea:36:8c:4b:26:
                    a8:2d:62:11:3d:c9:bd:81:f0:ca:92:c9:4c:f1:af:
                    0d:74:34:26:42:59:55:f9:2c:88:74:6e:e6:83:a5:
                    d0:cd:da:99:69:0a:ee:90:ac:f5:96:34:2d:26:4f:
                    7b:fd:d6:6a:11:36:67:92:d6:16:ab:fb:e6:14:8a:
                    0d:ae:b4:a8:64:15:91:0e:81:ed:4d:ce:d6:33:8d:
                    91:1b:57:b9:8a:a0:6a:54:fc:96:b8:21:b9:17:75:
                    95:c2:e4:dd:bc:d3:38:8b:2f:52:e3:e2:58:f5:93:
                    67:51:b8:9f:11:1e:6b:4f:2e:ba:1b:4d:61:ce:11:
                    9d:62:ec:d1:7f:45:af:d9:79:cb:b0:ee:8f:dc:2d:
                    43:06:3d:d3:d4:b8:16:70:f1:f1:78:0b:01:8e:3e:
                    c6:27:97:ed:91:05:bf:63:f2:ac:09:1c:00:43:12:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:44:04:23:3E:84:84:8B:C9:8C:79:A3:01:4F:F7:5B:28:A8:09:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/174404233E84848BC98C79A3014FF75B28A8090C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.84.0/22
                IPv6:
                  2804:5ba4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268860

    Signature Algorithm: sha256WithRSAEncryption
         9f:21:6f:3b:8d:50:31:b6:47:cc:ac:21:89:a7:7d:a2:c1:f6:
         c3:da:15:52:85:7b:fa:80:d6:ce:71:6f:ca:41:74:5e:5e:74:
         b9:42:64:d2:3a:a8:f2:b3:4b:f0:94:7c:6f:90:3b:b6:0f:56:
         00:e8:ae:9c:58:45:d5:a7:9c:78:47:45:a5:e8:ca:6f:58:ff:
         36:81:40:e3:ed:d5:ac:51:55:e4:0f:dd:c7:dc:8a:91:4e:09:
         58:f4:56:15:50:9d:5a:c3:23:ad:30:ff:b8:9f:41:66:76:fd:
         ca:d8:c9:0f:45:f5:55:ed:3d:d8:bb:f7:f3:58:ef:85:3f:92:
         b4:3b:1c:81:89:5c:c3:41:75:92:5f:3c:d5:a7:18:c7:fe:d3:
         af:d4:d5:aa:e7:07:ac:52:92:22:29:36:51:39:9a:1e:36:97:
         69:c7:84:fb:a7:c3:41:93:59:e0:da:d1:35:6e:33:cf:8a:98:
         ad:11:80:68:c4:75:11:12:35:09:91:54:25:13:06:73:c6:95:
         3a:04:75:9f:c0:13:23:a4:b7:ca:5c:f7:9d:f1:21:e4:41:e1:
         39:32:f8:bb:93:e8:3d:5b:c7:14:0a:59:08:1f:92:47:0a:ae:
         68:9f:12:0b:8e:81:0f:8d:c8:88:4a:41:ab:50:4b:24:92:95:
         85:ea:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----