Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
File:                     4BFA8C2A990E221C38D68568DF93251E9944A97D.cer (raw, json)
Hash identifier:          d1UqGSelN+LSgjTf45h6kkW1qgcL/nexRbjvsIwdUVU=
Subject key identifier:   4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7286A549EA9E9AA85D584893E1657378BD5F9BD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:53:56 +0000
Certificate not after:    Sat 10 Aug 2024 02:58:56 +0000
Subordinate resources:    AS: 262792
                          IP: 201.76.96.0/20
                          IP: 2804:224::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:a5:49:ea:9e:9a:a8:5d:58:48:93:e1:65:73:78:bd:5f:9b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:53:56 2023 GMT
            Not After : Aug 10 02:58:56 2024 GMT
        Subject: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:27:3e:ea:fc:08:b1:71:91:12:5a:b2:69:
                    ff:68:73:d6:b2:2f:44:6e:66:0b:ea:16:e3:af:5e:
                    a3:75:16:4f:59:7c:e0:b7:8f:90:39:b9:d7:05:12:
                    fb:d4:c0:52:ba:14:5a:30:8a:42:a1:af:61:e0:8e:
                    7f:ce:87:08:33:ea:3f:f0:9e:01:09:86:4c:4b:54:
                    ec:8e:da:2f:e5:34:74:17:75:c9:3e:e0:05:9b:54:
                    f2:95:b2:d8:c5:55:e7:b8:9c:33:29:df:d4:5f:c0:
                    c1:5a:e8:01:d7:09:4a:a7:f5:14:08:02:75:83:b4:
                    df:2c:f4:a0:d9:63:31:7b:0f:6f:e6:20:ee:71:28:
                    ce:e9:24:88:b1:15:97:11:98:fa:a1:f3:1e:99:fa:
                    2b:b3:9f:3d:ac:91:86:77:de:bd:20:e1:9d:55:87:
                    59:b0:80:8c:02:96:44:25:f1:02:72:bd:f5:18:90:
                    42:b2:7c:1a:8f:36:09:11:3b:e5:58:9f:d8:05:06:
                    00:fd:f7:f4:9a:ec:b1:f7:c8:c9:09:94:d7:c4:d1:
                    76:fa:29:94:11:8f:7d:ea:3f:a3:16:63:75:44:11:
                    af:46:27:2f:4c:71:48:2d:e5:8f:8d:ef:f4:8d:14:
                    d9:72:33:be:a4:23:5a:64:48:17:30:fa:32:19:c0:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/20
                IPv6:
                  2804:224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262792

    Signature Algorithm: sha256WithRSAEncryption
         63:71:f7:97:4b:3d:a9:94:92:4a:62:1b:f2:83:13:67:a9:1d:
         96:85:34:c5:36:e8:95:4e:c4:a1:a9:3c:53:4e:d8:e4:a5:b5:
         8e:91:72:be:55:70:5f:a7:f3:96:ff:aa:8a:cc:2d:ba:57:67:
         9e:ce:1c:5b:e6:3b:30:76:ca:42:06:96:10:89:40:b3:9b:34:
         be:d0:2e:fe:a9:95:58:91:9c:dc:70:38:bb:f5:45:e8:f1:71:
         5e:bb:16:1d:f4:85:4e:8b:e7:47:86:b0:a3:08:47:b2:c0:5e:
         e2:12:7d:aa:70:e7:1b:17:53:cd:67:7f:19:5b:6c:25:60:f0:
         50:a6:03:03:23:a2:b9:93:38:73:d0:79:e8:aa:88:9e:0e:c7:
         fc:bd:0e:4d:d0:c8:92:42:53:9a:3d:3f:a3:aa:92:2b:be:a1:
         26:a6:ba:32:03:e3:e2:d4:fd:94:5d:a2:c9:5a:a4:4d:ac:0b:
         f6:c1:5f:93:6d:8b:e2:78:23:74:bf:ad:d0:d4:5f:00:b7:b3:
         2c:f8:fb:b1:5b:dc:0e:b6:d3:40:a4:a2:bc:a4:41:44:f6:33:
         b8:06:54:5e:99:76:b3:80:47:a8:3f:e2:a4:a0:cf:15:83:1b:
         1d:56:4c:3c:11:ff:88:26:1c:f9:35:d6:43:5b:d3:b6:70:57:
         f5:b4:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----