Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer
File:                     4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.cer (raw, json)
Hash identifier:          xrF4caAs7+ebhhsxYoVW2NBf99RhULoRaVyhChqEJ84=
Subject key identifier:   4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       090771EBD949D2348048ACE56527A76FF6E1BC2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Feb 2024 13:45:08 +0000
Certificate not after:    Sat 22 Feb 2025 13:50:08 +0000
Subordinate resources:    AS: 268747
                          IP: 45.171.40.0/22
                          IP: 2804:5a14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:71:eb:d9:49:d2:34:80:48:ac:e5:65:27:a7:6f:f6:e1:bc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 13:45:08 2024 GMT
            Not After : Feb 22 13:50:08 2025 GMT
        Subject: CN=4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:5d:e7:31:ec:96:06:b2:30:76:c9:fb:60:
                    73:b0:4b:13:04:b8:68:40:5d:81:b2:f5:11:7e:55:
                    28:b9:d1:df:24:e8:7f:31:78:cc:e3:ac:b0:37:17:
                    85:ff:ed:13:5b:00:8c:01:07:d9:30:46:3e:7f:1a:
                    d0:a7:da:07:5b:56:c6:ff:53:81:60:e0:25:8b:23:
                    d1:93:cd:ed:bd:76:ff:fe:a2:d1:15:ca:be:aa:1d:
                    49:18:12:e3:23:a3:3e:30:12:b7:f0:60:95:0d:e4:
                    14:ab:a3:f1:40:58:a3:84:ce:74:91:49:91:eb:22:
                    66:3a:39:3e:b5:ed:8c:bf:2e:d2:4c:64:47:60:ca:
                    cd:ad:a5:06:48:26:3f:f8:84:94:94:bc:a2:d1:63:
                    1e:ff:49:8d:45:ae:1a:1d:58:e0:b5:25:63:55:b4:
                    ec:16:ed:f0:2e:94:bd:a4:38:73:74:2c:dd:e5:8f:
                    7a:64:2b:22:82:7c:01:7d:f6:74:ae:db:8d:91:c7:
                    aa:9c:1e:e9:f3:49:5a:d1:db:81:0d:67:78:4b:b0:
                    83:65:1f:f5:d7:56:95:f6:ee:70:36:5d:fa:0b:8f:
                    f2:30:5d:bb:9b:40:ab:a1:3d:4a:8e:73:62:54:bc:
                    a6:6e:56:7d:04:b9:15:24:7b:25:3d:65:0b:6c:7c:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:8C:8A:9B:4C:9E:62:AC:C6:F9:62:4C:16:29:28:55:D5:5D:4A:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/0/4C8C8A9B4C9E62ACC6F9624C16292855D55D4A33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.40.0/22
                IPv6:
                  2804:5a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268747

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:63:4f:00:48:8e:e2:72:b2:01:56:24:db:54:5e:c0:9f:
         d6:fa:b2:48:c6:be:58:30:c4:d6:63:d7:40:2e:52:1b:4f:6e:
         6b:84:c2:38:35:38:11:a8:b5:41:78:19:71:ca:ed:55:1a:10:
         d9:cf:7c:63:28:f8:85:14:32:a7:d8:9b:12:26:9e:e4:81:5c:
         71:ce:2c:e4:10:c4:de:d9:e6:35:bb:80:78:42:f9:e2:fe:cf:
         00:85:95:07:6f:9d:32:3d:7c:8f:0f:f6:6b:93:29:cb:3e:f9:
         42:80:62:e6:0b:a6:2e:37:8f:f6:06:d0:f2:b2:42:6c:6b:88:
         dc:06:31:cd:79:ce:d8:13:c3:5f:97:37:13:65:74:5b:ba:7c:
         81:6c:34:8b:58:47:7b:09:bf:c5:6b:49:80:5b:77:a2:1e:8c:
         3e:15:8d:45:1c:ef:a9:dc:21:d0:35:8c:0c:92:82:a3:1e:1e:
         ac:bf:dc:93:ab:4f:10:55:42:b1:b3:56:3f:6d:1e:70:2d:dd:
         68:17:6f:f5:38:c3:5b:ad:81:5a:da:a6:fe:eb:c6:91:0d:39:
         c5:49:12:0a:bb:39:92:8a:dc:09:3c:d3:08:fe:5b:08:89:bc:
         78:63:84:9a:ef:d2:61:be:c4:8b:ff:8b:61:8d:b5:b4:6c:1b:
         a8:aa:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----