Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer
File:                     0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.cer (raw, json)
Hash identifier:          wRh2Z+31vuEPcyYLGGz/KziM7cKbuK/7jPNyjQTN584=
Subject key identifier:   05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24F9E9DC8D5C2C4A3E3929CA6371CF4C0F14D41E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 22:35:13 +0000
Certificate not after:    Fri 13 Dec 2024 22:40:13 +0000
Subordinate resources:    AS: 263917
                          IP: 138.204.232.0/22
                          IP: 2804:27b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f9:e9:dc:8d:5c:2c:4a:3e:39:29:ca:63:71:cf:4c:0f:14:d4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 22:35:13 2023 GMT
            Not After : Dec 13 22:40:13 2024 GMT
        Subject: CN=0533041425AD9B79362F91E0E8FDCC1A65E2CFD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:b7:86:5a:14:88:a1:bc:5b:09:53:3a:e1:
                    54:8f:db:af:0d:0d:a4:b9:e8:68:6b:d2:c9:49:91:
                    2d:61:fb:1a:4d:dc:a4:73:5f:f7:73:b0:e8:07:86:
                    13:0c:e5:62:f2:28:00:cd:b2:70:ab:46:a5:7a:8a:
                    6f:ad:3b:14:0d:d8:63:c6:ef:43:cc:9c:34:53:37:
                    3d:7b:0c:f7:a1:13:4d:52:56:d7:e7:37:fb:4d:50:
                    61:14:16:42:27:fe:01:19:cd:b5:07:11:a9:a7:6c:
                    a2:d6:66:ab:90:1a:c8:45:20:7e:24:ec:a9:4c:11:
                    57:26:51:88:e6:5c:14:4a:e9:15:15:89:ab:4b:fd:
                    f4:4a:0a:f6:67:ee:73:8a:2e:f5:bc:19:c6:8d:6c:
                    b6:6d:a1:23:57:e0:cd:37:de:8e:ca:6d:9f:3a:4b:
                    2d:d7:bb:e1:d6:92:c3:5f:83:c6:2f:1a:87:1d:e0:
                    d1:94:a2:a5:bc:cf:d3:76:46:3b:e4:5f:c9:99:77:
                    57:f3:e6:d6:06:f8:53:8b:df:31:6c:ae:ff:bc:c3:
                    70:9a:7b:db:2f:a9:d4:8b:9d:e8:f2:ff:6e:19:ba:
                    05:ce:20:c7:71:16:76:7a:6a:53:08:3b:e9:a3:37:
                    e1:93:51:f7:77:de:e7:41:26:75:ba:8f:91:e9:9c:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:33:04:14:25:AD:9B:79:36:2F:91:E0:E8:FD:CC:1A:65:E2:CF:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/0/0533041425AD9B79362F91E0E8FDCC1A65E2CFD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/22
                IPv6:
                  2804:27b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263917

    Signature Algorithm: sha256WithRSAEncryption
         35:60:47:a6:fb:93:88:f5:22:0f:aa:2a:42:e0:12:1f:17:d2:
         e1:a2:34:1f:95:04:34:2b:47:18:1c:13:60:54:10:46:25:43:
         04:aa:2a:f7:43:71:2e:68:70:18:48:6c:36:23:1b:c4:51:80:
         d9:9e:4b:d6:86:a0:5a:87:d9:8c:5f:a1:14:06:fe:20:9f:c9:
         59:f9:f1:2a:9d:08:e4:16:3a:c8:cf:77:91:b1:2c:d0:2d:9e:
         58:92:2c:aa:6b:17:49:c0:54:b3:5f:a1:37:f3:06:ac:97:88:
         19:15:d5:ae:c2:9d:83:fb:e5:a3:59:a4:2c:70:c6:5e:5d:af:
         41:1a:01:0e:4c:10:f8:4b:76:8d:df:02:79:2d:83:eb:cc:59:
         a6:cd:5b:38:e0:2d:50:b0:78:af:d6:c6:67:33:7f:c5:7d:74:
         8a:f7:cd:67:e6:91:81:9d:4f:f6:48:8e:7d:40:39:44:c6:86:
         b2:7a:e9:82:75:b8:e6:02:99:b7:25:90:9c:08:39:ba:be:b3:
         df:c2:af:bb:0f:0e:76:c8:94:1f:0c:10:1e:bf:5f:52:a8:d1:
         d6:a1:0c:3d:90:f2:d5:da:0f:b0:a7:29:e8:4e:38:da:b5:70:
         d1:4e:d3:80:34:e5:66:5a:ad:1e:08:ad:a1:92:a6:9b:3b:2b:
         13:1a:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----