Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.cer
File:                     E1473CEA323A14AC92D6243F4D77A3EB18EB0429.cer (raw, json)
Hash identifier:          U0VO9MoNOUb9I4bqvloJ1zYHjks5k8sS4fubpl8MXcc=
Subject key identifier:   E1:47:3C:EA:32:3A:14:AC:92:D6:24:3F:4D:77:A3:EB:18:EB:04:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23E8BECF4F8DC4B07448022A1FE22CB939113F9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 17:30:31 +0000
Certificate not after:    Tue 28 May 2024 17:35:31 +0000
Subordinate resources:    AS: 267056
                          IP: 45.226.208.0/22
                          IP: 2804:4778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e8:be:cf:4f:8d:c4:b0:74:48:02:2a:1f:e2:2c:b9:39:11:3f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 17:30:31 2023 GMT
            Not After : May 28 17:35:31 2024 GMT
        Subject: CN=E1473CEA323A14AC92D6243F4D77A3EB18EB0429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:9f:56:da:e0:f1:af:90:52:99:fb:c8:24:
                    21:f8:69:c2:8c:42:d8:7d:e9:9f:6d:6f:fd:ca:01:
                    56:7a:b7:34:54:3c:36:a6:93:74:ad:3a:2a:7e:c5:
                    ea:48:24:1e:3f:de:ea:df:8a:0e:88:56:c6:ab:39:
                    76:83:9b:b0:c1:69:36:94:e4:fc:48:62:6d:ca:75:
                    ef:c9:02:0c:1b:fe:a0:2f:03:8d:c0:93:bb:1a:a8:
                    a9:71:66:0e:5b:6f:b9:d3:17:66:cb:ff:7b:a0:14:
                    ee:d3:a7:aa:06:d5:b5:39:5e:59:ee:25:d5:ff:4f:
                    97:f6:82:97:9c:62:17:97:34:d3:1d:c3:c8:4c:92:
                    0a:7e:c7:60:28:fe:2a:55:b1:10:66:4d:f8:6d:33:
                    92:f6:9d:6f:55:43:81:9e:04:ff:49:fc:ca:b7:34:
                    fb:2d:13:31:26:af:d4:72:49:55:06:97:ad:6c:9f:
                    49:35:90:33:91:aa:be:41:bb:dc:25:0a:c7:73:f6:
                    61:38:f5:9a:30:b4:b2:12:63:3c:5f:6a:ff:42:47:
                    19:32:04:32:7e:55:c2:9e:be:ab:4e:13:c3:8d:11:
                    1a:39:42:d6:cd:b7:7b:c2:55:0a:42:8d:ca:1b:ea:
                    cf:5b:3d:69:1d:37:04:84:cc:52:3d:10:7a:fd:54:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:47:3C:EA:32:3A:14:AC:92:D6:24:3F:4D:77:A3:EB:18:EB:04:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/E1473CEA323A14AC92D6243F4D77A3EB18EB0429.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22
                IPv6:
                  2804:4778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267056

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:ad:6d:70:3c:96:b7:21:20:e2:2f:d8:c7:2e:a0:f4:ee:
         bb:2f:0c:c5:d3:10:2d:fc:33:cb:14:40:7a:6e:a1:eb:40:52:
         b6:f7:95:8b:a6:37:c0:df:8a:7a:9f:73:4e:9e:56:6d:24:af:
         5d:e9:25:c1:b2:f4:12:25:a1:92:5a:6e:72:87:d0:e9:ed:d7:
         3c:12:22:a9:c9:5b:7b:4f:9c:07:54:e5:54:30:94:6a:90:16:
         07:9c:92:b5:a3:79:60:66:1e:ba:2e:d3:08:ba:05:c4:e4:5b:
         61:0d:d4:06:5d:e2:e9:33:a9:dd:a4:d0:da:e8:5e:bc:a4:bd:
         f9:a7:37:3b:ce:2f:3a:6e:f2:a0:fb:f0:31:eb:30:49:ee:ab:
         25:49:3d:ff:30:9c:52:d7:7d:43:cd:dd:94:e6:11:7f:17:c1:
         d3:8e:f3:73:9e:0a:38:ff:0f:75:8c:d1:b5:1c:88:26:30:a6:
         62:7b:78:d1:c7:59:71:f5:52:29:e3:b4:b8:84:70:25:57:b4:
         de:2a:5f:75:c7:46:6d:27:46:96:81:63:76:52:ed:41:3a:7e:
         a2:06:43:93:ad:c0:78:d6:ec:ae:76:61:95:48:6c:f3:89:b2:
         c9:a1:57:12:d3:34:84:d0:6d:ef:fa:76:5a:d9:17:bd:47:cb:
         b0:6f:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----