Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/747AB1844C86F4944B7E4E9E07B77C56424B321F.cer
File:                     747AB1844C86F4944B7E4E9E07B77C56424B321F.cer (raw, json)
Hash identifier:          gnzWQ88p7wmM/5ImeIVMNaJoLexWBIdITBIsdYgAXmY=
Subject key identifier:   74:7A:B1:84:4C:86:F4:94:4B:7E:4E:9E:07:B7:7C:56:42:4B:32:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14390795C0C464D9097C7330CCEA336860CACA16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DrTt9anHz2n4Mk3wQhaMKrqaZnqKhSd7GL56vaTieiUQ/0/747AB1844C86F4944B7E4E9E07B77C56424B321F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DrTt9anHz2n4Mk3wQhaMKrqaZnqKhSd7GL56vaTieiUQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Sep 2021 20:47:56 +0000
Certificate not after:    Mon 12 Sep 2022 20:52:56 +0000
Subordinate resources:    AS: 267273
                          IP: 45.232.200.0/23
                          IP: 2804:4af0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:39:07:95:c0:c4:64:d9:09:7c:73:30:cc:ea:33:68:60:ca:ca:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 20:47:56 2021 GMT
            Not After : Sep 12 20:52:56 2022 GMT
        Subject: CN=747AB1844C86F4944B7E4E9E07B77C56424B321F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:12:b2:b0:88:11:01:fc:1d:ff:2a:33:b9:
                    b6:af:f0:21:c5:f1:e6:72:7a:d4:4d:a8:07:0e:f6:
                    a5:b2:59:57:ea:6c:fe:59:32:41:c4:bc:ca:43:d4:
                    cf:98:a8:8c:5c:d0:1e:df:e6:ed:34:14:ce:fe:65:
                    56:01:04:a0:50:0b:80:9f:ad:01:01:76:ef:ee:c4:
                    39:69:a2:e9:c9:44:52:64:71:1c:f0:ca:e1:b0:b7:
                    b6:24:26:6f:fe:8d:09:a0:22:c8:bd:39:56:7e:f4:
                    20:a7:c7:e6:5c:b4:11:c0:e0:91:0e:33:f3:9a:56:
                    51:54:c3:1b:c6:8f:d3:d8:1e:d8:d7:6b:06:a3:de:
                    95:37:bc:62:5c:40:06:03:bd:8a:07:d9:52:a5:90:
                    3e:bf:b5:ad:b8:e3:28:8f:c0:a2:5f:6b:c6:cd:d8:
                    29:9f:da:14:13:e2:37:a8:c2:94:9b:b2:fa:29:23:
                    a8:62:08:9b:9a:4e:bf:c4:88:44:17:10:8f:7c:e5:
                    bd:a4:eb:4c:f8:3e:dc:d4:bd:d9:c5:ea:49:03:36:
                    16:50:b1:37:6c:41:97:32:11:16:32:26:08:93:f1:
                    9d:66:57:8e:c1:4f:df:17:ef:4d:a3:e2:a9:4a:eb:
                    f8:4c:85:34:2a:36:76:8f:53:73:84:65:17:d4:2e:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:7A:B1:84:4C:86:F4:94:4B:7E:4E:9E:07:B7:7C:56:42:4B:32:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DrTt9anHz2n4Mk3wQhaMKrqaZnqKhSd7GL56vaTieiUQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DrTt9anHz2n4Mk3wQhaMKrqaZnqKhSd7GL56vaTieiUQ/0/747AB1844C86F4944B7E4E9E07B77C56424B321F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/23
                IPv6:
                  2804:4af0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267273

    Signature Algorithm: sha256WithRSAEncryption
         4d:9f:2d:93:2b:ab:b7:7d:71:59:20:ee:8a:57:e5:d4:c7:4c:
         dd:a2:78:ed:48:b2:53:f6:e3:a1:c1:ca:aa:50:b4:7e:9d:4d:
         3e:50:e5:9c:1c:87:7e:52:c2:00:a7:ef:48:71:81:ae:6e:01:
         18:ed:6c:3d:00:82:55:8f:7d:2e:ef:45:c5:79:ea:1d:e2:40:
         c5:ae:23:2a:04:36:5b:6d:c8:66:29:46:00:5d:f3:f3:e4:a5:
         4e:4d:e9:4b:41:a7:f7:e5:7d:cd:94:44:7a:1d:87:7f:73:74:
         93:9e:ae:35:68:c5:f3:6b:7f:40:0c:c5:9a:e0:96:91:f6:5b:
         92:60:25:62:19:ae:a8:41:f6:e7:e8:41:4e:67:a8:60:9e:d3:
         6b:8a:cb:53:f9:9e:70:1c:14:49:7a:85:db:d5:dc:a5:b3:45:
         94:bb:87:e6:b6:2b:ba:28:93:e6:89:58:8f:a7:19:08:d6:e0:
         84:70:c7:8b:e1:3a:b8:f6:b4:f4:b3:78:5c:88:05:a0:d3:fb:
         6f:f6:f3:9e:13:ca:a3:3d:9d:bb:aa:dc:f5:88:a6:d1:7b:04:
         1d:d6:13:3b:39:a0:82:18:fb:c4:12:69:8e:76:66:f5:c8:03:
         b7:44:42:2c:3c:0a:25:f4:e0:cf:fd:bd:ee:e6:7a:6c:a3:d4:
         fa:d4:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----