Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer
File:                     4613768E155A5129847F26ACD1FEA8A145AE5FAE.cer (raw, json)
Hash identifier:          EQl6DVMBJQ6TMQWEJ7mJhK4ly2nvPL8UPC2Bw0dEJ68=
Subject key identifier:   46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A95F6E411BCC08801469F0293FB506DB4666B68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 14:17:35 +0000
Certificate not after:    Fri 27 Dec 2024 14:22:35 +0000
Subordinate resources:    AS: 52592
                          IP: 170.247.64.0/22
                          IP: 177.87.92.0/22
                          IP: 2804:397c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:f6:e4:11:bc:c0:88:01:46:9f:02:93:fb:50:6d:b4:66:6b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 14:17:35 2023 GMT
            Not After : Dec 27 14:22:35 2024 GMT
        Subject: CN=4613768E155A5129847F26ACD1FEA8A145AE5FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:5f:52:f3:d2:f8:fc:a2:97:48:35:5b:89:
                    84:d8:06:4d:f2:62:20:11:d2:45:8e:1f:f7:ad:b3:
                    db:ac:7d:96:d8:9d:75:52:a5:92:1b:78:dc:b7:19:
                    ad:0f:3d:87:15:eb:9e:88:48:02:13:2a:eb:ec:27:
                    eb:c8:32:4f:f4:ca:ab:3e:64:2a:0c:24:54:e8:54:
                    df:45:75:99:dd:77:29:a3:58:61:7b:21:83:03:2d:
                    ed:cf:e4:61:d4:37:85:d4:a6:ae:48:93:f3:a9:81:
                    1b:53:65:fa:c6:fb:9e:3b:69:ab:5a:8a:26:d0:05:
                    60:ae:57:90:dc:d1:63:1a:74:96:d6:57:2d:ed:84:
                    12:ed:f9:2b:7a:b2:77:94:65:c7:cd:df:28:b1:3c:
                    39:ba:c7:60:0e:90:dd:a5:fe:8c:df:58:c5:16:fe:
                    7c:a0:6a:57:84:5e:23:f5:12:30:6f:e6:dc:2e:7c:
                    90:e3:50:98:4c:b5:96:fb:36:4a:08:2c:f4:59:12:
                    09:64:36:1f:fb:b5:c0:eb:45:2f:17:4c:57:80:54:
                    8d:ba:14:76:07:ba:e0:bd:50:98:43:3a:3d:c0:9e:
                    36:57:57:0a:e5:11:72:39:9c:45:17:f6:7b:a4:75:
                    68:27:b6:32:4f:ff:89:cd:f6:cf:83:ae:b7:f5:79:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:13:76:8E:15:5A:51:29:84:7F:26:AC:D1:FE:A8:A1:45:AE:5F:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/4613768E155A5129847F26ACD1FEA8A145AE5FAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.64.0/22
                  177.87.92.0/22
                IPv6:
                  2804:397c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52592

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:0f:ed:c0:84:e4:87:25:82:30:14:33:05:22:a4:04:1c:
         61:b1:b9:f7:b8:0c:be:60:29:89:bf:fd:13:ce:e7:23:03:64:
         44:80:06:86:53:39:4d:e9:34:f2:28:90:9e:3e:7f:e4:c7:7e:
         7a:af:ba:0e:1b:61:b2:ab:6c:79:e2:7f:c9:f1:a4:4d:09:e1:
         c4:a4:1b:37:38:59:ea:44:68:82:94:dc:08:df:66:be:47:64:
         bb:ac:b1:87:aa:2f:3e:b9:e5:a1:2b:26:8b:c4:37:94:3a:ec:
         11:2a:e2:2f:89:3a:7f:6f:30:d1:93:9b:03:dc:3b:9e:c1:03:
         0f:72:4d:d8:b3:97:8d:6d:f7:4b:e1:30:4d:b4:2d:36:32:57:
         fa:a8:17:0b:ad:8c:c7:ee:ef:10:68:57:97:66:23:4d:fe:04:
         8b:05:8a:d8:4a:42:3e:78:fe:0d:36:d4:d4:d4:f8:78:ba:65:
         c5:d9:e0:f5:64:38:58:3a:ed:91:74:77:0e:08:37:e1:f2:86:
         72:03:ab:59:02:26:b3:89:5e:fb:23:9f:6a:17:85:cf:20:72:
         97:9e:f0:c4:be:2c:2f:1e:59:c5:d7:75:57:0c:28:ed:38:ec:
         36:ff:56:ee:60:25:17:ca:cf:40:f1:42:ad:37:fb:f6:5d:3d:
         81:a4:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----