Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer
File:                     4460B4AA93E985A9AA92DBCFD1A0643DE7669047.cer (raw, json)
Hash identifier:          f9k+Tr1SU8NEmv1ImsZJoBD8WX/uW6WpHjIe3/bA24k=
Subject key identifier:   44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57A13D3941C8E60FF3BA5DEC31CE8E6E48B7824E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 14:25:10 +0000
Certificate not after:    Thu 29 Aug 2024 14:30:10 +0000
Subordinate resources:    AS: 266205
                          IP: 200.9.28.0/22
                          IP: 2804:3c58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:3d:39:41:c8:e6:0f:f3:ba:5d:ec:31:ce:8e:6e:48:b7:82:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 14:25:10 2023 GMT
            Not After : Aug 29 14:30:10 2024 GMT
        Subject: CN=4460B4AA93E985A9AA92DBCFD1A0643DE7669047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:44:d6:36:73:7c:ad:05:50:96:ac:06:3d:
                    7d:6e:19:8c:16:56:cb:ac:64:89:90:96:ce:fd:e9:
                    21:14:c6:a0:a1:cc:84:cf:15:17:00:de:0a:ab:25:
                    56:9d:40:ec:66:7f:ba:b7:2b:50:50:28:7f:ab:73:
                    4c:00:fa:a9:46:29:8a:07:27:35:7b:f5:27:5b:67:
                    6b:63:72:20:6f:00:3d:b6:07:f0:88:ae:ba:bb:6c:
                    9a:55:bd:11:d5:2c:e7:f1:a3:fa:3b:e7:eb:61:1f:
                    21:8b:88:84:b0:21:72:0f:09:02:72:3c:11:82:8a:
                    22:f4:6a:d3:f1:15:52:6a:d3:c4:6a:76:d3:28:e1:
                    1e:51:17:7d:d6:80:2a:40:eb:e8:a1:c2:92:57:12:
                    a2:30:d2:99:7d:5b:9d:74:51:10:23:57:53:df:85:
                    d1:5e:1e:fc:ca:69:fb:a5:ca:28:59:0e:11:70:35:
                    76:1b:b5:58:09:6a:a8:db:71:e0:96:33:2a:6c:ca:
                    8b:75:64:6d:fe:3f:b0:1a:37:ab:18:68:e2:74:be:
                    3a:a7:e4:49:5f:f0:24:16:f9:ca:d2:0c:79:fd:94:
                    01:97:e9:07:ff:20:b7:20:5a:40:8b:68:16:ec:2f:
                    72:68:55:33:a8:aa:11:e4:3c:c1:93:0f:1a:a9:45:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:60:B4:AA:93:E9:85:A9:AA:92:DB:CF:D1:A0:64:3D:E7:66:90:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpK4JJWxkD1g2Rn6MhErpnsiVwgn5PyRej1sjoFrpamy/0/4460B4AA93E985A9AA92DBCFD1A0643DE7669047.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.28.0/22
                IPv6:
                  2804:3c58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266205

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:b4:35:cf:ec:ab:2a:44:8e:37:1d:45:1e:cd:60:1d:dc:
         6e:1a:f6:65:7c:4d:c9:5f:52:ef:27:28:f5:02:2f:b6:bf:fc:
         f6:3c:8d:17:5e:20:4f:f8:e2:50:b6:b6:55:12:bb:fd:af:05:
         0b:61:17:3d:ca:cc:46:bb:21:00:e2:7c:d9:a0:76:e5:94:a3:
         27:62:9f:1b:25:00:50:0e:f4:d0:88:df:b8:f3:df:22:fc:7c:
         e8:0f:02:d1:7d:12:8f:3d:ab:52:0e:3d:8d:50:fa:24:56:c4:
         5c:92:a6:3a:d3:be:2b:63:41:dc:e6:37:99:f8:77:51:42:01:
         95:a0:19:72:3e:bd:a7:ba:7e:ff:33:01:ee:1b:46:c0:d9:d1:
         39:fa:5a:96:40:c8:11:a3:22:ad:fb:3b:2b:d5:5c:e1:a1:4f:
         77:2f:87:2b:6f:9a:64:b3:81:07:a6:d3:75:b5:53:34:dd:98:
         ed:52:6f:da:bc:f2:73:98:a5:43:71:71:0f:d4:aa:75:7c:02:
         3c:41:d5:c8:61:37:f3:18:02:09:26:6c:55:43:a1:56:0a:50:
         89:94:85:bd:22:2f:6f:06:c9:65:ad:af:53:27:96:fb:ea:e3:
         d0:e5:2b:75:0e:3e:3a:c7:73:85:91:ca:08:10:ab:ac:dd:21:
         56:07:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----