Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer
File:                     4B24C412F27C6B22447FF7BEB656C9DAD7D27678.cer (raw, json)
Hash identifier:          JJQEOiiZbJLUy3/WrdomYJ5g50q9EB05Xz4JiGIha1U=
Subject key identifier:   4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10165A5C67AE65390758862F681623ED923C73D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:04:35 +0000
Certificate not after:    Thu 23 May 2024 23:09:35 +0000
Subordinate resources:    AS: 266299
                          IP: 170.79.148.0/22
                          IP: 2804:35a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:16:5a:5c:67:ae:65:39:07:58:86:2f:68:16:23:ed:92:3c:73:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:04:35 2023 GMT
            Not After : May 23 23:09:35 2024 GMT
        Subject: CN=4B24C412F27C6B22447FF7BEB656C9DAD7D27678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:e2:6a:f0:fc:ff:6a:69:96:56:18:c5:ad:
                    ef:a7:39:54:67:f7:f3:71:58:34:5b:eb:9e:28:c5:
                    8a:10:71:3e:ff:98:4b:f4:63:68:4b:3e:ff:e5:33:
                    d7:de:f3:29:ee:4e:09:08:4f:42:da:5e:ef:a0:5b:
                    6f:01:1f:56:86:e0:9f:2e:81:a5:f4:bf:d0:31:64:
                    43:d7:0c:df:df:39:b2:70:dc:d1:15:22:34:26:97:
                    55:f0:e1:1f:89:40:e9:c0:c7:e5:ab:90:f3:cd:34:
                    9f:4b:91:90:ef:fd:01:09:bc:4a:5a:d6:e2:02:56:
                    3f:f6:0f:f0:2c:a2:5e:b5:6f:85:a9:c2:18:56:2d:
                    6d:e5:9a:cd:2f:79:f8:a3:a9:fd:96:7e:e8:6c:f7:
                    08:7f:0e:a1:9b:fc:9d:17:c1:30:15:f9:c3:7d:91:
                    22:d1:13:2e:65:62:d7:3a:a7:7f:db:6c:47:be:1c:
                    d2:dd:93:c2:ed:69:5f:94:54:f6:15:63:4f:02:4f:
                    53:7e:aa:f0:37:37:f2:53:70:10:d6:db:34:c8:70:
                    76:df:fe:84:18:8c:5f:c8:5c:ec:ea:a3:ae:26:c6:
                    9b:b8:30:4a:00:fc:f2:b2:c0:7e:04:6e:05:f9:2b:
                    bd:fd:8d:5c:e8:09:91:a7:b1:22:14:9c:86:00:57:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:24:C4:12:F2:7C:6B:22:44:7F:F7:BE:B6:56:C9:DA:D7:D2:76:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/4B24C412F27C6B22447FF7BEB656C9DAD7D27678.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.148.0/22
                IPv6:
                  2804:35a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266299

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:42:b8:b5:f4:8d:a7:e6:37:ed:79:35:0e:ea:b9:11:bd:
         23:40:66:6e:33:7a:40:7c:fd:7a:a6:d6:4e:e7:2a:21:57:ca:
         57:81:64:f6:99:19:97:a0:a3:2f:40:d6:66:be:5a:d9:a7:36:
         8b:02:ac:7b:ec:85:b3:3b:42:4c:6b:a2:48:c5:bd:6a:8d:5e:
         f1:8e:74:57:71:51:d0:b0:e9:e1:a9:cb:0c:86:d5:cd:ed:9d:
         b2:d4:3e:c0:cd:e5:c3:d2:16:bc:57:b2:ca:83:5d:a1:bc:e6:
         dd:f3:d2:e9:3b:7a:f6:32:06:be:c0:41:17:92:2b:e6:8a:c3:
         31:86:34:b1:7d:d6:46:04:70:51:b6:6d:96:3c:36:26:6a:63:
         25:14:8a:9d:f2:f7:1a:85:49:8a:4c:3b:2a:75:c5:73:0c:96:
         94:53:a7:d6:4a:c8:b8:a7:98:fc:82:cd:ac:e0:28:9c:31:8b:
         d9:dd:cd:6d:c6:f0:b3:da:38:b7:c4:3a:b1:65:be:fa:c3:23:
         b6:ac:7e:98:c9:1f:83:0c:7d:b2:a0:2f:27:5d:93:82:f2:93:
         a6:39:f3:67:5e:f9:89:56:85:09:3f:e0:64:1f:12:cd:d5:ac:
         89:50:2b:cc:bf:b3:57:3f:6d:d8:06:32:bf:c6:94:0f:34:81:
         4b:c1:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----