Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B46B7ACCF4AC8C9A6933010E949B186F25C0F72B.cer
File:                     B46B7ACCF4AC8C9A6933010E949B186F25C0F72B.cer (raw, json)
Hash identifier:          9E/LfqrzCHfUiSVKY1DCxkNYUG8B/K3NHxdNH6pbELU=
Subject key identifier:   B4:6B:7A:CC:F4:AC:8C:9A:69:33:01:0E:94:9B:18:6F:25:C0:F7:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19CE2F7466BEB61A68D36120B848177AB2302B6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/B46B7ACCF4AC8C9A6933010E949B186F25C0F72B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 15:33:03 +0000
Certificate not after:    Mon 10 Feb 2025 15:38:03 +0000
Subordinate resources:    AS: 269497
                          IP: 45.187.204.0/22
                          IP: 2804:6588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ce:2f:74:66:be:b6:1a:68:d3:61:20:b8:48:17:7a:b2:30:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 12 15:33:03 2024 GMT
            Not After : Feb 10 15:38:03 2025 GMT
        Subject: CN=B46B7ACCF4AC8C9A6933010E949B186F25C0F72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:39:1e:ba:57:8d:6c:a8:ea:f7:54:9e:31:
                    ca:ab:b3:ce:80:83:95:13:b3:05:a4:30:a3:72:42:
                    00:20:57:a3:9d:b0:fb:b7:f9:58:1e:b9:4b:17:ab:
                    ed:63:32:c1:d0:5a:9a:5d:ce:b8:2c:72:01:f4:f1:
                    a9:f5:d4:88:72:a1:1b:52:89:82:7b:04:6a:e0:5f:
                    23:2c:05:33:2e:cc:07:04:73:de:f9:26:a9:e4:b4:
                    30:c2:03:5c:e4:bb:a7:38:98:3c:fe:e1:cb:f1:7d:
                    f1:34:9f:b2:77:19:71:61:27:a2:81:06:bf:ec:5d:
                    d5:68:60:5a:c9:7d:eb:2f:1c:79:04:b4:ff:af:c8:
                    9d:e6:73:2a:bf:15:4f:3a:0b:4e:9b:ab:12:ef:a5:
                    04:46:b7:14:9f:bf:28:c2:f7:48:f2:ce:7e:02:aa:
                    8d:b6:d6:26:a5:22:3c:80:18:d1:43:b3:bc:45:e2:
                    e1:0e:13:eb:a8:8b:55:2d:1f:3d:63:52:99:ae:15:
                    3a:44:a3:7f:58:42:9c:f1:91:fe:b6:bc:5e:82:08:
                    42:73:3b:84:e2:af:7b:d1:2b:8d:0c:ce:d6:f5:dc:
                    01:9c:cd:a3:4e:00:ab:66:af:8a:59:d9:4f:5a:08:
                    c9:59:27:a0:e4:37:17:d6:e3:15:af:23:db:8c:c3:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:6B:7A:CC:F4:AC:8C:9A:69:33:01:0E:94:9B:18:6F:25:C0:F7:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/B46B7ACCF4AC8C9A6933010E949B186F25C0F72B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22
                IPv6:
                  2804:6588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269497

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:08:55:44:69:ba:be:d2:ed:99:34:01:99:5a:23:a5:e2:
         12:23:ac:9d:1c:42:0d:2e:0f:38:16:5d:3e:12:d5:55:ba:8a:
         66:55:f8:e9:a2:86:c8:8d:88:c5:27:84:9c:df:bd:b5:14:3b:
         2a:9f:2b:dd:b9:98:fc:92:a8:c5:49:28:2d:07:ec:da:14:ac:
         b1:35:3e:1c:d4:96:1f:f8:a8:9b:b9:12:26:88:83:41:77:d8:
         f6:45:04:77:fa:d7:4d:09:e1:25:a5:79:ee:1f:7d:fa:ff:ee:
         ad:29:75:e0:67:e4:f6:d7:98:c0:12:23:3f:8d:7e:d5:26:45:
         42:29:98:2f:64:79:6d:f9:43:0b:ce:36:f6:1e:93:6d:76:2a:
         10:4d:36:54:dc:72:28:43:32:4a:c0:0a:4a:58:64:6b:5a:ad:
         57:df:bd:e8:fe:4a:5e:30:ef:90:22:d1:48:ec:1e:d2:6e:06:
         a1:fc:d4:18:21:da:10:27:b9:15:c5:b4:f0:17:e4:a2:a9:93:
         8b:5e:f1:08:4c:18:f7:2d:d8:8f:12:f7:db:0a:4a:99:bc:f6:
         4f:0d:5b:95:02:02:b6:9b:8e:05:47:18:86:ba:8d:a0:6f:fa:
         29:15:5c:24:97:a3:8a:b9:3f:3d:32:84:c3:9e:29:3d:75:2e:
         36:87:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----