Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer
File:                     4F7C6599F80B64AFC2A339651834D8FBB53C1B85.cer (raw, json)
Hash identifier:          gMQO4gRhgvCPSD7lEK0RuWxrWtIkAABuW8iCV6vc3a4=
Subject key identifier:   4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71688693909DD28944D89B97CBEC46680FE66DF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 19:55:05 +0000
Certificate not after:    Fri 11 Apr 2025 20:00:05 +0000
Subordinate resources:    AS: 272220
                          IP: 2804:1f54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:86:93:90:9d:d2:89:44:d8:9b:97:cb:ec:46:68:0f:e6:6d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 19:55:05 2024 GMT
            Not After : Apr 11 20:00:05 2025 GMT
        Subject: CN=4F7C6599F80B64AFC2A339651834D8FBB53C1B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:fb:91:1a:b4:b4:8e:6a:3d:dd:4c:67:79:
                    cd:67:2d:94:44:cf:03:fc:90:24:d4:fd:22:9c:3e:
                    c3:62:17:32:fd:87:8f:f0:66:29:c8:53:1e:d2:8b:
                    eb:c5:7f:38:20:80:99:52:fc:d7:1d:8b:29:d7:3d:
                    7a:99:88:c9:f4:7c:ff:c5:0e:83:51:27:e9:d1:43:
                    14:2b:74:4f:61:6e:35:5d:66:2a:e7:23:1a:54:45:
                    de:aa:15:df:5a:6d:0a:72:73:21:46:3c:56:89:4c:
                    37:06:86:8a:a7:18:6d:28:21:96:2b:a4:fa:97:88:
                    0b:c2:72:c3:89:6d:ef:cb:ba:70:63:81:07:db:6c:
                    8c:06:74:c6:49:fd:e5:ac:3a:44:4b:b7:75:97:c4:
                    f7:96:28:18:a8:7e:91:c8:c0:35:f2:d4:0f:c1:44:
                    50:7c:2d:ec:39:d9:14:80:d6:36:83:46:3a:97:aa:
                    5b:42:b9:9f:f5:6e:d9:00:38:9a:b5:9a:d2:b8:45:
                    63:0b:72:86:21:5a:43:81:2e:3b:fb:9a:5a:14:92:
                    d7:5c:7e:38:42:c6:e5:95:99:72:ab:3d:6e:ac:95:
                    07:2a:75:fc:f5:05:cb:39:f4:52:68:73:79:85:c7:
                    80:20:c6:3c:69:66:65:78:62:28:cb:5e:0a:9e:91:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:7C:65:99:F8:0B:64:AF:C2:A3:39:65:18:34:D8:FB:B5:3C:1B:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/4F7C6599F80B64AFC2A339651834D8FBB53C1B85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272220

    Signature Algorithm: sha256WithRSAEncryption
         68:66:8d:20:fb:8f:00:09:c5:27:23:4b:06:86:44:11:58:aa:
         05:31:56:98:2d:66:07:f2:ed:9e:f3:3a:47:ce:45:c3:83:5c:
         19:49:7d:4f:3b:36:3c:c6:60:79:f0:dc:86:ef:0d:8f:07:65:
         5d:35:df:f2:7b:c9:6a:1b:6e:a8:bb:71:ec:d3:cb:75:a4:27:
         fe:ee:94:73:e9:bf:69:7d:e2:28:cf:47:fb:3b:70:e0:26:3f:
         28:3a:38:63:f8:6d:b6:46:53:38:fb:5c:09:5a:73:4d:f4:8f:
         ef:99:93:eb:5c:6e:22:68:36:51:b0:96:33:e4:1c:e3:81:e2:
         c1:c8:09:2a:bb:b3:f6:1b:69:0b:cd:5e:ce:96:42:2c:4e:1d:
         05:c4:c7:60:4b:a4:70:35:a3:1a:62:95:88:5c:3f:7e:0d:d1:
         b5:06:39:99:ac:b6:b3:b2:99:fa:d4:e6:9b:ab:33:17:e1:41:
         c6:63:12:10:09:e9:92:59:2d:ff:7c:bd:e6:f7:c9:30:e5:06:
         37:48:c9:17:86:5b:37:f2:73:9e:7c:a8:cc:e0:12:56:5f:b9:
         2b:21:32:f8:d2:d6:ea:a1:4c:7a:ae:33:c4:99:9c:b2:13:da:
         5d:ba:96:0b:1b:45:df:30:d6:63:47:25:97:7f:31:d9:ae:9c:
         6b:6d:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----