Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46E192BCC92FBCC416FA78B6B5743D2192C61C7C.cer
File:                     46E192BCC92FBCC416FA78B6B5743D2192C61C7C.cer (raw, json)
Hash identifier:          m+S5RGJQK+N2rDpaJJEBMrcrfJhrU2MaUMCZNda/Y0I=
Subject key identifier:   46:E1:92:BC:C9:2F:BC:C4:16:FA:78:B6:B5:74:3D:21:92:C6:1C:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       181A205D7A579C15BE7FD456B5463F5DF5B4C5FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/1/46E192BCC92FBCC416FA78B6B5743D2192C61C7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Feb 2024 13:22:44 +0000
Certificate not after:    Sat 08 Feb 2025 13:27:44 +0000
Subordinate resources:    AS: 270963
                          IP: 189.50.60.0/22
                          IP: 2804:742c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1a:20:5d:7a:57:9c:15:be:7f:d4:56:b5:46:3f:5d:f5:b4:c5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 10 13:22:44 2024 GMT
            Not After : Feb  8 13:27:44 2025 GMT
        Subject: CN=46E192BCC92FBCC416FA78B6B5743D2192C61C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:90:42:d8:da:c4:c5:3c:26:cf:5e:60:cb:
                    1e:9b:7d:86:58:83:65:62:81:08:0f:2f:80:f7:d6:
                    36:f1:af:1a:ea:31:fa:dd:82:fb:18:c3:b5:44:1a:
                    cd:7a:af:e2:f8:52:c6:9d:de:e5:85:87:d8:94:0f:
                    68:98:94:28:48:90:12:eb:5a:6b:37:0e:9a:f4:9b:
                    3d:7c:a6:44:73:95:94:75:ee:cc:e0:50:74:47:cb:
                    60:08:35:c5:b1:2a:0a:5f:2b:8b:59:15:19:46:42:
                    12:53:b2:bf:84:79:9b:18:6d:6d:fe:87:3c:26:d8:
                    3e:21:cd:be:f7:49:00:dd:65:de:72:46:e6:a5:3e:
                    1b:b0:89:7b:02:12:f2:a6:d0:a8:d5:f9:4d:9b:bd:
                    8c:c8:47:72:85:bb:b2:01:2c:ab:e4:7a:b3:15:2b:
                    a1:cc:f7:29:ea:05:73:38:7c:7b:50:ac:db:81:6d:
                    72:f2:80:79:43:64:49:4b:f7:5e:d9:8f:c2:69:9e:
                    ae:aa:b8:c2:a3:1a:5c:2c:8b:93:27:00:74:75:0f:
                    4b:24:89:d5:23:66:97:54:6e:91:6a:07:72:32:89:
                    87:17:d8:68:bf:54:75:4e:bc:fe:ad:b5:1b:57:eb:
                    73:2c:4b:77:d4:10:63:16:2d:8a:d4:2c:30:b9:e3:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:E1:92:BC:C9:2F:BC:C4:16:FA:78:B6:B5:74:3D:21:92:C6:1C:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/1/46E192BCC92FBCC416FA78B6B5743D2192C61C7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.60.0/22
                IPv6:
                  2804:742c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270963

    Signature Algorithm: sha256WithRSAEncryption
         66:63:9a:4f:a3:de:18:b8:67:72:5d:60:61:08:c8:a8:4e:8c:
         95:01:21:aa:43:8a:26:9d:11:32:ed:23:64:75:9a:f6:64:d3:
         ca:9e:66:dc:c3:ba:08:4c:71:9d:2d:b8:b3:1b:13:54:53:27:
         23:17:d1:b2:0d:5a:60:39:3b:fb:45:d0:3c:01:b0:ac:0e:b5:
         27:94:06:76:66:b4:95:8d:93:fd:00:31:7c:52:21:d6:e7:48:
         9d:7d:a1:3e:0b:89:2b:ad:0a:14:1a:60:a5:f2:00:83:0a:2c:
         60:31:a8:a9:6b:2e:87:2f:9e:df:a8:bc:c7:30:4f:ff:86:1c:
         60:81:e9:1a:e3:01:73:9e:1a:e2:a8:d6:08:46:bf:43:61:70:
         ff:b9:ad:53:4e:90:00:a3:e7:c0:c5:fc:bb:27:85:6c:0d:24:
         5f:b7:a3:ae:aa:2f:64:7b:19:05:ed:90:60:73:06:d9:3d:a9:
         d4:22:9f:d5:7d:3e:53:74:9b:e8:e9:3c:68:1f:92:2a:d9:03:
         4e:ba:c6:cd:46:13:92:3a:0a:99:f3:93:fe:a2:23:b8:1e:8d:
         ea:69:8b:02:8a:36:76:ea:3d:df:0d:8a:21:18:6c:8e:43:a6:
         00:33:dc:d0:8a:18:af:3e:c0:7d:52:ed:f8:1c:28:ed:3b:9c:
         cb:5a:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----