Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.cer
File:                     C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.cer (raw, json)
Hash identifier:          aQlKoqIGJu+z7+prAAH4KejjQMuQGiKeMHXhbAZfSn8=
Subject key identifier:   C2:B4:B3:46:AF:46:EE:EF:28:59:F7:38:36:F3:7B:82:FF:7A:26:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72CD203B643CAC4F79AB200823EB5B97831611E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 19:19:31 +0000
Certificate not after:    Wed 22 May 2024 19:24:31 +0000
Subordinate resources:    AS: 268111
                          IP: 45.169.152.0/22
                          IP: 2804:582c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cd:20:3b:64:3c:ac:4f:79:ab:20:08:23:eb:5b:97:83:16:11:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 19:19:31 2023 GMT
            Not After : May 22 19:24:31 2024 GMT
        Subject: CN=C2B4B346AF46EEEF2859F73836F37B82FF7A26B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:d3:d0:76:41:f1:c2:43:c1:8d:68:d5:b4:
                    9f:20:d2:7f:47:d3:cb:de:03:24:fc:af:d5:89:17:
                    e0:19:a9:9a:57:d4:cb:b0:cb:fd:75:ab:c0:93:e7:
                    e6:01:f2:ea:15:9a:a8:1f:34:79:06:0d:7b:41:7c:
                    f5:73:c2:73:0b:9f:81:1e:8a:de:d4:30:fc:e7:b7:
                    b9:d1:1e:ba:aa:23:74:68:a3:e8:e1:9e:10:4f:0e:
                    fe:c3:72:c9:41:64:d2:24:ed:eb:be:78:b4:7a:f0:
                    c9:fe:6b:67:44:9d:c3:f1:ee:c5:97:ff:2b:3e:9e:
                    7d:39:af:fb:15:fe:b6:2f:f5:61:46:29:94:43:27:
                    28:fa:7c:d0:21:a2:0b:96:c7:ca:c6:75:a0:b7:de:
                    7b:75:39:2e:2f:34:ce:e2:67:c5:d8:98:63:a9:31:
                    f5:b4:58:54:b5:0b:11:d7:fe:b8:b2:d2:12:ae:a2:
                    bc:8f:e4:73:07:1b:5a:b2:f8:42:8d:e7:bb:38:27:
                    29:2c:c5:e3:85:22:0c:4c:e9:6c:44:50:a6:fe:be:
                    c4:95:38:e6:b3:ef:d2:3d:4d:80:01:25:26:6e:27:
                    b9:b4:29:9b:23:e9:16:82:86:cc:3f:6b:2c:94:9b:
                    e5:a9:02:2b:75:4f:3e:f4:b8:f9:d7:82:7e:6f:f6:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:B4:B3:46:AF:46:EE:EF:28:59:F7:38:36:F3:7B:82:FF:7A:26:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.152.0/22
                IPv6:
                  2804:582c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268111

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:4b:de:3e:63:a7:f4:66:76:85:b0:bd:f2:8e:4a:73:be:
         f3:25:a4:8c:f4:79:21:16:fb:8b:d0:0f:f6:f3:0a:7b:f6:50:
         08:a3:cb:49:53:fe:64:f4:00:a7:90:b9:6c:2e:f6:5f:d5:4e:
         88:bc:b4:00:5b:63:a7:44:3f:34:0f:cb:47:cd:fa:4c:47:5a:
         3a:db:f4:2b:a5:ca:46:9f:87:7f:1e:54:aa:ed:08:5e:27:00:
         f7:d1:00:08:57:91:b9:2b:ac:f8:40:19:fc:f0:fb:46:42:31:
         d7:99:49:56:48:a6:e6:bd:b8:26:40:1e:9e:55:43:49:3e:0a:
         50:bd:03:78:18:bd:8c:1f:30:31:fa:d8:48:bb:4d:f8:e6:62:
         3e:07:46:83:ef:8c:62:31:f7:65:ab:cc:55:d3:38:81:3c:2a:
         03:06:76:11:e1:6b:2a:e1:c6:47:56:1c:38:8d:1f:bb:bd:f8:
         49:a3:72:43:c5:38:2a:3e:9c:0e:e8:be:f3:bb:17:2b:8b:06:
         fc:27:f4:04:b6:45:f6:2d:36:9e:1b:be:47:33:7c:6c:7c:f8:
         92:2f:f1:97:4b:53:f9:25:ea:a5:0f:47:b7:2c:a7:99:42:df:
         d0:f8:f2:29:9c:3a:28:2f:da:55:c0:32:6d:70:b2:c8:5e:ff:
         ee:ef:8c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----