Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer
File:                     B4DFF47C5B3118AFC71F35AA50D26565D807E777.cer (raw, json)
Hash identifier:          PfYU7u+vIYuvQI6VprUL4s4lUNeKqCmfBsnpvXZkBkk=
Subject key identifier:   B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53E586B43A8806A5DA7D901858914FD6D3A1499C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Feb 2024 19:15:09 +0000
Certificate not after:    Sat 15 Feb 2025 19:20:09 +0000
Subordinate resources:    AS: 28213
                          IP: 168.181.4.0/22
                          IP: 189.113.112.0/20
                          IP: 2804:2e78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e5:86:b4:3a:88:06:a5:da:7d:90:18:58:91:4f:d6:d3:a1:49:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 17 19:15:09 2024 GMT
            Not After : Feb 15 19:20:09 2025 GMT
        Subject: CN=B4DFF47C5B3118AFC71F35AA50D26565D807E777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:1a:f2:27:df:eb:40:6b:55:8b:9e:13:8c:
                    f5:bd:27:03:bd:54:55:c2:8e:01:37:08:b8:f8:3c:
                    e0:ee:ad:3a:10:43:de:00:7e:29:ec:f8:b4:03:a1:
                    0b:1d:a7:19:fc:15:c8:6a:e1:f0:6f:82:a4:e6:ef:
                    c5:60:7f:6f:81:34:58:e3:aa:e5:90:bf:70:74:1a:
                    a7:c6:d1:69:ae:6e:1e:75:55:54:aa:8e:f2:85:b3:
                    ff:c0:7d:8f:50:0d:8f:eb:09:15:17:62:0f:12:39:
                    e3:09:86:d4:fb:8d:df:ca:09:70:d6:b3:1b:f0:fc:
                    7d:46:2f:ca:e0:23:9d:ff:57:5e:57:ac:70:1e:19:
                    cd:a9:ba:c2:f2:b4:bb:dd:e7:a4:a4:0f:60:85:12:
                    99:bf:cd:b3:45:f6:9a:06:10:21:f3:84:24:c1:4b:
                    1d:dd:26:aa:f3:fe:e4:43:3f:0d:e1:8c:11:fd:65:
                    9a:fb:41:04:5b:f1:32:c0:1d:bd:6a:33:b5:0b:b6:
                    bd:98:5a:a0:8d:42:3a:89:be:6f:c2:c3:fa:72:94:
                    5c:7d:c2:e3:81:ae:e5:4e:28:4e:db:7b:96:41:08:
                    73:39:c0:66:44:e6:7c:28:f3:92:c1:0c:55:8c:b1:
                    86:17:20:9b:46:2f:76:a2:19:d2:79:d9:fe:e0:7e:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:DF:F4:7C:5B:31:18:AF:C7:1F:35:AA:50:D2:65:65:D8:07:E7:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/0/B4DFF47C5B3118AFC71F35AA50D26565D807E777.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.4.0/22
                  189.113.112.0/20
                IPv6:
                  2804:2e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28213

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:c1:e6:c8:76:a6:59:d1:df:38:e8:b2:93:37:b5:a1:7a:
         a4:98:64:0c:67:6e:00:08:c8:16:20:b8:93:f7:7e:7d:34:94:
         1d:a8:37:b6:d9:65:95:b7:d0:58:28:08:96:18:e9:5c:18:04:
         c9:0e:c8:b5:32:29:91:33:5e:06:cf:e5:64:4d:8b:48:f6:aa:
         18:6b:d8:63:da:53:a5:15:ab:39:ac:c6:e0:0e:6d:5c:a8:2a:
         64:01:91:40:3a:a8:0b:f6:3d:9c:d4:a9:d2:7a:59:54:6c:f5:
         e2:8e:d3:7b:ac:05:ff:e0:0e:30:f9:d7:a5:e4:94:89:3e:25:
         4a:02:b8:70:da:cd:10:53:f7:69:f6:e0:df:5a:75:87:5a:a2:
         28:bf:aa:0d:a7:0e:79:9c:0c:c2:12:ae:56:6d:b6:a1:9e:23:
         54:66:3b:7b:c3:88:2d:5f:82:d1:7b:6f:01:fb:85:65:96:33:
         48:32:7b:f1:5a:b0:c7:79:7c:a0:34:90:93:6d:b7:43:b3:7a:
         3b:37:82:71:7e:d5:a2:f6:ae:19:c9:01:db:f7:68:94:72:50:
         87:8c:99:f0:22:43:21:b0:a8:19:ff:1b:e8:46:31:46:df:66:
         5b:77:84:df:00:49:d3:8c:ad:e7:1e:99:41:4d:39:6b:be:5a:
         48:58:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----