Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42C84C116E05648BDE5602FA3010D7FDAB1E840A.cer
File:                     42C84C116E05648BDE5602FA3010D7FDAB1E840A.cer (raw, json)
Hash identifier:          m9JdFKujPeh8+IihRsdx8ZyEGlivItECuV2KWw1UKiE=
Subject key identifier:   42:C8:4C:11:6E:05:64:8B:DE:56:02:FA:30:10:D7:FD:AB:1E:84:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FE2A6D5C65126604152BDFF105AE59B58517472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/42C84C116E05648BDE5602FA3010D7FDAB1E840A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 18:48:03 +0000
Certificate not after:    Wed 18 Sep 2024 18:53:03 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e2:a6:d5:c6:51:26:60:41:52:bd:ff:10:5a:e5:9b:58:51:74:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 18:48:03 2023 GMT
            Not After : Sep 18 18:53:03 2024 GMT
        Subject: CN=42C84C116E05648BDE5602FA3010D7FDAB1E840A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:5f:ec:b2:77:27:c4:62:16:8d:4c:62:f3:
                    20:eb:46:3f:bb:ae:80:be:0a:8b:0c:b0:77:8a:05:
                    42:53:47:08:d6:2b:d6:47:d8:46:40:4a:88:c4:c4:
                    3d:68:31:ed:b1:59:da:ba:16:29:ca:9d:e1:4e:27:
                    f4:86:bb:c5:78:19:c9:a8:6b:96:52:0b:3d:ad:f4:
                    96:2f:af:d4:b4:96:01:90:15:d9:0a:e0:4b:9f:18:
                    62:11:9a:31:e5:17:ef:4f:ba:b0:13:2d:53:fb:11:
                    3b:02:ab:4e:ca:1e:4a:29:90:7c:3a:79:df:11:4d:
                    e9:90:ea:5e:97:88:0c:be:bb:56:2e:16:cb:cb:af:
                    f0:9f:d8:65:db:ea:41:ca:9d:bb:b8:4c:1a:7a:db:
                    82:38:9e:03:0d:92:aa:86:a4:8c:9a:7a:6f:84:79:
                    1d:56:92:dd:17:c2:ff:d3:48:7f:9a:4e:b3:bf:18:
                    40:e5:e0:07:55:96:7f:4d:ef:1e:66:37:b0:dd:2c:
                    c6:8f:c1:0d:98:27:74:37:70:43:a9:9d:7e:c6:ea:
                    31:5b:1e:75:c8:ea:ac:81:e2:ff:9d:13:c8:84:a2:
                    81:b6:04:18:c5:d9:06:52:03:91:4d:d3:ba:26:28:
                    3f:90:ff:75:b9:3b:c7:13:84:d9:b9:a4:80:d2:93:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:C8:4C:11:6E:05:64:8B:DE:56:02:FA:30:10:D7:FD:AB:1E:84:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/42C84C116E05648BDE5602FA3010D7FDAB1E840A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:d1:2c:61:19:84:f1:ff:66:99:f8:5f:36:1b:28:36:80:
         0f:e0:e5:3a:47:2b:f6:0c:5c:7f:7d:8c:e7:8c:41:8a:b7:ea:
         cc:71:26:0c:fd:41:e2:b3:27:ee:3f:0b:93:78:33:57:5d:7b:
         ec:f4:b4:f8:3c:f9:9a:81:56:b7:00:73:b2:4c:04:47:e5:91:
         82:e5:41:cb:52:ff:95:69:a2:f3:de:fc:a0:6b:f8:18:29:31:
         6f:e7:76:94:cc:c0:70:b2:a4:79:bd:f2:89:24:2b:26:ff:27:
         cb:10:b2:e5:0b:14:04:e6:d7:c5:1f:bc:f2:2e:0a:fc:ba:cc:
         f7:f5:a2:16:01:93:59:ae:a9:96:dc:1b:52:67:51:65:4a:1a:
         6c:3c:21:82:b4:3e:8c:0e:92:e2:47:8c:d3:60:b9:f4:6e:49:
         f7:c8:cf:bf:85:07:36:89:49:8e:16:1f:c9:62:20:1a:97:c9:
         3a:47:c0:78:0c:f0:38:02:72:47:fa:fa:75:2c:ab:d9:63:9c:
         e1:bd:4a:78:9d:0d:ef:cc:6b:90:0d:4f:9c:9f:c2:0c:a2:3b:
         cf:59:28:ff:fb:dc:77:27:6b:02:1b:b4:f1:12:2c:61:5b:45:
         ab:a3:b2:77:9b:77:34:78:6d:fc:4c:dd:de:57:ce:a3:01:fe:
         c9:0d:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----