Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer
File:                     45C74F9C01E6DD83D22132E299E129ADA47BAAE6.cer (raw, json)
Hash identifier:          pI/jntUzoe3gRzRnMOB0/Nsf4s32fnuCHSrHtiBJNCg=
Subject key identifier:   45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64B00DFA84100D627E749965EB4DA5ADE2E0B88B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 15:24:15 +0000
Certificate not after:    Thu 14 Nov 2024 15:29:15 +0000
Subordinate resources:    AS: 266160
                          IP: 177.85.80.0/21
                          IP: 192.140.12.0/22
                          IP: 2804:3b9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b0:0d:fa:84:10:0d:62:7e:74:99:65:eb:4d:a5:ad:e2:e0:b8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 15:24:15 2023 GMT
            Not After : Nov 14 15:29:15 2024 GMT
        Subject: CN=45C74F9C01E6DD83D22132E299E129ADA47BAAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:00:45:69:90:e7:cf:1a:10:b5:9f:2c:e3:
                    e9:d8:da:67:be:d9:b8:1a:44:14:4e:61:92:cd:c1:
                    8e:c0:ee:66:db:59:98:9a:ab:9d:fe:bc:22:f7:ce:
                    58:de:69:8e:cb:fd:3d:1b:0f:a6:e8:a8:42:f1:2a:
                    52:33:2a:c9:57:45:d7:73:a5:99:9c:3c:33:37:d0:
                    c4:f2:56:f1:28:34:30:c1:4e:c2:3e:27:fb:99:09:
                    e0:63:78:c5:db:e6:6a:e4:ea:b4:2d:f6:7f:bc:93:
                    1f:70:b9:f6:77:86:80:49:d7:f4:c6:a9:72:ca:d0:
                    30:5a:96:43:9d:ab:d6:29:5c:17:ab:de:e3:a9:9e:
                    32:64:b7:31:91:3b:fc:0c:1d:06:05:23:ce:bc:02:
                    1c:9a:99:f2:52:cb:dc:ce:1f:48:9c:5d:6a:e8:7e:
                    dd:15:b7:7f:55:c5:ec:1a:c3:d0:e8:2b:be:59:a6:
                    a4:2d:44:f0:56:5d:7c:83:ad:a3:17:ce:c6:73:6d:
                    e9:18:f0:3c:61:80:c2:2a:19:62:f8:49:88:33:01:
                    90:88:a5:ed:c2:fb:77:e1:bf:e7:50:65:4f:89:19:
                    92:e0:d8:40:10:c1:77:73:7f:28:f7:0b:fd:c8:f6:
                    19:24:65:d9:26:0e:bc:eb:a9:bd:5d:06:21:c5:f9:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:C7:4F:9C:01:E6:DD:83:D2:21:32:E2:99:E1:29:AD:A4:7B:AA:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/1/45C74F9C01E6DD83D22132E299E129ADA47BAAE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21
                  192.140.12.0/22
                IPv6:
                  2804:3b9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266160

    Signature Algorithm: sha256WithRSAEncryption
         83:ed:d3:b8:c5:e2:67:94:99:5e:a0:ed:be:54:83:20:34:c8:
         ea:7a:98:e0:01:bf:15:83:f3:d2:7f:e5:fd:77:47:ac:c3:ca:
         67:d8:49:23:d4:db:dd:46:a6:88:f2:1b:8b:a3:fb:42:d4:40:
         89:9b:c0:37:86:12:7b:68:1f:e3:78:fe:6b:05:e7:fc:db:3e:
         28:ec:10:46:ce:c7:01:51:0d:c5:64:33:5f:4d:b2:6b:21:fd:
         6f:a3:54:9c:82:94:5b:76:f8:e2:91:2b:be:a8:36:ed:b1:0a:
         7e:3e:c2:a3:59:7f:85:5a:8f:1b:8a:f2:72:4f:b0:3c:34:16:
         a3:3e:2d:05:78:94:68:f1:9c:37:dc:fe:76:2f:35:99:2d:2f:
         1a:be:bf:87:fc:bb:c0:0a:31:0d:90:26:bb:76:d9:31:c9:4b:
         25:2e:b1:d2:79:98:a5:eb:74:ad:0c:27:b5:43:87:e3:73:fe:
         e2:00:57:8f:31:78:7d:4a:03:e4:69:02:5b:8a:f8:e9:9e:f2:
         4a:b7:0b:d6:0a:86:98:86:0b:4f:de:13:c4:71:a8:cb:fe:61:
         1d:db:8e:d6:5c:b3:19:1e:c3:fc:35:fd:66:5d:51:fe:41:89:
         de:f7:9a:7a:dc:2a:b0:91:e6:8e:cf:0b:52:43:e8:12:96:d6:
         6d:61:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----