Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer
File:                     4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.cer (raw, json)
Hash identifier:          VrM/42DEIoSORnIUn8PDx7Qu9j6SgQZ9OQjOOFfraBk=
Subject key identifier:   4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50FD594E48E6C637E48C793901BB773877669848
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 16:14:36 +0000
Certificate not after:    Fri 11 Apr 2025 16:19:36 +0000
Subordinate resources:    AS: 271390
                          IP: 181.189.104.0/22
                          IP: 2804:7ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fd:59:4e:48:e6:c6:37:e4:8c:79:39:01:bb:77:38:77:66:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 16:14:36 2024 GMT
            Not After : Apr 11 16:19:36 2025 GMT
        Subject: CN=4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:3f:6a:22:d4:46:11:41:7c:fa:ab:87:5c:
                    ba:bc:28:9b:b1:23:ef:d0:9d:27:fe:06:d9:67:c5:
                    08:0b:42:1b:7c:46:13:ef:ed:c7:f3:2c:53:bb:58:
                    7e:ce:80:03:2d:c1:06:2a:79:73:0d:19:b8:83:22:
                    cf:01:b7:70:d3:da:df:7f:b1:3f:50:d9:1a:d6:21:
                    44:bd:ad:4a:53:19:04:23:23:c3:50:6f:15:5f:cd:
                    be:e4:14:e0:af:dc:1e:bf:1b:72:d1:d5:b7:ac:88:
                    9a:02:7a:a2:ae:b1:be:61:21:ba:54:ff:06:31:0b:
                    2f:8d:85:75:50:36:29:37:f7:18:d8:09:27:9e:87:
                    cc:d6:66:dc:b9:1c:79:83:ab:6d:39:73:1d:76:12:
                    bf:0c:c2:c1:ab:81:f0:4f:14:e5:8b:7d:bc:0c:22:
                    57:5b:56:60:15:62:14:92:79:64:29:49:59:b4:6a:
                    5e:d1:a8:9a:0e:15:26:18:bf:3e:f4:45:2a:0d:89:
                    51:1f:63:00:ea:1e:b4:ad:e7:ce:cc:9a:a3:b3:c7:
                    e8:4b:53:aa:4a:36:0a:f5:a6:c4:00:c4:49:f4:7b:
                    f2:91:19:2d:b2:bc:4d:6d:ae:16:60:ee:dc:22:c0:
                    cd:4e:d0:ef:d4:59:d7:58:a5:df:b4:57:d4:81:36:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:E5:5F:3E:0B:07:DC:29:D9:2B:8B:C2:4F:F8:90:44:E9:8E:19:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/1/4FE55F3E0B07DC29D92B8BC24FF89044E98E19D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/22
                IPv6:
                  2804:7ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271390

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:eb:f4:a7:54:53:ab:39:60:07:70:7b:35:c3:b4:0a:85:
         ad:fe:ee:8b:19:e9:f2:8f:57:03:c3:22:b0:d0:af:3d:5e:7b:
         3f:76:97:c0:51:27:0b:8d:f3:31:99:af:1f:31:36:92:17:04:
         30:5a:18:d9:51:26:fd:a4:1e:d6:01:b9:07:73:10:12:f5:f5:
         49:d4:80:47:d9:0b:b9:53:a6:16:fb:c4:6e:e9:5b:15:97:92:
         44:c2:bc:2d:06:96:91:a2:15:e4:44:56:4e:cb:14:30:5a:85:
         ac:cd:ef:f5:a6:b6:c6:92:22:bf:1f:39:ab:38:db:16:42:18:
         02:c1:14:f2:33:75:b7:9e:44:c1:18:38:99:57:24:69:c5:f9:
         85:78:85:76:17:e3:a2:4b:ca:8d:49:82:f3:9e:23:f7:62:82:
         ba:5d:8d:7c:8d:90:de:aa:ac:ec:78:23:be:2d:72:55:ce:71:
         6a:cc:e7:43:2c:90:28:a4:6e:b2:64:35:20:98:fa:76:61:3e:
         0f:61:e7:12:39:77:14:b5:4d:e5:18:75:87:3c:24:79:d3:ec:
         29:eb:5c:09:30:cf:b0:94:f5:c8:52:ba:29:f5:9f:4b:21:39:
         fb:2a:24:b7:16:a0:05:d3:df:e7:bc:c2:dd:42:a9:f2:23:11:
         d2:59:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----