Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer
File:                     C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.cer (raw, json)
Hash identifier:          m8Pqi5ZBOQCNsWTsQfCj/1wnaCE/J+kvk8+2Ry96LCI=
Subject key identifier:   C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       185A575AEBD4A38AC6448DFE11E40581CDA72972
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 16:56:21 +0000
Certificate not after:    Sun 08 Sep 2024 17:01:21 +0000
Subordinate resources:    AS: 271179
                          IP: 179.51.148.0/22
                          IP: 2804:7774::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5a:57:5a:eb:d4:a3:8a:c6:44:8d:fe:11:e4:05:81:cd:a7:29:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 10 16:56:21 2023 GMT
            Not After : Sep  8 17:01:21 2024 GMT
        Subject: CN=C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ca:3e:91:2e:6c:13:39:ca:44:51:b0:bd:59:
                    ec:b6:77:2d:19:4f:7d:ee:14:0b:2f:f0:fe:78:87:
                    35:ec:f2:f7:d8:4d:a3:81:cf:0d:9f:c7:dc:3d:a7:
                    6d:94:2a:e5:c5:e2:4d:42:d2:d8:31:c6:39:8e:14:
                    f8:83:46:70:d3:67:d0:58:78:bd:2e:42:11:b1:3f:
                    a5:be:29:38:a2:cf:b9:02:fc:26:8a:b1:80:6b:c0:
                    3d:b3:52:33:6a:13:36:c2:14:f6:35:d4:79:e9:a7:
                    c7:d6:f5:6a:c9:a9:d9:0e:b7:1f:7c:41:b3:1f:f1:
                    5f:a6:0e:5b:4d:6d:a3:68:87:a5:12:a7:28:a8:83:
                    1d:c0:e6:75:2d:4f:1d:85:66:69:43:6f:ca:ec:fd:
                    e3:bf:d1:25:b6:96:75:12:5c:1c:e8:0b:49:99:12:
                    63:80:81:01:83:93:64:49:ac:d3:53:34:84:ce:b5:
                    74:1d:49:55:80:fa:db:e2:24:b7:81:37:45:c7:f6:
                    09:05:42:72:ce:ad:f8:a7:0e:a2:af:c8:c2:54:0b:
                    d8:5f:48:a7:09:cf:22:11:19:1f:71:d4:ec:da:27:
                    4b:4c:2d:e0:c8:42:c3:55:2d:c1:08:61:18:73:e2:
                    1b:93:a4:96:f4:5a:19:57:44:54:5d:d7:3b:4b:ae:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:AE:25:DE:35:06:E1:B4:C4:3C:B9:DE:0E:96:15:7D:1C:CA:CA:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/0/C4AE25DE3506E1B4C43CB9DE0E96157D1CCACA5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/22
                IPv6:
                  2804:7774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271179

    Signature Algorithm: sha256WithRSAEncryption
         39:96:39:e7:b5:81:e9:4d:f7:56:0c:81:ee:38:df:7b:bd:1f:
         ee:20:d4:07:de:51:3f:71:47:02:fe:ae:08:69:ea:7b:cc:22:
         7a:cf:f6:a3:0d:be:ad:9d:29:8b:c1:8b:87:7e:21:77:59:f7:
         e4:21:71:dc:70:a0:1e:84:44:48:08:a7:91:f2:c1:3a:f5:f6:
         1c:0a:f7:75:33:4e:7d:52:9d:21:16:32:f5:8e:0b:6a:4d:e3:
         cd:aa:5e:1e:30:f1:e7:cd:c1:85:d2:b9:79:a7:a9:57:7e:48:
         91:99:07:02:76:1d:92:f9:5b:09:dd:68:05:27:42:cd:50:cf:
         9e:f9:c3:d5:0e:53:dc:bc:ef:2a:07:17:fc:29:d9:a0:3d:ae:
         a8:f3:85:91:aa:72:23:2a:df:19:67:b0:7f:8f:87:75:8e:93:
         b8:cf:2a:38:90:c2:49:9f:0f:52:47:2e:33:10:e0:23:1b:4a:
         a3:46:d5:06:cd:17:cb:78:38:26:e5:b5:0b:25:f7:80:16:8a:
         ff:6f:e2:ba:1e:18:20:f6:ab:6d:e5:03:e0:92:ad:3f:99:a9:
         f4:8e:03:6c:ea:83:91:f4:dc:68:56:09:d9:5b:cf:2d:cf:c7:
         2a:67:8b:8e:2f:d3:96:fc:ee:61:5a:05:b8:d9:8a:30:cd:9d:
         40:4d:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----