Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4166A65EE236AE1374D5247D277915D8AFD9220.cer
File:                     C4166A65EE236AE1374D5247D277915D8AFD9220.cer (raw, json)
Hash identifier:          ICEUY5p2x/DKqPJHA9rnUy3Y4fIgWlwIK9y3YCufn7w=
Subject key identifier:   C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D9E86D8A0246754B5A0A005D942ED2CE0DAC478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/C4166A65EE236AE1374D5247D277915D8AFD9220.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 14:00:45 +0000
Certificate not after:    Tue 16 Apr 2024 14:05:45 +0000
Subordinate resources:    AS: 265028
                          IP: 170.84.248.0/22
                          IP: 170.245.84.0/22
                          IP: 2804:31a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9e:86:d8:a0:24:67:54:b5:a0:a0:05:d9:42:ed:2c:e0:da:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 14:00:45 2023 GMT
            Not After : Apr 16 14:05:45 2024 GMT
        Subject: CN=C4166A65EE236AE1374D5247D277915D8AFD9220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:b1:b5:8a:4c:53:76:35:d0:bb:b8:74:9e:
                    7c:7c:bd:46:a6:32:fd:0b:92:26:7c:83:56:d5:3a:
                    26:30:48:6e:99:e8:6b:e2:23:c1:ed:fe:8c:f2:f8:
                    27:9e:0c:c3:9b:db:08:e9:6f:56:33:59:41:5d:26:
                    40:17:4a:1f:65:82:78:ba:7a:48:4c:99:b1:25:81:
                    14:4f:f0:3d:81:46:c0:78:20:ae:5f:48:09:fe:77:
                    05:88:30:af:08:a4:e6:7e:a9:f0:f9:61:72:16:be:
                    f1:52:f5:3a:d3:0a:f4:66:17:65:de:39:3b:ac:c0:
                    84:16:1b:39:6f:cc:9a:6b:dc:b8:e1:3f:18:c6:b0:
                    2c:44:fc:9c:b9:02:8f:2c:d0:a7:3c:38:3d:08:b8:
                    92:a0:af:26:b9:b8:84:1f:9e:d7:62:56:1a:e0:3c:
                    ba:d5:eb:29:a6:20:d0:ae:b2:b6:d9:a1:3a:1a:1a:
                    a5:a0:92:48:4d:66:ed:b0:24:f7:01:7a:a6:d4:84:
                    8d:a2:11:ac:a4:2a:c6:2a:7f:20:b0:42:cd:70:a0:
                    66:ed:52:4c:01:66:c0:4b:aa:02:49:52:03:f4:be:
                    6e:87:75:2d:f5:6e:20:24:ea:8b:c2:88:56:bd:f7:
                    68:a2:88:30:49:ed:f7:60:54:d9:9a:c5:84:9b:3d:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:16:6A:65:EE:23:6A:E1:37:4D:52:47:D2:77:91:5D:8A:FD:92:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/C4166A65EE236AE1374D5247D277915D8AFD9220.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.248.0/22
                  170.245.84.0/22
                IPv6:
                  2804:31a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265028

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:5e:59:77:04:da:dc:3a:89:61:3b:11:10:e0:fb:ea:c5:
         11:43:87:46:0d:65:7c:99:ce:73:92:1d:4e:2c:e2:0c:70:84:
         e2:be:ee:b7:43:df:49:d0:e3:11:be:d2:c9:b3:48:bb:bb:1f:
         7e:47:4d:ff:a9:38:10:e1:d5:c9:70:eb:a2:c8:2c:b1:b1:99:
         d7:e9:8a:ee:14:84:40:03:a0:3d:15:98:fc:99:96:9d:0c:49:
         5c:85:3d:72:bb:69:c4:ec:ef:10:b9:78:28:3f:75:9b:a5:3c:
         e8:2f:f1:a0:dc:3e:d1:a3:d9:8e:d7:83:fb:ab:38:b7:28:de:
         ad:1a:3d:de:54:28:6f:9a:4a:dd:0d:c0:f4:1d:06:4c:e6:c2:
         8b:33:db:7c:68:bc:00:87:c2:ed:91:c2:85:f3:05:5e:ac:c3:
         75:76:c0:f9:6e:e7:1f:2d:90:96:7b:50:05:52:68:a5:03:e7:
         09:4f:7c:c8:66:fe:d0:67:d7:78:e3:c4:7f:22:f0:d2:76:db:
         9f:f4:35:f1:8a:18:f8:7d:5e:09:a1:da:fc:da:ba:b9:8a:95:
         c3:63:8e:7a:5f:c6:d8:45:c9:ca:44:61:8f:92:7a:17:e5:a5:
         4c:fa:81:27:d1:4e:7a:f9:cd:64:52:d5:3e:69:7b:11:ae:61:
         be:87:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----