Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4AB620EBA441A81480DB0F3CAAD08BC9D1F95143.cer
File:                     4AB620EBA441A81480DB0F3CAAD08BC9D1F95143.cer (raw, json)
Hash identifier:          BertR5kZh1Zr8p5MqX4sfYQInUQx4M2sCDBlEbbl2Pw=
Subject key identifier:   4A:B6:20:EB:A4:41:A8:14:80:DB:0F:3C:AA:D0:8B:C9:D1:F9:51:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D053CA9DE2E2F817075DE7E5CBF8B101D4130C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/4AB620EBA441A81480DB0F3CAAD08BC9D1F95143.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 04:08:08 +0000
Certificate not after:    Thu 30 May 2024 04:13:08 +0000
Subordinate resources:    AS: 272631
                          IP: 2804:8640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:05:3c:a9:de:2e:2f:81:70:75:de:7e:5c:bf:8b:10:1d:41:30:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 04:08:08 2023 GMT
            Not After : May 30 04:13:08 2024 GMT
        Subject: CN=4AB620EBA441A81480DB0F3CAAD08BC9D1F95143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:39:2e:62:68:6c:4c:f9:e0:4e:2c:4e:d0:
                    9e:1c:dd:c1:9e:b6:b9:dd:a2:8a:ff:ac:f1:96:40:
                    e4:cd:98:c3:39:30:a3:fc:fb:c8:87:57:9d:85:91:
                    30:83:7e:85:bb:9c:11:5e:92:41:ab:fc:8e:27:dd:
                    47:34:c6:71:24:f8:25:58:55:14:c0:4a:27:16:d2:
                    2f:81:d8:97:23:c7:12:c1:5a:de:32:8d:97:92:2e:
                    8a:fe:12:04:ac:4d:47:2b:d6:2e:8a:8b:0b:45:fd:
                    79:fe:43:24:5d:f9:1b:93:bb:42:4d:90:ef:d1:ca:
                    f4:9c:17:f1:51:fe:ad:12:50:67:51:5d:f5:c3:5b:
                    3d:bf:b2:00:a9:51:f5:89:60:f8:79:2c:b2:e9:ba:
                    76:97:d9:fb:fd:6e:22:98:b5:83:93:b1:94:5d:5b:
                    80:ed:80:24:35:5a:0f:06:10:2c:c3:be:3e:3d:ab:
                    7a:b9:c5:43:61:0a:92:04:05:75:39:33:5c:0b:18:
                    ba:08:f5:78:28:f1:ea:ef:0a:6c:78:f0:ed:a0:f5:
                    f7:c3:48:10:3e:ad:f6:42:6d:c6:9f:90:d6:5a:0e:
                    97:b5:1e:0a:31:b7:5e:3a:8e:36:39:45:84:21:c6:
                    91:4f:6a:0d:83:18:0c:24:a7:95:39:18:3c:29:82:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:B6:20:EB:A4:41:A8:14:80:DB:0F:3C:AA:D0:8B:C9:D1:F9:51:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FU6W7MBUzj4yLjvMdjJuUAtNRxFdb8VZaAjyYCDSToB2/0/4AB620EBA441A81480DB0F3CAAD08BC9D1F95143.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272631

    Signature Algorithm: sha256WithRSAEncryption
         72:d0:96:22:1b:de:8a:3f:b3:f3:ec:a7:05:ae:3b:d4:18:fd:
         a7:a8:0e:59:1f:77:d4:b5:f3:a2:19:f5:de:3a:57:1a:c0:32:
         78:d7:83:51:ad:e4:b8:08:74:99:83:d8:2c:ca:78:0f:ad:b6:
         68:97:db:aa:06:ac:da:d6:79:3b:74:a0:c0:14:56:57:bf:3b:
         d3:22:ad:8c:4f:d2:6a:bb:55:dd:52:6e:f2:38:c2:05:34:bd:
         e7:30:60:0d:02:50:2b:ab:f2:be:83:ee:2c:01:66:19:51:a2:
         44:f6:12:b0:39:74:60:80:0d:9f:67:d5:c4:23:77:60:2c:91:
         ea:86:b8:52:2f:5d:d4:39:c9:5b:96:cb:cf:6c:bc:81:c6:1a:
         56:ee:0d:c3:54:45:c8:38:fe:31:f3:6a:f5:fb:c1:e9:52:d0:
         28:12:19:97:c8:fc:24:be:c0:84:4d:84:ec:24:7b:2b:bd:dc:
         39:35:01:fc:9b:1f:a6:6e:ce:5b:f3:3b:92:ac:4e:35:c9:e4:
         2a:37:a1:69:af:38:8f:32:84:c9:37:cb:e0:1c:9a:91:4d:0d:
         20:5f:c6:f0:ee:ad:bf:38:13:6a:97:4a:31:26:7e:56:e5:2f:
         0b:59:0f:b1:a9:76:20:a3:b0:48:7d:1b:77:f4:5e:0d:53:f6:
         b4:be:08:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----