Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer
File:                     47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer (raw, json)
Hash identifier:          QJ5jd7V9VcgF8KrsntBY2hmN0vpGvGR6mjeVV+q8ZYQ=
Subject key identifier:   47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40A359423515D8F191A22033446F2C78859CACF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 18:35:11 +0000
Certificate not after:    Tue 18 Jun 2024 18:40:11 +0000
Subordinate resources:    AS: 262995
                          IP: 143.0.112.0/22
                          IP: 186.219.176.0/21
                          IP: 2804:9d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a3:59:42:35:15:d8:f1:91:a2:20:33:44:6f:2c:78:85:9c:ac:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 18:35:11 2023 GMT
            Not After : Jun 18 18:40:11 2024 GMT
        Subject: CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:71:a4:33:eb:88:8e:b9:f6:41:76:dd:6f:
                    96:da:18:c7:87:2b:9d:b0:2d:45:fd:a9:47:47:77:
                    9a:de:a5:28:61:b5:bd:ad:91:f3:3e:64:85:1d:54:
                    12:e2:83:a3:d9:f5:77:1a:03:b9:7e:53:29:c5:bb:
                    b1:e7:e9:18:ca:3e:e5:82:e3:78:89:97:df:05:d2:
                    6e:87:ef:64:33:57:20:51:2d:29:85:75:4e:6f:9c:
                    06:39:73:ae:ac:6f:5f:7a:5c:99:df:75:3e:e8:28:
                    a3:6f:58:ae:0d:a2:e9:4a:e2:1d:4b:32:d5:f2:c9:
                    f6:20:99:91:f0:e0:55:26:88:55:8e:70:65:c6:8e:
                    82:9d:16:7c:ce:95:e3:2f:32:9f:ab:93:c5:65:5a:
                    13:9f:f3:0f:ca:63:67:3c:70:3e:5b:0c:63:6b:d9:
                    6c:c3:99:da:8f:a6:d1:4c:b5:ea:5d:7b:40:84:8f:
                    41:2b:10:46:f5:94:a2:77:3b:59:31:e2:f2:ab:a3:
                    dd:f9:be:6e:62:9d:9f:01:f8:da:24:c4:9f:96:54:
                    5d:cb:79:34:49:e1:7b:87:ae:0e:dd:32:53:8a:e9:
                    1b:7b:b6:97:d1:9b:83:ce:79:62:6f:c9:7e:0d:59:
                    44:23:3d:d1:3f:7c:20:a4:02:46:1a:03:30:07:27:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.112.0/22
                  186.219.176.0/21
                IPv6:
                  2804:9d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262995

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:7e:c9:e8:64:78:90:ed:28:61:d5:1d:a1:62:b3:19:9c:
         07:5b:6e:2a:c8:bb:ae:2e:40:5c:c7:a6:b1:0e:0f:e6:36:27:
         0e:b6:6e:6c:9d:0d:3b:80:c9:52:b0:ac:98:e9:4c:22:f9:0a:
         64:56:a0:ac:ae:1d:c8:8f:ad:b6:d6:c0:ea:d3:ed:77:34:b7:
         b7:22:c3:70:ef:71:b8:87:ba:2d:2c:55:8b:91:06:56:18:1b:
         97:b4:31:97:c6:7c:1d:fc:0f:c2:38:e7:d9:eb:64:71:d4:28:
         89:29:6b:f6:85:6c:3f:cd:48:58:0f:e2:6d:90:42:dd:84:ce:
         91:50:33:69:12:fb:3a:5c:29:fe:23:bd:70:97:0f:d7:0f:0c:
         50:ea:21:b9:79:1e:f2:c0:4f:98:27:6e:80:a5:f0:fe:97:1f:
         77:a9:6d:46:11:0a:73:86:e0:b0:db:ed:91:29:4e:81:d0:e6:
         4e:e9:74:74:aa:5e:0c:f9:33:40:1f:5c:3d:c7:9c:18:f8:66:
         0a:19:17:12:d1:53:27:25:70:b1:41:d9:b2:28:01:e7:43:89:
         42:56:a7:25:4a:34:75:0e:a5:89:85:5f:85:cd:0e:90:b0:4e:
         37:54:0d:d2:90:53:54:07:c5:50:fd:3d:b5:e7:8e:f8:df:bf:
         da:e1:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----