Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C0411E9FB95FBD78A83016E007470DF43136CFE.cer
File:                     0C0411E9FB95FBD78A83016E007470DF43136CFE.cer (raw, json)
Hash identifier:          rHqYppq08F081JsPrbh4fyle7Z268+t1vZxCEUS8ing=
Subject key identifier:   0C:04:11:E9:FB:95:FB:D7:8A:83:01:6E:00:74:70:DF:43:13:6C:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FD0211A996A5BE0F273D3CAE6C7C6EA5C4F33DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/0C0411E9FB95FBD78A83016E007470DF43136CFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Aug 2023 13:41:06 +0000
Certificate not after:    Sun 25 Aug 2024 13:46:06 +0000
Subordinate resources:    AS: 263915
                          IP: 138.204.224.0/22
                          IP: 2804:27a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d0:21:1a:99:6a:5b:e0:f2:73:d3:ca:e6:c7:c6:ea:5c:4f:33:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 13:41:06 2023 GMT
            Not After : Aug 25 13:46:06 2024 GMT
        Subject: CN=0C0411E9FB95FBD78A83016E007470DF43136CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:be:61:e9:d0:88:de:99:c5:33:f7:dc:6e:
                    3a:4b:f1:49:d4:bc:6e:46:30:a7:52:40:cc:8b:7b:
                    60:a1:a2:ce:86:fb:b3:81:e4:11:f4:16:a4:03:58:
                    d2:a0:89:78:ce:28:3a:e0:66:14:6d:3e:b8:07:11:
                    da:b2:47:50:0d:74:2e:1e:ce:15:a8:fd:63:b4:06:
                    25:d0:de:a9:c9:3a:e4:95:82:9f:71:07:85:b5:eb:
                    8c:10:0e:ae:cc:30:46:ec:89:52:a1:0e:27:e5:88:
                    30:11:0c:2d:6b:9e:ed:4f:be:06:70:c8:ab:84:a5:
                    3c:9e:85:b6:d0:d6:f2:30:ff:ed:c7:39:4b:84:27:
                    50:f1:bf:ad:8e:56:05:9c:fc:13:bb:3e:a5:03:72:
                    05:70:a8:d8:10:d4:d9:e7:7c:ff:87:d9:15:26:cd:
                    e4:01:c3:78:f5:e4:d8:1a:b5:9f:77:34:38:27:7e:
                    df:ce:20:98:01:63:f0:0b:35:4c:49:91:70:3e:46:
                    52:86:0f:df:03:d8:a9:bb:f4:2e:4e:fb:a7:4e:47:
                    be:c8:fb:85:58:b3:c5:5e:63:c5:73:cb:3e:17:66:
                    cb:ca:2b:69:5c:e3:6c:c1:7e:cb:8b:32:05:08:3a:
                    e5:4c:ef:45:57:1d:f2:ad:a5:1d:d2:4f:83:ef:0a:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:04:11:E9:FB:95:FB:D7:8A:83:01:6E:00:74:70:DF:43:13:6C:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/0C0411E9FB95FBD78A83016E007470DF43136CFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.224.0/22
                IPv6:
                  2804:27a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263915

    Signature Algorithm: sha256WithRSAEncryption
         0f:34:03:6a:80:c3:b6:c6:e7:73:74:02:6c:38:be:ad:11:ec:
         79:38:01:76:88:16:3c:23:2d:21:6c:ba:46:4a:43:51:b8:0a:
         bd:c0:37:65:09:32:06:eb:a8:0e:d3:e5:0b:57:4d:8c:09:0d:
         0f:dc:44:5e:19:4d:d8:23:eb:8c:a2:2d:8f:73:46:2c:a9:0e:
         7e:1a:d6:31:a1:b5:bc:a5:83:6c:c3:36:db:4d:07:9a:c2:02:
         cf:b8:c0:fc:c5:2f:23:b6:c7:2e:74:76:d7:44:5b:06:22:ef:
         c1:1c:59:80:b5:2e:c3:e1:5f:40:af:7d:a3:2a:d7:d2:9b:01:
         d7:4c:b3:ba:99:d8:26:f6:1c:c3:b7:5f:85:68:4c:15:1b:ad:
         42:67:aa:1c:6d:3d:4a:21:61:09:1a:7f:43:ea:bd:ef:3e:dd:
         c3:3d:3b:78:e0:55:74:dd:31:13:8b:79:19:33:47:ff:1e:dc:
         c6:4b:78:c6:07:32:24:d8:5c:41:cb:a1:74:a1:62:b9:19:ce:
         63:68:19:75:f0:30:2d:eb:d3:cd:15:4b:66:2a:8f:f8:6b:c2:
         16:78:14:92:17:14:e5:35:bf:96:9d:be:c4:dd:4e:18:66:84:
         88:1a:a6:91:c2:40:7e:6c:5b:59:9f:d2:4d:b7:d6:40:fd:04:
         a7:23:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----