Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer
File:                     460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.cer (raw, json)
Hash identifier:          +Rk3wciev2WqGIzSQvd5pEjSpgwmLJw0XjEojxw+a88=
Subject key identifier:   46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07B8E11363B726A3657879A2F9892724385C231A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 13:03:12 +0000
Certificate not after:    Tue 04 Feb 2025 13:08:12 +0000
Subordinate resources:    AS: 263142
                          IP: 177.93.80.0/21
                          IP: 2804:1760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b8:e1:13:63:b7:26:a3:65:78:79:a2:f9:89:27:24:38:5c:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 13:03:12 2024 GMT
            Not After : Feb  4 13:08:12 2025 GMT
        Subject: CN=460A6F1BB25ED03CFA5414E7BCC18EA27A67886F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:57:f0:a9:5f:b8:bd:b8:ab:ab:bf:e3:1b:
                    7c:97:94:92:b8:28:14:12:4a:17:fa:6e:7f:fa:aa:
                    63:7f:ef:a0:4b:53:0d:c5:00:8f:00:64:3a:ca:7e:
                    ba:a9:89:a0:a5:2a:1e:85:b8:22:cb:57:a9:82:5a:
                    cf:27:57:a5:86:33:65:6a:39:42:12:ee:62:58:b7:
                    a2:71:3c:0a:69:ca:13:92:fa:1b:26:d4:51:69:9e:
                    80:c4:fa:9f:09:76:0c:f1:ab:14:ad:da:bc:5a:83:
                    ed:71:9c:60:60:54:2d:46:e0:ff:a6:ce:70:a7:a3:
                    24:8f:28:1a:b6:4f:e8:0f:3a:74:b3:c8:34:a9:29:
                    53:75:c9:b8:3b:3d:22:5e:1c:f1:bd:d3:d8:b7:87:
                    d9:f4:8d:5d:c7:dc:bc:3f:15:13:d6:e6:8a:19:51:
                    21:b1:24:9f:0c:63:df:08:2a:a1:c4:23:2c:f0:e3:
                    a1:56:25:70:44:b0:10:85:0e:07:fc:62:52:2d:bd:
                    7e:0d:83:17:cf:7f:92:2d:6c:f5:10:c4:4e:7a:92:
                    2c:20:69:76:b3:d7:fe:80:e6:71:8c:05:b5:6d:43:
                    8e:72:11:2f:7f:cc:8f:35:dc:1d:a3:12:d6:86:97:
                    ae:a1:0c:34:a3:39:7d:16:d4:e4:93:2e:97:84:3d:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:0A:6F:1B:B2:5E:D0:3C:FA:54:14:E7:BC:C1:8E:A2:7A:67:88:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/460A6F1BB25ED03CFA5414E7BCC18EA27A67886F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21
                IPv6:
                  2804:1760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263142

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:43:c0:4f:af:c4:6e:d9:96:9b:ab:9a:46:da:7d:de:fe:
         23:a7:80:e6:f2:5e:f9:58:aa:2c:b5:1f:ff:10:8e:51:8d:64:
         5b:6a:d7:cc:d4:00:89:78:d1:66:b4:46:79:2c:8d:fd:cc:1c:
         10:59:a8:3e:1e:f1:9a:da:63:2d:92:5f:41:c1:f9:71:ad:d6:
         96:a8:3a:da:e8:b1:8d:0a:19:a9:f8:61:25:50:4d:22:3c:08:
         db:81:25:6f:d1:fb:8d:4a:34:9a:e8:1c:64:14:f0:fe:ca:4d:
         89:0e:47:fb:b8:28:bf:7a:69:e7:6f:f7:c0:df:f8:99:ca:b6:
         44:29:83:f4:0f:f5:2a:3f:25:da:5b:79:7a:51:c8:64:48:5f:
         32:f0:22:b4:8c:f1:37:0b:da:65:ed:df:e7:66:f9:0d:d7:ce:
         57:0b:b7:a0:0f:b2:2e:84:85:08:02:87:bd:73:be:1c:92:f9:
         6c:c7:6e:16:06:6a:09:c8:d0:d5:5b:57:87:69:72:4a:09:0d:
         f0:88:5a:d0:f3:d8:a4:1b:04:83:1c:88:08:ed:9b:d8:28:30:
         fb:9a:ef:d6:15:fe:78:42:b9:f8:1b:45:29:32:b9:27:6b:59:
         b5:cf:f0:6e:ba:b0:d8:24:7e:a4:aa:f3:2a:ed:07:c1:d9:ca:
         4c:9e:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----