Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer
File:                     4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.cer (raw, json)
Hash identifier:          wg34QsqRgyV5aDRtITKEcXDm7vydulE/jVESIXa/0/Q=
Subject key identifier:   4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1930507F5D1B1AF726BBC1A3D491847230A2A0CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 20:31:29 +0000
Certificate not after:    Wed 22 May 2024 20:36:29 +0000
Subordinate resources:    AS: 269035
                          IP: 45.176.112.0/22
                          IP: 2804:5e78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:30:50:7f:5d:1b:1a:f7:26:bb:c1:a3:d4:91:84:72:30:a2:a0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 20:31:29 2023 GMT
            Not After : May 22 20:36:29 2024 GMT
        Subject: CN=4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:e5:7f:a6:0c:7c:57:d9:de:bf:0a:77:9b:
                    9b:cf:ac:34:01:27:d1:14:2f:54:ad:24:55:25:8a:
                    8e:d4:73:68:d1:9d:4e:9c:ff:6f:74:58:cb:78:dd:
                    a0:69:ba:84:dd:c2:40:75:c3:5d:1a:49:3a:23:a6:
                    23:b8:e1:f1:c4:fe:27:a8:84:3c:f5:70:69:66:bb:
                    3d:84:4f:e1:e0:ed:03:52:db:57:0a:d2:bf:a6:3d:
                    2a:ba:14:08:01:e7:65:c7:2a:67:fc:89:51:73:7b:
                    e0:aa:87:7d:61:91:7b:b3:a7:9f:bd:0d:c2:b8:42:
                    ed:a2:dc:9e:16:91:96:ed:e2:bb:df:05:f0:f0:72:
                    a7:5f:a2:d1:8a:ae:5d:d3:ad:d9:6d:90:f4:cd:0e:
                    aa:f1:6c:de:c0:82:0a:30:b8:4d:3d:e0:af:71:c1:
                    24:0c:39:08:e4:49:9f:a9:3c:62:24:ef:2d:44:d8:
                    65:32:97:cf:9c:2a:b2:ef:c5:48:e2:34:0a:72:96:
                    ac:14:cb:1e:9d:b0:e6:1c:02:9a:ff:70:1f:6a:83:
                    95:b4:7f:f4:e2:94:7e:6f:ce:f6:f7:b0:5c:47:e4:
                    80:93:2b:d9:26:2b:a7:7d:48:4a:f0:3b:35:d6:b9:
                    a7:85:b0:73:53:d9:3d:b1:d1:2a:39:35:01:3c:b2:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:EC:2C:A8:96:56:09:D2:BD:3D:84:A6:EC:A8:A2:32:C3:B8:07:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/4EEC2CA8965609D2BD3D84A6ECA8A232C3B807C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.112.0/22
                IPv6:
                  2804:5e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269035

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:55:65:55:ca:37:6e:d1:28:28:d4:4d:19:60:b3:71:41:
         ee:4a:a7:7b:fb:9a:51:85:84:ae:d2:1e:6c:9c:0d:8d:01:0f:
         e6:5c:d9:4d:41:e3:7e:6f:b3:c7:f7:5a:f8:68:d1:e2:4b:77:
         57:e2:95:4c:50:36:7f:a9:d7:e6:37:b8:cc:a7:39:85:e0:fa:
         cc:b9:64:65:c3:ff:d6:6e:e8:be:39:f5:65:8b:0b:15:38:01:
         ce:74:d5:60:c7:14:ba:a1:94:23:d5:73:4b:7c:4b:39:a6:79:
         36:cd:e6:1c:5b:19:bc:fa:74:33:b3:03:44:1a:e2:7f:c6:fe:
         a8:78:39:a5:de:cc:87:ae:48:ff:ec:5e:43:a9:5d:81:5a:b1:
         5f:62:27:97:7f:d3:99:32:65:67:fe:c9:92:90:cc:76:08:62:
         8c:a7:4f:26:68:fd:01:c6:ce:3a:1f:07:f0:c3:52:3d:14:70:
         83:dd:0e:ba:47:90:a8:fd:9e:4b:d3:66:57:70:05:ab:ce:b6:
         e0:8e:36:b9:13:5f:37:46:8b:b2:a7:b4:64:cb:0a:e2:cd:bd:
         76:73:1d:2a:78:aa:46:94:3f:1f:0f:96:6e:82:23:c3:4c:ef:
         6f:dc:8e:e9:e8:9e:36:4f:f3:90:4c:81:6d:a5:c0:58:10:51:
         57:06:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----