Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/948C896D290E6239EA096A0CBBD8BA824D37E909.cer
File:                     948C896D290E6239EA096A0CBBD8BA824D37E909.cer (raw, json)
Hash identifier:          X2/dhchOrbEBPispmoLvpHUhI0NQ8h39hEdqU5Nz58Q=
Subject key identifier:   94:8C:89:6D:29:0E:62:39:EA:09:6A:0C:BB:D8:BA:82:4D:37:E9:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       170BD307EAA20304D6301939F948C1A531AF51E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/948C896D290E6239EA096A0CBBD8BA824D37E909.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 14:07:05 +0000
Certificate not after:    Thu 07 Nov 2024 14:12:05 +0000
Subordinate resources:    AS: 268080
                          IP: 45.169.4.0/22
                          IP: 2804:57b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0b:d3:07:ea:a2:03:04:d6:30:19:39:f9:48:c1:a5:31:af:51:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 14:07:05 2023 GMT
            Not After : Nov  7 14:12:05 2024 GMT
        Subject: CN=948C896D290E6239EA096A0CBBD8BA824D37E909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:41:18:5f:44:81:a0:ab:35:6c:db:a8:90:
                    80:db:f4:44:39:41:2e:cd:94:97:ae:d2:80:43:10:
                    d3:39:36:6b:41:60:fa:69:1f:e7:a0:1a:e3:c6:c9:
                    e9:72:cd:e6:93:71:f3:f6:66:88:86:36:d6:bd:90:
                    f3:39:49:b9:1c:b7:f3:f0:9c:f1:c0:48:b4:64:f1:
                    36:58:e5:9f:02:b3:ae:a5:87:42:eb:c5:49:13:b2:
                    09:83:c5:1a:be:5c:ca:8d:de:20:e3:4b:7a:7c:00:
                    68:7c:fb:1b:b2:62:c3:72:3b:fe:eb:69:19:46:14:
                    94:13:4c:87:37:d0:4e:98:fc:8a:9e:18:a7:c4:7e:
                    9f:a9:60:df:91:6d:72:86:7d:44:18:f2:8c:ba:6c:
                    bf:b4:ba:03:2b:f4:22:ff:d7:81:1c:18:11:d5:34:
                    4b:99:15:48:60:cf:57:c6:7b:96:47:24:21:c2:2e:
                    bf:cd:8d:15:a9:5e:e0:77:2f:da:cf:c9:e9:dd:27:
                    74:36:25:31:69:79:84:9a:18:73:fc:b5:fb:34:d4:
                    8e:db:93:74:9f:e5:6b:91:7c:2c:b6:f9:36:f7:98:
                    70:a9:5d:52:be:d0:bc:46:5f:01:a3:1b:3a:d5:27:
                    e4:ea:36:71:fc:06:52:f2:ce:d7:8a:a3:47:b7:55:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:8C:89:6D:29:0E:62:39:EA:09:6A:0C:BB:D8:BA:82:4D:37:E9:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/948C896D290E6239EA096A0CBBD8BA824D37E909.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22
                IPv6:
                  2804:57b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268080

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:a4:e2:ca:7e:76:f1:73:aa:74:90:7c:c4:93:ad:c4:a2:
         38:26:06:f0:bb:93:47:05:3f:1f:11:4a:cd:d5:c0:c6:b6:83:
         87:9c:1a:76:d0:5f:ee:93:42:dc:57:d7:d4:1f:f5:bd:2d:c2:
         33:70:cd:e0:37:fc:52:c7:6a:b1:d1:2c:41:c2:34:7f:07:f5:
         bf:b1:d7:83:b7:f0:2a:5e:7e:3f:25:bf:06:6a:c2:a5:60:f5:
         12:9b:67:d4:1f:c3:6d:5c:30:75:93:a3:74:cc:69:3f:b1:1d:
         6a:e8:0e:ce:a7:79:90:d5:e4:eb:c6:0f:3d:13:83:4f:e9:2e:
         aa:9f:05:96:5a:e9:5e:5e:eb:61:d5:b7:12:8d:ba:7f:f2:77:
         17:79:9a:4d:81:b6:10:48:a7:c5:4f:ab:74:91:21:74:02:4f:
         61:b4:84:8c:d6:3b:69:9f:17:75:c1:8c:0b:25:23:3f:72:f3:
         1c:09:df:c0:7a:7d:43:d7:c5:a6:2e:c2:29:9a:52:76:60:25:
         30:75:82:6c:83:25:29:55:60:a2:4f:e2:37:70:0f:4b:fe:8d:
         d9:58:9e:4f:e8:67:72:a3:1e:47:cf:44:0e:51:a5:aa:d8:fb:
         5a:2b:b2:d8:cf:1f:0d:76:f2:bb:86:3d:fb:ef:a5:f1:52:b9:
         0a:4b:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----