Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer
File:                     47186A1911BD977912FE4B2FC41A1632ED67B9B1.cer (raw, json)
Hash identifier:          hl7odWv5NFBs9Zy79rY8MPVV+ZgIUjRRv28n37SyziA=
Subject key identifier:   47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F35D0C2C6372EBB720F53BA43E69337B7722D03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 18:45:08 +0000
Certificate not after:    Thu 14 Nov 2024 18:50:08 +0000
Subordinate resources:    AS: 270490
                          IP: 24.152.96.0/22
                          IP: 2804:6cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:35:d0:c2:c6:37:2e:bb:72:0f:53:ba:43:e6:93:37:b7:72:2d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 18:45:08 2023 GMT
            Not After : Nov 14 18:50:08 2024 GMT
        Subject: CN=47186A1911BD977912FE4B2FC41A1632ED67B9B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:3f:04:3d:f0:bb:05:dd:cd:41:bd:e4:bb:
                    05:64:af:29:cb:c3:4b:89:15:d6:5b:6a:85:3e:08:
                    37:87:56:9f:5f:7a:65:63:b6:45:5e:39:54:f4:32:
                    ea:f5:65:87:61:f4:57:61:9a:37:e9:ba:0b:da:a1:
                    8a:20:2f:ee:2f:65:55:50:e6:91:3c:77:af:cc:15:
                    15:e0:d0:26:32:87:47:5d:14:da:de:79:32:35:9a:
                    73:7b:94:14:9c:2a:e1:dc:a8:49:46:4d:99:17:de:
                    49:20:20:9a:38:7a:ce:fe:d5:da:ad:23:aa:12:8c:
                    d7:a1:78:fc:ca:f7:fe:41:16:5e:6d:68:a0:32:c5:
                    63:5c:99:4a:a5:bd:03:a7:de:c4:09:31:a0:24:8e:
                    0b:e9:c1:16:cc:eb:62:2f:dc:4e:9c:76:97:9b:fe:
                    e7:cc:be:cf:e1:64:0f:2f:a9:0d:07:c4:b4:78:c9:
                    82:b5:0b:dc:97:e7:5a:fa:25:c0:8a:d5:8e:b7:e2:
                    8b:f6:69:9c:a7:ec:a0:3f:8a:57:76:1f:86:6a:68:
                    70:6c:9a:ee:74:fc:17:b9:60:0f:41:33:07:c4:15:
                    3e:a2:51:b1:81:18:e5:c9:2a:a9:80:c0:5a:2b:dc:
                    4f:96:68:37:3c:a1:60:59:53:74:da:19:16:0a:8b:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:18:6A:19:11:BD:97:79:12:FE:4B:2F:C4:1A:16:32:ED:67:B9:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CrsfgiFyWgRDD9YUMzAFbpPJgsjX2CDxKfXBeTvkezm2/0/47186A1911BD977912FE4B2FC41A1632ED67B9B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.96.0/22
                IPv6:
                  2804:6cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270490

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:4e:fd:03:d8:92:3e:80:03:65:93:28:3c:14:99:17:a4:
         9e:c2:ba:22:26:cb:03:c8:62:98:7f:d8:b5:d7:90:bc:3c:51:
         1c:c8:9c:cd:56:0f:59:03:24:03:06:0c:35:74:97:8d:01:63:
         91:29:e6:66:a8:04:06:f1:85:22:0f:93:6c:d2:8b:a2:d3:96:
         30:54:da:d1:9e:55:9a:54:bd:6b:67:d3:df:6b:d9:d7:24:9b:
         52:e6:b2:97:e2:4e:df:e3:0a:6d:9f:09:82:42:e3:27:8c:a3:
         36:44:cd:9c:f1:30:d4:40:e7:ac:6c:9b:7e:53:2d:f4:5f:30:
         9b:26:32:c6:7a:21:d9:27:ca:59:0d:c0:66:82:4b:c9:e9:91:
         a2:25:1d:ad:e8:a7:03:28:64:71:bf:dc:d7:ed:c5:7a:b3:6a:
         15:b9:85:ba:54:30:d4:a8:7b:71:02:f8:fe:d3:54:2e:87:ee:
         4a:e9:e7:b2:3f:13:8a:e8:14:2a:3c:f1:35:b4:d3:85:71:a7:
         7f:46:c6:26:05:dc:d4:a2:66:17:03:19:b7:38:17:fe:b2:4b:
         d7:e7:b1:ab:16:36:40:20:39:63:e7:be:d7:d2:6c:4e:f7:63:
         20:ad:5f:62:9b:4f:fa:cd:ea:d9:2e:93:b3:64:3f:b7:cb:48:
         d8:02:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----