Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer
File:                     4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.cer (raw, json)
Hash identifier:          q9Py9cJToKh/t/7QkrJaIllneIl0d1SVPGpxZ7mrDpM=
Subject key identifier:   4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7068E259F28200EE76865FF8AB7F4A7C9FDEB961
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 20:09:49 +0000
Certificate not after:    Sun 08 Sep 2024 20:14:49 +0000
Subordinate resources:    AS: 266134
                          IP: 45.6.124.0/22
                          IP: 2804:3b30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:e2:59:f2:82:00:ee:76:86:5f:f8:ab:7f:4a:7c:9f:de:b9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 10 20:09:49 2023 GMT
            Not After : Sep  8 20:14:49 2024 GMT
        Subject: CN=4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:78:89:b7:9a:ff:64:a4:04:90:9a:e6:21:
                    ff:f5:91:64:9f:ed:f1:64:d7:35:9c:be:ec:24:4c:
                    1b:93:d1:6a:46:1b:d7:19:ae:c0:8d:6c:e6:3b:1f:
                    59:4b:67:ae:0e:c0:1e:50:df:31:63:ac:80:69:ef:
                    0d:fd:ae:3d:1d:f6:63:4e:53:93:3a:90:e2:ff:a8:
                    7f:64:6f:20:99:a0:92:3a:02:48:eb:4a:f7:71:66:
                    50:49:39:32:17:a2:1e:f8:b6:3b:3c:4c:ee:ff:23:
                    44:d2:04:20:e2:0b:0a:9d:d0:ba:5d:8d:af:f4:a7:
                    d4:0e:72:fd:9d:4f:69:06:1b:ba:2d:d7:74:fc:77:
                    ba:68:41:91:8b:9e:31:a6:d5:f7:eb:88:03:9f:22:
                    8c:6b:03:79:8d:63:e0:00:85:90:cb:09:1d:64:28:
                    43:ee:1e:6f:1b:42:c7:2f:fe:f9:d0:2c:24:55:7d:
                    b5:79:57:70:17:aa:eb:f4:5e:cc:03:1d:93:13:c7:
                    56:ea:85:2f:bf:32:89:aa:99:0e:17:42:04:7a:0d:
                    7f:12:3e:5a:59:a8:45:97:42:07:40:3c:de:c4:09:
                    e7:02:d8:ba:13:b1:26:32:c9:15:06:b1:bf:14:4a:
                    38:1d:07:d7:66:e1:8f:da:3a:69:6b:40:14:a0:96:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:E4:B7:D8:44:EB:7B:C0:81:B6:DF:A5:A9:8D:6D:E9:0F:CD:9C:B4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/0/4BE4B7D844EB7BC081B6DFA5A98D6DE90FCD9CB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/22
                IPv6:
                  2804:3b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266134

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:2d:12:d3:87:7d:03:22:c3:99:77:67:b6:e1:06:32:bc:
         f0:66:7b:f6:cd:7d:30:67:7c:70:a6:2a:18:c2:ed:c3:8b:a4:
         75:f9:34:4a:0e:97:20:9d:8d:22:1c:f9:ad:ac:80:51:b2:3f:
         85:5a:19:7e:74:5b:1c:7e:67:0a:8c:ad:1e:28:fa:dc:a8:48:
         26:24:ab:27:5b:3c:18:a6:b0:1f:77:1b:e8:57:9b:70:08:b1:
         fe:3d:80:dc:c0:5e:1a:09:b6:40:a2:a3:68:05:6c:56:54:cc:
         4c:3c:f0:e9:c3:a0:91:cf:68:24:43:17:69:49:85:60:3b:a3:
         a3:e1:cf:e1:bf:90:44:80:1c:92:f9:69:ed:bf:ac:1b:c2:0a:
         1e:79:2e:3d:d9:f7:57:f3:a5:df:85:9e:e2:ac:4e:ca:d8:0e:
         40:bd:2c:ed:c1:21:68:a6:06:0c:d4:2a:e0:81:5f:39:d4:f4:
         2a:cd:90:dd:e7:c2:3f:9d:51:10:5e:6e:8b:56:57:69:5e:6e:
         70:a0:3d:20:8a:cc:ed:7b:e8:e4:51:99:14:1e:c4:fc:af:53:
         fe:b0:a8:cd:c4:fd:f6:bb:0e:6b:d6:44:77:b6:35:d4:c5:37:
         a7:d7:6b:3c:c4:48:30:17:63:5d:00:de:13:b6:52:62:25:9a:
         94:be:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----