Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/471E19468CAF849656C487F645F16A3E85C981EC.cer
File:                     471E19468CAF849656C487F645F16A3E85C981EC.cer (raw, json)
Hash identifier:          CT6DE7AM41/5PddZBHeF6hHaSNErRpWcdWkFiKgmeVU=
Subject key identifier:   47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15070820D22CD242B9419348125D178039F5B6E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/471E19468CAF849656C487F645F16A3E85C981EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 21:35:06 +0000
Certificate not after:    Mon 07 Oct 2024 21:40:06 +0000
Subordinate resources:    AS: 270630
                          IP: 177.70.244.0/23
                          IP: 2804:6ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:08:20:d2:2c:d2:42:b9:41:93:48:12:5d:17:80:39:f5:b6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 21:35:06 2023 GMT
            Not After : Oct  7 21:40:06 2024 GMT
        Subject: CN=471E19468CAF849656C487F645F16A3E85C981EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:51:8d:a5:a8:2d:bc:b5:5d:71:13:66:5a:
                    b6:57:92:ef:d1:25:1f:25:92:2d:49:ac:bb:03:a9:
                    61:01:4c:f1:73:64:49:12:7c:19:a5:bc:db:0c:43:
                    da:a3:c3:da:5a:1e:63:3c:c7:02:1e:e8:6b:f8:6f:
                    71:ed:7e:12:16:dd:59:63:21:84:fb:37:d7:2a:44:
                    d4:91:7e:1d:04:8f:51:4f:a5:85:e2:d6:94:2c:5b:
                    e7:97:9b:85:c0:15:d6:30:39:76:ee:d4:c9:88:53:
                    5a:5a:d0:ae:69:c8:93:48:45:25:ce:51:1b:7d:4d:
                    70:7d:01:78:f9:6d:10:1f:b7:a0:a7:fe:a1:44:f3:
                    bb:58:fb:2a:cb:44:a5:dc:61:91:16:29:0d:9c:70:
                    98:30:81:f5:0a:75:38:29:fe:ea:ba:6e:d3:a8:6c:
                    7d:15:e7:81:a8:5f:da:c4:c3:2e:d8:e4:d2:51:1c:
                    44:5a:e8:7b:78:bd:3a:82:15:5c:b1:b5:08:3f:75:
                    0f:4c:72:cd:e7:4e:b6:13:52:13:9e:e1:57:ad:65:
                    e9:94:44:d3:d7:39:7d:f2:e8:70:fb:53:bf:13:1c:
                    c3:bb:26:8d:e3:d1:d2:47:d6:d7:61:8f:aa:7a:f5:
                    b4:b5:1c:78:9e:5e:d0:ec:2e:56:7a:ed:b9:ad:84:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:1E:19:46:8C:AF:84:96:56:C4:87:F6:45:F1:6A:3E:85:C9:81:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/471E19468CAF849656C487F645F16A3E85C981EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/23
                IPv6:
                  2804:6ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270630

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:5c:ad:31:95:08:8c:57:e5:79:77:84:2b:0a:a5:d8:3f:
         50:62:35:57:ae:3a:dd:7d:04:f3:04:40:94:37:b3:2f:da:a0:
         6e:95:a8:90:e5:db:45:28:6a:af:2e:32:22:ad:e8:2f:fb:3b:
         62:54:b4:bb:aa:5f:c1:3c:56:76:ca:fc:46:90:6a:ff:76:af:
         f1:eb:af:64:e4:33:ba:5f:ba:2a:bb:f2:77:25:68:d6:4c:62:
         c1:05:eb:fb:49:2d:f1:ea:27:94:63:b2:fd:a7:a5:c7:8d:0a:
         1d:8a:ae:3a:35:3f:e5:12:a0:ec:39:a4:be:b9:05:bb:36:63:
         79:79:9e:91:69:87:c6:16:7f:dd:46:7a:e2:cb:39:b0:f5:2d:
         4f:8c:eb:cb:29:fa:07:0d:66:d5:03:40:8a:2b:69:06:7f:58:
         7c:e7:72:5a:18:d7:e9:d3:31:eb:2d:45:f6:1a:66:d4:b3:e4:
         cf:73:70:f0:0b:06:ff:f6:51:ce:ff:7c:aa:94:ee:e8:18:b4:
         24:34:d2:68:43:f3:bf:93:fa:10:69:a3:6f:01:9c:4c:2e:91:
         55:80:11:a6:5a:19:c9:c0:e8:43:56:c8:67:29:f5:30:55:b4:
         6a:7f:51:d5:9c:22:f7:7b:0f:e0:f0:9c:3a:06:e9:96:e2:af:
         03:65:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----