Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
File:                     4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer (raw, json)
Hash identifier:          6jDYV4AtHr9igHKY5ORhcYxYLYMVOYOubAyhzq5K1Rg=
Subject key identifier:   4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ADB5F9FFEABBE434013F864A0DA3FF5644711F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Mar 2024 21:47:57 +0000
Certificate not after:    Sat 08 Mar 2025 21:52:57 +0000
Subordinate resources:    AS: 270926
                          IP: 186.26.88.0/22
                          IP: 2804:739c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:db:5f:9f:fe:ab:be:43:40:13:f8:64:a0:da:3f:f5:64:47:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 21:47:57 2024 GMT
            Not After : Mar  8 21:52:57 2025 GMT
        Subject: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:46:c9:59:7a:e9:d4:bb:e7:ff:67:09:7e:
                    b9:cf:d4:88:af:d4:8a:c4:14:b9:b5:ce:63:d6:a6:
                    82:89:ea:66:68:9c:1c:90:9a:02:48:bc:8a:8a:39:
                    60:a4:07:1b:f6:d1:13:27:55:69:3b:15:da:4a:0e:
                    c0:d3:5c:56:e8:72:f8:a9:af:27:fa:df:95:59:89:
                    65:a4:0e:c9:6e:f4:d5:64:a4:ad:dd:53:d3:b9:ad:
                    47:7c:c3:7c:ee:f8:fc:3c:77:eb:ca:eb:ae:0a:0c:
                    79:52:40:c7:43:85:43:43:dd:52:0b:9a:05:d1:5d:
                    2b:e6:9e:55:94:7a:67:2a:34:1f:58:21:c7:5d:fd:
                    30:ed:b2:a4:d7:26:03:68:12:52:0c:41:dd:87:e3:
                    0b:1f:e7:ae:09:98:19:91:13:71:1e:93:59:f0:41:
                    5c:a4:97:83:3f:49:2a:66:87:aa:7e:59:86:84:5f:
                    f8:8d:13:8b:c5:1a:c7:90:cd:6a:88:2e:d3:cd:64:
                    82:fc:60:63:51:da:96:0d:2c:29:23:20:bf:c9:32:
                    c2:ab:4d:fe:64:74:26:e9:0c:a7:8b:a0:ad:5f:2d:
                    d5:c5:28:47:29:ff:d1:ba:56:c1:b6:bc:13:46:e6:
                    fe:3e:a9:ea:62:24:81:5c:67:79:80:f0:70:0a:63:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/22
                IPv6:
                  2804:739c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270926

    Signature Algorithm: sha256WithRSAEncryption
         44:26:71:ab:d5:72:42:f2:e7:b4:81:98:9d:47:df:65:0a:b0:
         3f:d2:38:41:01:cd:83:b8:80:b0:9a:c9:3a:9a:50:93:40:4f:
         c3:0a:57:1f:ee:ae:07:dd:76:27:d3:fa:1c:e8:7d:c9:30:39:
         19:dc:45:76:a2:8e:17:0d:ce:ca:fd:8f:01:71:46:fc:3e:7d:
         03:16:53:23:ee:82:71:64:b4:e8:cc:fa:53:c1:10:b4:3a:d5:
         79:60:e9:fb:a3:ff:14:8a:02:10:24:82:a9:23:96:f9:8c:3a:
         58:99:50:3a:cb:21:88:29:60:2d:43:62:43:b4:94:92:23:bb:
         ec:58:b5:dd:eb:38:f1:e2:54:b7:01:af:eb:3e:cf:0a:fc:42:
         e4:ff:57:f8:6c:8a:84:b1:a0:86:91:2e:61:1e:6a:f9:9f:8b:
         1f:81:a4:6c:da:68:8e:27:36:e9:f9:d1:26:3b:ac:a4:4e:c7:
         d5:42:50:18:65:7a:4f:82:1c:f0:e8:b1:b1:96:49:72:59:e1:
         e9:c7:02:4a:9a:2b:c9:39:f0:c4:8c:93:74:de:ff:2a:ad:ef:
         ec:92:86:a0:8e:0e:79:67:d1:c5:24:cc:5a:f9:93:22:af:cc:
         99:a7:47:fc:38:b1:26:29:7c:6c:e8:56:4a:b3:9b:e2:90:ab:
         7d:3b:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----