Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer
File:                     B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.cer (raw, json)
Hash identifier:          5+wvBCbf23907gOuxeZebjUl26ixS2cQwwFw8qv3Z9g=
Subject key identifier:   B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2772D8D25A68CBC48368930EA6D7D8F9267B1AC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 15:47:39 +0000
Certificate not after:    Fri 15 Nov 2024 15:52:39 +0000
Subordinate resources:    AS: 61910
                          IP: 201.87.232.0/21
                          IP: 2804:16b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:72:d8:d2:5a:68:cb:c4:83:68:93:0e:a6:d7:d8:f9:26:7b:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 15:47:39 2023 GMT
            Not After : Nov 15 15:52:39 2024 GMT
        Subject: CN=B4C51660AAD76832AAC961A5DA08B4657A1B3FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:95:7a:05:90:17:e9:f1:b6:9a:f9:15:78:
                    07:83:37:c0:f1:19:2a:f9:a0:b9:a1:d8:c1:15:b3:
                    17:0e:da:a8:de:7f:f3:18:89:34:fa:c0:01:fe:99:
                    d5:26:a1:85:d6:1d:43:17:2c:06:33:9a:2d:89:c2:
                    74:98:74:b0:04:2b:ae:d0:2b:4e:3a:1b:03:69:ad:
                    ea:46:1d:6f:4c:27:05:03:98:c5:f1:83:7b:da:60:
                    c1:40:c9:b0:db:61:33:c9:b5:86:94:12:c1:f9:7a:
                    5f:0d:b7:1a:46:08:f1:4e:73:00:97:a9:07:ca:7f:
                    9f:f3:ab:38:02:ce:23:01:20:3c:20:9d:53:1a:8d:
                    bc:66:49:fd:54:e6:b3:a6:59:8a:81:f7:de:03:ff:
                    3e:b7:bf:b4:28:d4:c4:85:2f:c5:12:8f:23:6f:3b:
                    a4:ff:53:cb:17:ae:1d:a4:b4:54:74:c7:e8:04:40:
                    06:8e:d3:41:a2:5e:0d:18:37:87:ad:a6:e0:a9:17:
                    20:6e:4c:0c:46:b3:99:83:83:27:e9:81:dd:5b:48:
                    90:9b:de:9d:dc:9c:cc:d4:68:dd:0a:9f:28:0b:c9:
                    3f:ae:2b:75:46:8b:61:59:2e:b1:ed:f4:cc:24:79:
                    2f:d2:9e:cc:ab:e0:32:ce:fe:9f:89:ec:85:50:b2:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:C5:16:60:AA:D7:68:32:AA:C9:61:A5:DA:08:B4:65:7A:1B:3F:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/1/B4C51660AAD76832AAC961A5DA08B4657A1B3FE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.232.0/21
                IPv6:
                  2804:16b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61910

    Signature Algorithm: sha256WithRSAEncryption
         47:c7:de:65:d2:80:b6:86:6d:8c:e5:62:da:ee:34:82:50:f5:
         44:0b:a7:45:f5:96:6f:18:b6:5a:f5:62:08:90:36:45:09:f2:
         40:72:77:fd:00:07:fb:8f:ce:51:e3:87:43:62:da:68:11:fd:
         0f:52:85:07:07:bc:b9:03:67:2e:17:4c:4d:b3:2d:ea:67:8b:
         56:6c:67:32:2b:b2:69:b0:a9:23:37:46:d1:c3:38:52:24:a5:
         da:85:57:ad:fb:04:17:c3:69:1f:fa:75:3e:cb:81:29:39:b2:
         92:64:87:74:a7:77:b9:e4:ee:ff:60:67:52:f6:82:56:22:dd:
         5a:44:e3:b9:64:52:97:a0:dd:77:aa:04:21:48:61:e5:45:65:
         c6:bd:02:39:66:3d:2a:44:3f:12:60:ab:f0:00:51:a8:92:e6:
         13:44:3e:62:48:33:96:0f:5e:66:e8:0f:ce:8b:7b:b2:4f:24:
         72:2c:8b:2f:60:fa:4e:e6:1c:d8:2d:fe:60:d4:7e:89:68:bb:
         d6:64:41:b0:67:86:15:ce:31:e5:d6:73:ab:c6:4a:9a:aa:99:
         d9:20:fc:de:a0:7a:c6:6c:62:af:b3:7f:f9:ab:1c:87:9e:a6:
         6c:06:f6:12:b6:b2:6c:73:88:14:7a:e6:82:0a:71:0c:5a:46:
         58:6a:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----