Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4930BF18127A7E3EFCC6BBED92292727CA4789E.cer
File:                     F4930BF18127A7E3EFCC6BBED92292727CA4789E.cer (raw, json)
Hash identifier:          76a+CZjxST3vZmwET5PZo99ODoyMz7Sz+D1pUUuSiE8=
Subject key identifier:   F4:93:0B:F1:81:27:A7:E3:EF:CC:6B:BE:D9:22:92:72:7C:A4:78:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78CAEBC798D5033FFC754730B6081C1BB9C3C9EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/0/F4930BF18127A7E3EFCC6BBED92292727CA4789E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 17:04:33 +0000
Certificate not after:    Tue 14 Jan 2025 17:09:33 +0000
Subordinate resources:    AS: 264913
                          IP: 168.228.88.0/22
                          IP: 2804:2fd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ca:eb:c7:98:d5:03:3f:fc:75:47:30:b6:08:1c:1b:b9:c3:c9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 17:04:33 2024 GMT
            Not After : Jan 14 17:09:33 2025 GMT
        Subject: CN=F4930BF18127A7E3EFCC6BBED92292727CA4789E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4a:7d:fc:62:c8:ba:be:77:ff:71:7c:35:9e:
                    a4:be:2e:73:a9:9b:ee:3a:15:3c:15:71:9c:2a:77:
                    47:87:cf:ca:2d:28:ce:5e:18:b2:c8:15:f5:bc:1c:
                    8d:96:6c:0b:30:66:e4:49:db:e4:86:cd:a9:8d:39:
                    b5:dd:a7:e8:3f:75:b1:e9:97:0e:52:58:ff:31:ad:
                    43:b7:a0:90:9d:09:7e:84:49:16:b7:a9:80:0b:ae:
                    d5:01:bd:14:3c:68:f8:f0:2f:a9:85:b8:74:35:47:
                    e5:0a:32:23:c5:d0:1b:9c:41:fe:ff:b8:dd:8b:b0:
                    72:e9:a4:d2:81:33:37:05:c6:15:7a:a9:47:6a:ae:
                    38:f2:0a:b8:61:1c:19:ca:2e:d4:bd:ec:c8:40:f6:
                    a0:75:14:e7:7a:22:a2:7e:e4:ab:2e:76:46:ad:a6:
                    17:12:e1:97:ed:65:1f:6a:30:49:c9:23:99:83:b2:
                    9f:d9:79:0e:20:79:57:5c:04:9e:94:86:8d:fc:c6:
                    ca:33:fd:83:cf:b5:78:0f:05:75:c5:fb:f2:86:0b:
                    7d:6d:d2:96:f2:82:c7:11:b1:15:0f:35:4b:c8:a1:
                    4b:44:a6:6c:c2:d8:52:34:77:23:dd:40:10:e9:d2:
                    78:5b:53:b1:ce:02:fd:a2:0f:9f:7f:46:67:47:71:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:93:0B:F1:81:27:A7:E3:EF:CC:6B:BE:D9:22:92:72:7C:A4:78:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J5e8a8jFdmR8yv9qo6asT7BJbEek4jwo3wbbTEACthmW/0/F4930BF18127A7E3EFCC6BBED92292727CA4789E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.88.0/22
                IPv6:
                  2804:2fd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264913

    Signature Algorithm: sha256WithRSAEncryption
         77:e0:18:3e:5f:8e:1c:21:a4:17:5c:e9:5a:0b:43:05:3f:e1:
         26:ee:7d:a4:09:7a:e3:2c:ba:71:16:ad:5e:f1:9b:12:7d:cb:
         12:30:d5:02:93:d9:5f:95:47:dd:9a:80:9d:42:9c:2e:77:27:
         c3:48:c4:19:2d:3c:bb:ba:4a:65:92:91:8e:dd:5f:81:a9:51:
         63:61:5b:4d:69:ec:b7:e7:18:a3:ce:4d:12:8c:56:76:dd:5e:
         fc:72:f9:bd:96:6c:45:6e:9b:db:09:50:35:7d:c4:8b:21:a7:
         92:72:22:d8:93:eb:bb:32:cc:4a:93:4b:28:3e:ea:13:a2:97:
         3c:f5:7f:f9:f4:16:bf:f2:a6:c7:74:66:ae:e4:b9:e9:40:af:
         6d:d3:5e:32:d0:1c:bd:06:af:0d:f1:c5:2d:5f:4e:f4:01:04:
         09:4f:29:8e:eb:dc:e4:76:6d:3d:aa:7b:2b:1c:b9:7f:2f:ea:
         a0:c7:e9:ea:75:46:6b:79:de:f2:2d:ed:fe:ff:b0:1d:d3:f4:
         c2:a4:74:69:04:73:7d:7b:d8:4c:56:4b:a6:ec:c8:cd:c0:29:
         21:17:fb:ca:4b:91:cd:96:09:fc:fb:df:29:4c:22:14:f7:5e:
         30:5a:b7:fb:b0:ce:4b:c0:a2:2d:4e:ed:18:b1:b2:b8:cd:20:
         e9:12:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----