Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF4643F228289E568079F3C6358BADAED2E6A42B.cer
File:                     CF4643F228289E568079F3C6358BADAED2E6A42B.cer (raw, json)
Hash identifier:          13VEa/tfeWRCbt/My6ecgUoA4OVAYgPhFyNJx49eylg=
Subject key identifier:   CF:46:43:F2:28:28:9E:56:80:79:F3:C6:35:8B:AD:AE:D2:E6:A4:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53B38957C9081D3167CB5B3D56D8BF08C0BB2B86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 13:20:27 +0000
Certificate not after:    Mon 13 Jan 2025 13:25:27 +0000
Subordinate resources:    AS: 266360
                          IP: 170.239.252.0/22
                          IP: 2804:36a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b3:89:57:c9:08:1d:31:67:cb:5b:3d:56:d8:bf:08:c0:bb:2b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 13:20:27 2024 GMT
            Not After : Jan 13 13:25:27 2025 GMT
        Subject: CN=CF4643F228289E568079F3C6358BADAED2E6A42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:29:c9:1a:c3:74:13:a0:68:32:df:45:9d:
                    7e:33:b2:0a:b3:da:e7:36:1c:0f:63:f8:7c:ea:39:
                    ca:32:20:b9:d4:b7:01:b8:7c:e4:c6:16:16:6b:08:
                    3f:b4:26:e1:a6:2f:59:6a:c9:f6:26:db:be:5d:d5:
                    39:ec:74:be:85:3f:f4:0c:fb:64:d3:8b:5d:ba:7b:
                    b7:e7:bf:e7:c9:f3:95:45:5e:73:ae:bb:52:f4:3c:
                    7d:eb:ac:eb:56:4e:bc:da:ee:f6:ee:59:95:b2:38:
                    34:8a:ad:5f:74:19:69:d4:ef:71:82:ea:66:c8:ca:
                    ef:d2:bf:c7:db:00:98:93:cc:09:13:37:dd:5c:9b:
                    6e:28:5f:de:9f:f5:15:4e:8d:20:59:df:d6:65:4e:
                    89:d9:18:0f:f3:b7:1a:ab:97:ba:e7:29:dc:fc:60:
                    59:ba:df:21:c0:70:e2:f5:1e:c0:6a:70:7b:6c:9b:
                    56:14:47:c3:71:16:06:ee:b0:4a:30:15:e0:94:bc:
                    9e:c9:ca:50:7e:38:e5:71:8e:02:77:29:9b:4b:71:
                    6a:15:48:2f:b5:cc:86:3c:a0:53:61:d4:6b:1a:57:
                    56:8b:b6:f0:45:cb:1f:b6:bb:b9:63:e0:78:55:4b:
                    0f:ce:9d:f6:6e:14:d5:dd:a7:df:98:6a:88:b8:b7:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:46:43:F2:28:28:9E:56:80:79:F3:C6:35:8B:AD:AE:D2:E6:A4:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/CF4643F228289E568079F3C6358BADAED2E6A42B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.252.0/22
                IPv6:
                  2804:36a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266360

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:79:67:59:da:77:f3:9a:4e:9f:4d:d1:2b:ce:91:58:73:
         a0:11:16:1c:f1:51:f9:8c:7a:19:5d:df:75:e5:5e:85:b3:a3:
         07:81:b7:fd:f5:64:a1:09:34:22:cc:aa:d5:c7:01:13:cb:23:
         b3:0b:05:8e:ec:09:da:9b:8d:1a:19:17:ba:43:bf:24:2f:83:
         76:60:be:e3:8d:7e:25:75:e5:96:dc:d5:69:85:f7:ef:33:23:
         0b:f0:68:13:8d:9a:d6:c8:1d:ce:01:a4:b0:96:30:89:88:bc:
         8d:72:d9:26:31:fb:40:94:21:30:48:ef:4e:00:14:5c:b9:79:
         c9:00:0a:a1:3f:a8:00:db:58:11:b4:49:3e:29:c0:b9:c7:3b:
         1f:a2:70:4d:9b:83:5f:24:ce:f2:f4:f5:3f:8b:54:97:54:44:
         a3:eb:11:59:4c:ef:21:5d:1b:ed:be:f5:b2:99:00:bc:5d:ad:
         1a:4d:f7:0c:d7:06:ed:14:28:6b:00:f2:8f:34:02:96:2b:7f:
         66:60:79:34:a8:44:46:fa:da:f4:f7:6a:15:db:91:86:a8:13:
         d8:26:5c:71:be:4a:a5:91:de:c9:84:27:e1:f9:31:b1:9b:e1:
         82:ef:8a:ac:0c:12:42:9b:53:31:c2:9d:f9:4a:25:6b:0a:35:
         7b:1c:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----