Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer
File:                     00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.cer (raw, json)
Hash identifier:          hmqBVTuNwSWZ6/mulOP2J94YlmdnXK6OTMNwni7aoG8=
Subject key identifier:   00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C6960962A3926D4BF1E168D874D20F4F7BA70AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 23:30:12 +0000
Certificate not after:    Thu 13 Feb 2025 23:35:12 +0000
Subordinate resources:    AS: 265929
                          IP: 131.196.136.0/22
                          IP: 2804:4008::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:60:96:2a:39:26:d4:bf:1e:16:8d:87:4d:20:f4:f7:ba:70:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 23:30:12 2024 GMT
            Not After : Feb 13 23:35:12 2025 GMT
        Subject: CN=00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:3b:51:65:e2:8e:10:bb:f6:14:04:17:f1:
                    b8:02:5f:87:e6:f3:4e:b9:11:0a:32:4d:ae:35:db:
                    91:48:e5:f4:e2:2a:88:83:5f:17:b5:28:f6:f8:6f:
                    e1:dc:35:0d:e4:23:3a:1f:d9:41:e1:e4:d3:71:23:
                    78:08:0c:14:83:1f:e3:8f:c2:e2:5b:59:9e:db:1c:
                    24:5f:1e:a9:bc:45:16:1a:8c:d2:56:db:05:4c:aa:
                    64:c5:b4:ae:ef:97:24:f5:33:67:a0:13:1a:45:e8:
                    e4:85:2d:5c:ff:67:84:db:02:0f:46:42:04:b0:fe:
                    8c:88:f8:74:79:9c:5e:11:2e:4e:dd:cd:fb:84:0a:
                    8d:24:7e:ad:1a:51:05:f1:8e:4e:a9:43:52:6e:0a:
                    65:71:98:e3:81:15:ff:a7:f6:e6:c2:b8:e0:63:5d:
                    6e:0e:0f:2d:cb:fd:c2:74:ce:9c:4c:20:31:51:e2:
                    11:89:d3:d3:60:00:74:8e:58:16:a1:22:42:29:92:
                    8f:f8:80:66:55:5d:aa:ed:1a:b5:a9:14:7d:1c:26:
                    f1:4f:94:23:df:81:76:00:73:17:78:7f:62:02:b1:
                    2c:80:aa:a7:6a:70:55:c6:aa:2b:16:c7:af:8f:37:
                    c9:be:6c:3a:eb:e8:4c:21:27:f0:a5:fb:bc:c5:8a:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:C8:B9:27:A4:A1:4A:57:DD:57:E8:2A:4B:B3:8F:DF:88:BF:AF:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/0/00C8B927A4A14A57DD57E82A4BB38FDF88BFAFA6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.136.0/22
                IPv6:
                  2804:4008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265929

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:17:94:a7:26:74:3f:09:60:56:06:eb:f4:d3:72:e0:99:
         18:49:7a:ce:3d:c3:64:c4:5c:29:d7:31:df:e8:52:ec:69:5e:
         e2:66:32:97:35:04:66:b8:08:e7:88:0b:30:58:57:91:fc:44:
         f8:70:68:cb:b7:e2:a6:c4:f6:cb:58:64:e7:47:2e:bb:0c:50:
         0c:f1:d8:7d:36:4e:23:17:36:a0:df:fe:94:6d:c7:f6:18:78:
         64:fb:45:51:f1:3a:33:4b:37:95:5b:32:a3:ee:a3:33:46:58:
         25:bd:63:ef:50:30:68:4e:7d:63:e5:05:dc:e5:de:31:9a:73:
         78:56:4e:f9:a1:5d:4e:2b:ed:54:b8:fa:b8:74:f2:59:90:09:
         f8:eb:55:d2:5d:43:3f:60:e8:30:d8:15:ce:d5:ae:c3:76:83:
         d9:d4:50:97:96:79:48:42:c0:06:74:43:d5:3d:b8:95:20:ce:
         b5:80:42:4a:af:7c:54:77:3b:bb:dd:07:70:0a:d4:fa:d4:b6:
         a9:31:48:f2:74:e9:0d:17:ad:b2:0d:ad:f7:d0:f8:40:4b:15:
         d0:2b:cc:a7:cb:92:c2:18:50:35:8e:e9:74:2d:eb:d0:a9:ee:
         8d:da:50:4e:b2:55:bd:8e:71:61:0c:38:e9:98:6c:c9:8a:b1:
         71:dc:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----