Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer
File:                     47D8D5FEE9032D80A186B4EBC0BF422F045F309B.cer (raw, json)
Hash identifier:          9kJXkOuS1XlnL4qcoosr6e2qouXHffgyYRHTai309Rs=
Subject key identifier:   47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38ED61553C8CB35AFED1B1EF85EBFC511BA564FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 15:59:01 +0000
Certificate not after:    Fri 12 Jul 2024 16:04:01 +0000
Subordinate resources:    AS: 267605
                          IP: 45.71.116.0/22
                          IP: 2804:4424::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:61:55:3c:8c:b3:5a:fe:d1:b1:ef:85:eb:fc:51:1b:a5:64:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 15:59:01 2023 GMT
            Not After : Jul 12 16:04:01 2024 GMT
        Subject: CN=47D8D5FEE9032D80A186B4EBC0BF422F045F309B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:e7:72:82:c2:76:0e:79:09:f4:41:0b:f0:
                    a5:f0:fe:59:74:d6:12:4e:ea:51:f1:ed:b3:94:a3:
                    ac:2d:03:86:08:23:f0:fd:b4:0d:45:17:ca:28:43:
                    9b:69:81:c9:46:96:04:3a:34:ac:ad:20:0a:d3:5c:
                    28:f9:08:25:07:f7:a4:0d:0f:fb:83:50:8f:6c:39:
                    8a:6a:92:6c:b0:9e:db:cf:15:ae:2e:57:a5:69:e1:
                    7d:3c:77:90:e0:dd:7d:b9:c0:f1:43:a2:3d:1e:ce:
                    1f:8b:6c:5a:38:84:03:d7:ce:37:21:f5:dd:bd:a8:
                    0e:77:b5:50:1b:6a:b2:4b:a1:00:a3:73:9f:dd:7d:
                    6d:81:b7:e6:93:1b:bd:16:06:44:e7:fb:8c:fe:fc:
                    08:5b:77:9c:a4:b0:5d:4a:47:7b:52:5f:84:02:6b:
                    ca:7c:21:af:a0:8f:e6:a7:9d:9f:93:dd:9d:76:b0:
                    4b:3f:7a:25:70:5c:42:00:fb:5b:e4:03:58:22:10:
                    a3:99:ac:4e:fd:66:4e:9a:eb:cc:59:b9:e5:1c:88:
                    84:53:57:9a:e3:b1:45:77:39:bc:30:1c:ba:73:58:
                    b5:7b:df:f5:32:cf:71:1f:8a:a2:2a:df:91:39:20:
                    10:64:a8:65:12:25:94:31:11:a9:c0:05:0f:d6:bd:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:D8:D5:FE:E9:03:2D:80:A1:86:B4:EB:C0:BF:42:2F:04:5F:30:9B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/0/47D8D5FEE9032D80A186B4EBC0BF422F045F309B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22
                IPv6:
                  2804:4424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267605

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:e5:6f:45:f4:47:11:fd:9c:5a:90:e4:f2:65:d6:91:03:
         06:28:11:1f:a9:a2:e2:16:dd:3f:c2:2e:da:f1:08:92:07:cc:
         c8:d3:05:b9:20:77:16:93:08:97:ea:99:4c:96:8a:7c:8e:e3:
         b4:5a:cc:fb:5f:66:d3:fc:93:30:26:a3:0d:ce:65:ea:bd:c4:
         1b:35:2c:b1:1c:d8:19:e5:55:71:00:53:4c:98:e1:6b:27:8e:
         92:1b:6b:93:61:22:a6:b4:be:c5:92:17:63:a5:84:77:8e:ad:
         3a:cf:7e:47:dd:49:d2:66:51:f4:78:82:22:f5:a5:ad:24:91:
         64:91:8f:55:7e:a7:16:9f:da:08:b3:b1:1c:8a:64:74:78:79:
         2f:96:9e:05:2e:3f:02:fb:ae:82:69:2e:ad:89:ea:1d:d5:21:
         e5:19:8e:bd:97:9c:d6:90:2f:19:7f:d7:89:18:32:41:b8:12:
         52:a6:7d:e7:1e:c2:30:7a:42:7d:73:de:85:a6:80:90:b8:86:
         a1:ec:04:3e:7a:fd:60:f8:30:39:ce:91:d1:86:83:36:69:94:
         68:cb:62:47:ef:0e:9b:43:28:b3:4d:d6:f5:45:d1:52:05:5e:
         c0:56:bf:db:48:cf:6e:a6:dd:b5:d1:e7:e3:7a:4e:c8:c1:f1:
         c1:9f:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----