Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
File:                     4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer (raw, json)
Hash identifier:          l/XLhbRF5Dz4UkxBFKQpB2aHirCuY286OFsWGkWtZJo=
Subject key identifier:   4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F86CD8DCE68782AF0B91CFA39362730CDACF1E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 15:59:52 +0000
Certificate not after:    Tue 04 Mar 2025 16:04:52 +0000
Subordinate resources:    AS: 264596
                          IP: 138.59.40.0/22
                          IP: 2804:222c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:cd:8d:ce:68:78:2a:f0:b9:1c:fa:39:36:27:30:cd:ac:f1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 15:59:52 2024 GMT
            Not After : Mar  4 16:04:52 2025 GMT
        Subject: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:be:24:6d:4d:ec:b1:d8:e3:c9:c2:a0:97:
                    7e:03:37:a5:9d:9d:86:1d:7a:69:78:5b:51:94:4f:
                    9a:a6:79:31:c5:d7:d3:e6:d5:08:01:b7:4c:bb:9d:
                    cd:8a:21:ce:2c:ae:8f:d3:f9:4c:03:64:fa:8c:04:
                    e7:03:f7:2a:df:2f:ce:9a:1f:1a:77:05:eb:fa:41:
                    36:64:72:8f:13:46:1f:f7:18:08:6e:a5:cd:8a:24:
                    b1:68:fa:63:a9:84:46:18:97:5c:3d:47:bf:35:65:
                    2b:61:9d:ef:2b:77:73:1a:58:6a:81:8b:42:7c:63:
                    44:87:31:b1:76:13:a0:6d:8e:65:d8:b3:27:5c:ac:
                    cc:16:cb:d5:46:ec:7f:9d:83:50:c1:4f:87:41:f9:
                    72:cb:39:07:82:e4:18:0a:fe:3f:ce:04:46:a7:e9:
                    6e:6d:c9:c0:ac:03:6b:8b:be:0e:11:5f:9e:1c:a5:
                    2f:bc:af:f7:6a:f7:d5:9d:be:07:a4:b9:0b:dc:19:
                    09:d5:80:0f:b6:a0:79:81:83:ed:6c:ef:a5:fd:37:
                    e3:c6:d1:95:62:64:03:dd:5f:0f:6e:38:3f:d1:60:
                    bf:e3:0f:bb:b0:aa:b4:86:51:ba:93:26:e8:41:da:
                    ba:96:40:3a:d1:8b:e4:dc:0e:7c:38:f5:2a:f4:9d:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.40.0/22
                IPv6:
                  2804:222c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264596

    Signature Algorithm: sha256WithRSAEncryption
         a0:93:50:6a:dc:a0:9c:55:9d:56:a8:80:ce:cf:75:5d:0d:9b:
         9d:86:2c:4d:d2:e1:c5:7d:85:0b:0f:00:7e:56:69:c2:63:3d:
         b0:ed:6d:98:63:7d:fc:e4:cc:17:e8:23:f0:63:15:e9:53:a9:
         7a:ed:dd:e7:e9:8d:35:76:d1:10:34:07:04:38:b0:39:15:f0:
         ae:cb:e9:38:ab:24:42:e9:6c:ee:f4:66:08:b8:0e:f4:6e:a4:
         93:32:35:ac:87:a1:8e:79:b4:48:78:f9:85:26:70:d6:ee:0b:
         b0:f4:67:07:74:63:14:36:07:cf:b4:78:5e:76:fa:fb:90:32:
         aa:db:f2:5b:76:4b:57:f4:2a:6f:76:5e:2c:88:26:96:da:98:
         d7:95:36:05:97:41:97:54:7b:ac:17:aa:ec:cc:56:a9:69:58:
         80:ef:f9:ba:ec:2b:31:3a:7a:7a:9f:aa:cc:99:fa:b1:41:06:
         af:3d:bd:e0:dc:1b:38:2d:fe:c8:64:37:87:58:ff:f7:9d:5a:
         7b:f6:56:7b:c1:c7:0f:d3:5b:90:dd:a8:db:32:b2:e0:34:20:
         8f:5a:30:35:ff:09:c0:e3:ed:df:62:35:0d:ba:2b:0c:78:f9:
         a5:ab:c1:75:ef:ab:d5:ab:1f:01:ca:1e:bf:38:90:4e:e4:e6:
         fb:70:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----