Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
File:                     C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer (raw, json)
Hash identifier:          S1TnNVOSJGBKc7qt0qMgc0YBg+7DyyyvUgOJL9l+AB8=
Subject key identifier:   C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EE04B0EF431645CA8118AC0E69C41A102AB5B76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Mar 2024 12:15:56 +0000
Certificate not after:    Sat 08 Mar 2025 12:20:56 +0000
Subordinate resources:    AS: 267455
                          IP: 164.163.220.0/22
                          IP: 2804:41c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e0:4b:0e:f4:31:64:5c:a8:11:8a:c0:e6:9c:41:a1:02:ab:5b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 12:15:56 2024 GMT
            Not After : Mar  8 12:20:56 2025 GMT
        Subject: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:e1:3e:60:10:fb:b8:e5:3b:dc:cc:ea:fa:
                    0a:a7:19:f2:06:68:e1:3d:35:2b:88:75:6c:ed:6e:
                    02:8d:96:7d:5a:4c:c4:46:e6:7e:41:63:50:33:ce:
                    f0:f7:82:6c:de:28:ec:31:ef:81:bd:62:38:9c:ef:
                    55:5e:c6:55:04:cd:b3:fa:f4:31:c7:b6:7f:59:f4:
                    b5:e7:59:05:fb:e4:01:c8:21:0c:94:c5:a9:02:b8:
                    45:ef:d1:c0:e9:cc:8b:fd:f0:e4:d0:d0:cb:86:d5:
                    34:97:0f:d8:27:24:ee:3c:0f:4d:5c:bf:50:45:51:
                    f2:59:a2:f7:7d:7b:3c:ca:e3:93:e5:e5:38:ce:e4:
                    bd:ad:1b:4e:a2:0a:06:ad:35:87:77:da:97:7c:ee:
                    21:b9:c6:f7:9a:94:f9:c1:d0:8a:fa:40:72:78:b7:
                    bf:b8:05:51:29:57:2a:29:81:a7:f6:86:11:21:de:
                    d7:b0:61:8a:60:a8:79:c3:01:fe:2d:14:6b:f5:b3:
                    11:60:b2:7c:0b:15:8f:bc:8f:d6:35:5c:07:14:a4:
                    1e:a6:ce:51:e4:38:c7:65:47:b9:a9:6b:4a:69:f4:
                    25:d9:9c:b9:19:ca:ec:df:63:65:a9:6a:ef:cc:e6:
                    39:a2:6f:6b:be:46:ab:95:b1:d3:09:ea:d5:49:ee:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/22
                IPv6:
                  2804:41c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267455

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:b4:df:c6:61:e1:bb:87:e8:0e:56:d2:e2:83:38:3d:da:
         d4:6e:86:29:0d:73:24:62:4a:12:1c:d7:21:77:99:55:66:6b:
         9e:50:06:7b:3b:62:66:29:d4:b8:7b:84:25:bf:44:00:06:f9:
         67:5d:24:c5:1d:2f:cd:ca:c2:36:e3:e2:b4:e0:00:d3:bf:95:
         6c:94:b3:fa:2a:b2:14:eb:fc:06:52:cf:a2:d8:e2:e6:b1:23:
         dd:1f:87:5c:fe:d1:1b:e8:e5:d4:42:26:05:77:68:80:d4:7d:
         5b:8e:f0:72:7d:12:46:01:50:ed:dd:0a:d9:47:d5:8a:54:ba:
         6d:8e:d8:6b:e3:18:32:19:4d:a6:9c:dd:37:3b:c4:7f:91:36:
         a0:a8:84:6a:d2:b5:81:8b:5b:21:9b:ef:b1:43:97:16:95:38:
         87:e3:50:09:c5:ca:f1:88:2b:b5:b0:00:c5:96:6e:40:c0:a4:
         e4:fc:f6:91:04:76:bf:dc:4d:2b:cc:5e:c9:9b:e3:65:b2:6d:
         f9:58:34:92:74:8c:28:75:80:ea:a7:38:3a:3e:5d:8d:8a:94:
         f5:8a:d4:56:dc:e9:5b:15:6b:3c:f1:d1:08:99:cd:ef:db:8d:
         f7:69:71:cf:c9:8e:a8:da:0f:6c:78:8d:2f:3c:ac:4f:93:de:
         e1:2f:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----