Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4DD43D290C6B438D838E22B1B66200783B627EC5.cer
File:                     4DD43D290C6B438D838E22B1B66200783B627EC5.cer (raw, json)
Hash identifier:          4JbEjzLwcHcIog138xJovM/vGqHZBsM9Z5fhjRXpnW8=
Subject key identifier:   4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D5D31C88BF3B859ECE07F8ABAFFA1BE3C8BF9FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 01:12:31 +0000
Certificate not after:    Wed 23 Oct 2024 01:17:31 +0000
Subordinate resources:    AS: 267950
                          IP: 45.166.24.0/22
                          IP: 2804:55b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5d:31:c8:8b:f3:b8:59:ec:e0:7f:8a:ba:ff:a1:be:3c:8b:f9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 01:12:31 2023 GMT
            Not After : Oct 23 01:17:31 2024 GMT
        Subject: CN=4DD43D290C6B438D838E22B1B66200783B627EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:55:88:c2:cd:f6:25:af:61:09:3b:bd:db:
                    6c:7d:34:fe:f4:c1:ef:26:cd:f5:d2:bb:2f:97:19:
                    32:3b:e8:92:d2:cd:da:f9:e8:20:42:2d:11:a7:d9:
                    7f:96:63:6c:7e:33:75:bb:32:9f:8d:dc:df:43:fe:
                    6f:47:95:bc:5a:60:b0:be:b1:5c:b7:9e:4c:04:5c:
                    d9:61:4a:e2:be:1f:47:42:75:2b:5e:52:5d:e1:5c:
                    66:4f:c1:b7:b2:26:5e:3b:1a:f7:91:7c:16:f6:33:
                    aa:e8:3b:ce:f5:29:93:ce:bf:48:0c:02:9d:77:ce:
                    1b:d9:3f:d7:b0:f5:57:ad:b7:72:0c:2d:f7:2b:01:
                    5c:91:85:4f:0a:9c:8e:47:fe:13:b2:c0:37:3d:b1:
                    82:17:79:b0:44:c3:32:b4:28:20:f9:b4:2b:48:62:
                    19:c7:86:17:a4:e7:7e:bb:bf:41:46:6a:70:09:39:
                    81:f5:c0:1d:64:b8:43:21:ab:3b:d8:d8:25:f9:61:
                    31:d7:9a:d7:01:23:c2:a1:d9:e6:11:e5:9b:42:7d:
                    4e:a3:67:33:2c:2e:78:ed:cd:12:51:b5:b7:ca:e1:
                    84:82:db:94:b1:5a:69:8a:87:f2:56:b0:4b:ad:68:
                    02:73:05:bb:0d:e2:f9:50:b6:cf:c9:e3:06:a9:3b:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:D4:3D:29:0C:6B:43:8D:83:8E:22:B1:B6:62:00:78:3B:62:7E:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBXUKuzKFkeJpR3HwR8Ce1ihExPfK26dcUdz3BseFgFw/0/4DD43D290C6B438D838E22B1B66200783B627EC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.24.0/22
                IPv6:
                  2804:55b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267950

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:8f:eb:1f:61:8a:92:71:2f:7b:a3:2d:d3:2d:63:01:4c:
         3d:a1:5c:23:be:b1:95:65:bd:1e:7f:ce:a1:17:47:9e:3a:31:
         ed:11:0a:0f:54:35:19:56:61:46:c3:d2:7a:3c:df:04:40:14:
         fa:b8:71:0f:0c:dd:d2:20:78:e3:28:5a:5d:bc:ed:bf:5e:84:
         ac:8d:02:5a:ab:2e:89:63:88:1b:c5:b2:fa:6f:40:83:13:55:
         93:03:49:90:8b:fb:3d:c4:0e:c1:e7:e6:1a:d0:c2:b4:7e:be:
         42:dd:49:d4:4e:aa:71:35:c3:57:70:25:d3:a0:1a:d7:86:44:
         05:72:0a:e8:ea:8f:f4:72:bc:4c:39:40:06:b8:a7:fe:ec:52:
         9c:7e:62:ac:bf:03:f5:42:c2:7d:9d:1f:4c:c5:b9:8f:9c:f8:
         e3:aa:a7:6f:0b:ef:b9:b8:15:ea:e5:13:de:c8:ef:df:c8:72:
         42:83:d7:a3:ed:48:d4:9b:02:b0:b0:7e:24:4d:c7:fc:a5:8b:
         0e:a7:ea:ab:5d:95:51:02:6f:d3:ac:53:e4:4a:4c:56:bd:27:
         0f:4e:7d:3f:36:09:fd:7a:2d:90:00:bf:65:76:59:21:52:f8:
         ca:8b:fa:c2:b7:8e:86:d2:4b:13:f1:b2:ce:95:3a:7e:55:34:
         78:62:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----