Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
File:                     FB455FBF472DF7F1EB64F99677568E7414A120AE.cer (raw, json)
Hash identifier:          Ckfedze32NoIVHn0tt5K8s//ALiUhPbvp8Qz5cetNCk=
Subject key identifier:   FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       47101B46095B884D41748D14B7D99173BA68F611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 22:57:54 +0000
Certificate not after:    Thu 10 Apr 2025 23:02:54 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:10:1b:46:09:5b:88:4d:41:74:8d:14:b7:d9:91:73:ba:68:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 22:57:54 2024 GMT
            Not After : Apr 10 23:02:54 2025 GMT
        Subject: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:5c:c0:bb:05:d4:27:4f:ca:36:8b:d5:ed:
                    15:dc:55:cc:05:94:64:56:13:a8:3a:a1:30:6e:3b:
                    0d:4e:9b:c7:d9:7e:10:d4:d3:7b:7a:92:a5:f8:ea:
                    75:0b:53:91:0a:ac:b1:05:3d:b4:1a:da:79:fc:85:
                    20:9e:fc:0c:d4:66:ed:7d:a4:c4:7f:97:1e:72:fd:
                    7e:e5:1d:fa:12:f9:82:1c:ec:c1:5e:1e:5e:b3:72:
                    8f:cd:85:5f:43:26:95:e1:75:7c:6e:2e:d2:9d:5d:
                    6a:03:81:4f:c4:3d:2e:f4:1e:44:ab:fc:e6:cc:02:
                    b2:79:b2:53:37:e5:26:b3:ca:4d:f0:da:dc:43:42:
                    d9:73:c5:73:42:1f:b4:7b:35:8d:6f:35:fe:9f:c5:
                    eb:c3:d6:60:e2:08:68:1e:2f:57:06:36:cd:74:7d:
                    33:3c:af:94:51:76:e3:2f:d7:12:dd:53:d9:d0:7e:
                    03:1c:b1:64:f2:d3:a4:d4:38:4e:e2:fc:4d:0d:54:
                    9b:f2:52:52:9b:9e:3e:93:45:89:a9:0f:13:27:c7:
                    c7:8b:4a:c5:17:16:54:f8:e6:0c:d6:72:95:f1:d8:
                    99:98:86:8d:b7:35:db:44:aa:e6:09:d2:ec:27:42:
                    56:12:0b:25:8b:79:e5:0c:6c:79:29:c3:53:e6:3a:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:d0:69:f3:f0:25:d5:bc:66:1c:8b:4d:df:be:ba:cd:8a:
         f2:9b:08:68:a9:1b:7f:23:25:26:7b:61:de:5b:e8:f0:0f:b7:
         ba:da:71:aa:a3:b6:9a:50:b3:d8:e7:4b:6c:f3:b0:13:68:59:
         e4:e0:42:d3:a0:fb:f4:2f:e3:6d:33:2d:2a:58:33:46:5b:ed:
         04:da:6d:4c:2e:2b:d2:82:89:5c:6a:1a:02:b6:90:5f:db:2c:
         ce:84:b6:90:13:0e:63:e4:ad:e0:0b:5b:6d:ca:c7:41:b0:84:
         ba:03:41:40:73:16:e5:fc:7b:14:e7:87:b5:67:79:3d:f1:f4:
         30:5e:88:20:56:92:f8:b9:a1:0d:89:73:dc:9b:bf:62:7d:6d:
         ad:96:9a:76:f0:1a:2f:d9:f9:c3:57:ab:29:e6:47:b4:fc:90:
         62:bc:c9:57:bc:f1:b1:aa:60:51:21:46:40:16:25:e9:cb:64:
         62:1a:89:74:99:34:39:e2:e1:58:3d:fa:bb:a8:05:2f:30:91:
         5c:4c:68:e6:f2:92:52:8f:17:43:59:ed:b5:f9:56:f4:57:04:
         8a:3b:9a:d5:c3:1f:eb:c4:ff:a9:dc:d6:0c:6b:8f:c5:bd:02:
         bc:8d:10:1e:d8:22:34:52:6e:c3:11:c7:41:34:cc:da:43:0b:
         e5:3b:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----