Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.cer
File:                     2E468C04D7FFBBAF073C698E3CB30022A69D610E.cer (raw, json)
Hash identifier:          y4PQGrEo6t6+jkV/4+mJpXq9Pon2tEJHEGxaGviFdO4=
Subject key identifier:   2E:46:8C:04:D7:FF:BB:AF:07:3C:69:8E:3C:B3:00:22:A6:9D:61:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B031A25A9E751202873DBE4B74568E6B5C93349
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 19:10:59 +0000
Certificate not after:    Wed 27 Nov 2024 19:15:59 +0000
Subordinate resources:    AS: 266044
                          IP: 45.4.32.0/22
                          IP: 2804:39b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:1a:25:a9:e7:51:20:28:73:db:e4:b7:45:68:e6:b5:c9:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 19:10:59 2023 GMT
            Not After : Nov 27 19:15:59 2024 GMT
        Subject: CN=2E468C04D7FFBBAF073C698E3CB30022A69D610E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:e9:9a:5d:b1:f3:d6:92:fc:3f:44:62:a2:
                    a3:99:fd:91:6e:cd:54:32:3b:80:fd:53:79:cc:f1:
                    0d:3e:3b:78:b9:5a:be:aa:bb:32:e7:6c:62:5d:f7:
                    00:79:f6:a3:56:8f:3e:3c:f2:f3:d5:14:13:2d:d2:
                    f1:cc:9d:92:28:b6:5b:30:df:f9:b1:12:bb:81:c1:
                    28:5a:fa:47:ac:a4:f4:60:47:76:ef:45:5a:0b:f7:
                    83:ce:8a:28:4d:36:9f:15:7e:0b:3e:4e:9d:18:ec:
                    f7:50:7b:78:80:4b:bd:96:b1:61:76:4f:d5:fe:00:
                    2f:a4:e8:69:73:71:5f:21:48:2b:4e:3a:26:8d:a4:
                    19:fa:f4:18:23:64:c5:2f:3d:b3:93:a9:b5:f7:38:
                    df:ae:35:81:4b:0c:1e:dd:f1:9f:52:c7:16:d3:97:
                    8f:06:e2:48:8c:3d:eb:da:8c:2a:04:e4:29:29:3e:
                    8a:d7:f0:b3:81:4b:67:75:cd:44:e3:38:03:a4:e4:
                    d1:98:a5:a2:34:f2:ec:22:6c:a2:4f:cd:0e:7e:2c:
                    bc:ba:0e:9c:8b:b8:2e:fc:d6:8c:3b:16:3b:f3:ae:
                    25:77:ff:e1:76:af:0f:64:95:a9:a4:1c:93:d1:8f:
                    b7:c3:44:9b:1b:6f:ff:e3:04:eb:a8:54:a5:91:5e:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:46:8C:04:D7:FF:BB:AF:07:3C:69:8E:3C:B3:00:22:A6:9D:61:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7WDaXm36DeANkw22Zr4WTv56qNrwmMio6eUkBMifUm7b/0/2E468C04D7FFBBAF073C698E3CB30022A69D610E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.32.0/22
                IPv6:
                  2804:39b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266044

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:6b:22:3a:a9:35:80:0d:1f:98:3a:7b:3e:ab:35:52:ef:
         fe:f9:5b:43:d5:b0:8d:ec:6f:13:b1:fc:a2:75:4e:7e:6e:10:
         c3:64:3d:5a:27:a3:6d:aa:83:f2:30:64:50:95:96:8a:69:6e:
         2e:25:e3:3d:71:c8:8c:fa:68:e3:12:1d:42:d9:1a:a4:7b:c1:
         5d:eb:48:31:ba:5a:a9:ae:14:72:d2:f1:1f:48:97:4e:01:b7:
         d6:c1:3c:35:b7:63:66:76:b1:5a:92:e6:61:f6:40:8e:83:67:
         af:25:2a:e7:b7:56:9b:66:a6:a7:d4:6d:5c:95:30:9f:fd:72:
         b8:a3:d2:8c:57:1a:95:55:91:6b:9b:4f:66:f2:e6:bc:f1:0a:
         06:52:fb:46:d4:72:4a:30:d7:81:13:87:c9:3e:ca:62:3b:d2:
         43:66:8f:40:7e:ed:45:bb:d0:e5:1f:ad:dc:32:90:66:58:56:
         3c:6d:6d:7b:7c:39:80:64:db:4e:7e:0c:d9:a4:45:70:70:14:
         60:66:dc:46:aa:53:81:8a:e0:0b:2b:0f:20:1f:d1:40:c9:17:
         7e:ac:3c:6c:30:8f:f9:30:55:c3:d6:25:a8:0f:a8:a8:3d:23:
         92:5a:db:97:97:c8:02:5d:cd:a6:38:8d:71:46:bc:64:02:0c:
         53:ff:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----