Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/73C4494BA1FF507F1D9650CBD22C983FB14FA65A.cer
File:                     73C4494BA1FF507F1D9650CBD22C983FB14FA65A.cer (raw, json)
Hash identifier:          L7VIYc2Hx/c6JDPj5HsCmuhXsX7Cn6OGMQ1jM937p2c=
Subject key identifier:   73:C4:49:4B:A1:FF:50:7F:1D:96:50:CB:D2:2C:98:3F:B1:4F:A6:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A459425987E9D438232B9B0C0E26BA30DBD3F0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/73C4494BA1FF507F1D9650CBD22C983FB14FA65A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 18:58:52 +0000
Certificate not after:    Tue 09 Jul 2024 19:03:52 +0000
Subordinate resources:    AS: 270382
                          IP: 190.111.128.0/22
                          IP: 2804:6b28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:45:94:25:98:7e:9d:43:82:32:b9:b0:c0:e2:6b:a3:0d:bd:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 18:58:52 2023 GMT
            Not After : Jul  9 19:03:52 2024 GMT
        Subject: CN=73C4494BA1FF507F1D9650CBD22C983FB14FA65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:9a:31:38:70:40:63:c2:09:bd:cb:a5:06:
                    89:28:16:66:cb:ef:1e:4d:e3:18:f3:ad:05:3f:ff:
                    20:39:0f:21:cc:fd:6c:84:fa:a4:67:18:31:d8:d2:
                    ed:35:7e:87:dd:97:76:ec:c4:bc:5e:89:99:22:d7:
                    d1:68:de:44:2e:ac:42:cd:00:2f:7d:5b:c3:79:c4:
                    20:63:37:6c:23:39:18:c1:cf:da:18:82:cf:59:da:
                    71:cb:9f:65:cc:f4:7a:80:99:78:37:dc:ab:89:49:
                    a5:1d:18:21:09:54:18:ec:3a:e3:25:f7:a3:c1:c5:
                    3e:9d:c7:7d:d2:72:80:52:49:73:34:51:50:90:2d:
                    ea:83:f8:56:24:f7:15:59:cb:6d:4c:55:b5:65:26:
                    27:31:26:55:11:8f:43:aa:3d:ad:3f:6a:8a:73:bc:
                    d3:07:fe:45:ef:1c:82:0b:ef:2d:48:de:81:d6:4c:
                    82:a8:39:fc:70:5e:bd:68:79:d3:17:cb:58:ec:5e:
                    a2:65:e4:65:51:c9:ae:b6:9e:fd:82:ab:81:aa:f9:
                    f9:d0:42:54:95:67:a7:dc:ef:d4:ab:b3:eb:c0:24:
                    c7:38:0d:9d:3a:2f:22:da:f9:a8:41:52:f4:a5:0c:
                    50:eb:09:a2:1b:9d:05:33:e4:cf:e8:ec:bf:61:99:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:C4:49:4B:A1:FF:50:7F:1D:96:50:CB:D2:2C:98:3F:B1:4F:A6:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/0/73C4494BA1FF507F1D9650CBD22C983FB14FA65A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22
                IPv6:
                  2804:6b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270382

    Signature Algorithm: sha256WithRSAEncryption
         13:40:7a:1c:80:14:b5:e4:7c:36:5b:c0:d5:39:b5:72:82:68:
         d5:9a:d1:bc:85:58:12:b9:b6:f6:0f:4f:47:60:84:eb:78:8b:
         c0:99:95:39:e3:c7:69:59:fe:7c:28:ae:ac:3d:27:d6:9f:b7:
         fa:34:4e:e5:92:fd:ec:ec:3a:18:2e:6e:47:ac:8d:6c:e7:cd:
         a8:d8:bf:f7:25:b1:86:b3:8f:b1:3b:1a:38:d2:06:4a:a5:5f:
         4d:fe:29:30:f0:a0:4d:cd:0d:73:9c:55:d8:9d:8b:cd:6f:ef:
         ba:01:67:47:49:32:88:b4:48:79:d6:5e:87:d8:5c:a3:e4:ae:
         f7:e5:bf:b3:27:48:62:83:97:1c:82:6e:7c:de:a3:ea:95:c8:
         04:2a:2a:73:42:0f:6d:5b:e5:fc:17:b4:3e:e2:de:99:be:a0:
         53:d5:50:d6:d2:6f:40:1f:0b:fb:db:dd:04:86:a3:1d:0e:8b:
         89:6d:4e:3e:05:cb:b8:4a:7d:82:7a:e6:0a:b0:d0:ad:34:99:
         e8:f2:8d:c3:27:bb:fc:7a:65:78:63:ca:40:48:a4:22:9a:dc:
         ac:e3:ce:44:91:9d:26:8e:f2:b9:f2:78:3c:8a:ec:85:7c:ff:
         96:c7:14:40:e6:f5:92:70:f5:e6:86:37:99:43:10:e9:8c:7b:
         a6:79:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----