Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer
File:                     42CB6D3316ED3B8DC720AB876EE22A61846279E2.cer (raw, json)
Hash identifier:          /RjwYu9HTOXrokpwzL7vzorvj9UxDiTJwx0LoiRmL9Q=
Subject key identifier:   42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0485A6309D45DC44EAB68BD6CD6517D8B1B8C582
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 17:06:01 +0000
Certificate not after:    Tue 24 Sep 2024 17:11:01 +0000
Subordinate resources:    AS: 262431
                          IP: 177.39.176.0/21
                          IP: 2804:464::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:85:a6:30:9d:45:dc:44:ea:b6:8b:d6:cd:65:17:d8:b1:b8:c5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 17:06:01 2023 GMT
            Not After : Sep 24 17:11:01 2024 GMT
        Subject: CN=42CB6D3316ED3B8DC720AB876EE22A61846279E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:6f:ad:63:60:74:ff:a8:73:35:3b:b1:48:
                    f4:a5:26:9f:28:db:67:82:4f:64:c9:78:21:43:ae:
                    c6:e6:23:ff:4c:d9:44:75:f1:13:b2:38:d2:63:c5:
                    a3:e1:d8:5c:1e:35:1c:de:67:88:01:dd:05:7d:ed:
                    a1:ec:26:46:5b:ed:37:da:1f:e4:7c:83:4a:b4:ea:
                    ee:29:34:1f:a6:a1:2e:e8:d1:17:cb:76:dd:f8:b3:
                    a3:a7:91:36:a1:97:b1:cb:0e:e6:2e:ac:7f:88:9c:
                    06:51:a5:70:4e:e9:8c:65:d9:86:38:6f:cd:ec:67:
                    83:a1:38:3e:32:94:37:3e:ac:e7:1d:cb:e2:f6:d6:
                    03:80:fd:b6:8d:76:a9:fb:ba:c1:8f:39:0e:67:7a:
                    c9:c8:b3:1a:67:fc:50:b5:d1:97:81:5d:99:f5:0b:
                    60:4e:17:10:04:97:d1:c7:a5:58:7c:2d:81:7d:99:
                    34:88:91:22:bb:77:96:a7:43:01:8f:bd:9f:c7:a6:
                    75:1b:de:bb:42:b2:63:45:fd:25:06:20:fa:42:83:
                    1a:49:d1:7e:ea:66:f9:04:84:2f:87:05:aa:90:35:
                    54:5b:f5:62:90:82:45:68:7e:d0:c6:d0:fe:b6:a3:
                    19:fe:de:c3:be:13:7b:53:6a:b1:e2:ed:89:9b:7f:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:CB:6D:33:16:ED:3B:8D:C7:20:AB:87:6E:E2:2A:61:84:62:79:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/pbJ37xHRhuowhiJWA2nnrfgCyaL4TqUqLSatXWuNsST/0/42CB6D3316ED3B8DC720AB876EE22A61846279E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.176.0/21
                IPv6:
                  2804:464::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262431

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:c3:cb:6b:74:10:d6:49:2f:2a:65:79:3d:9c:fa:d5:63:
         a9:c2:fa:e7:c5:42:6d:17:35:f6:50:61:0b:ee:86:25:79:96:
         9a:f9:46:08:73:63:c6:06:e6:c8:42:31:e2:18:15:4a:e3:2c:
         77:66:53:88:52:34:c3:3c:02:80:e9:a2:36:86:de:c2:9f:22:
         30:fb:bd:88:99:4e:d1:7f:ce:ee:cf:e6:3b:f5:38:3b:e3:9c:
         28:6a:b6:2c:a8:bc:ab:1a:9f:a7:c2:d8:98:6d:0f:84:80:2a:
         79:b0:d6:ce:68:29:1c:1b:91:dc:03:bc:85:3b:62:1b:8f:8d:
         6c:12:12:78:dd:84:ce:ca:4b:1d:33:e4:29:43:e1:fb:a7:48:
         88:c8:a7:75:be:e8:ed:21:c8:b9:c7:7b:44:2b:06:f0:9c:5e:
         fb:51:94:ef:a2:d2:2c:14:3d:4e:05:33:f1:e9:0a:6a:bf:95:
         2c:eb:df:6c:5b:b2:02:ce:28:d0:77:30:1b:dc:bc:38:7d:7e:
         b9:fb:ec:99:c0:f1:10:65:ce:17:5d:79:b2:af:5d:96:a9:27:
         69:ae:01:97:23:22:82:19:c9:9a:6e:64:d2:c0:d9:da:89:1a:
         66:12:e7:bb:81:d6:30:5b:ea:31:4d:92:a1:28:86:86:50:96:
         78:04:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----