Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer
File:                     0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.cer (raw, json)
Hash identifier:          TJhyTz4zU4r2AAdbPR18Z9D4/hSb72gQhzecIVSa0Kw=
Subject key identifier:   0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       128F07BF9FFD217931B71D59EF1BCD2BC2F04F20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 19:26:14 +0000
Certificate not after:    Mon 16 Dec 2024 19:31:14 +0000
Subordinate resources:    AS: 271607
                          IP: 190.9.104.0/22
                          IP: 2804:7e2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8f:07:bf:9f:fd:21:79:31:b7:1d:59:ef:1b:cd:2b:c2:f0:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 19:26:14 2023 GMT
            Not After : Dec 16 19:31:14 2024 GMT
        Subject: CN=0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:c2:cb:af:61:0c:52:de:e5:e1:63:31:d1:
                    f4:37:ee:88:e4:26:b8:57:a5:b1:2e:02:be:54:48:
                    36:b6:d3:f2:2b:1a:4d:42:ea:39:c1:25:f3:4c:0e:
                    80:97:da:92:41:f0:4e:86:08:80:4e:54:3a:d7:53:
                    d9:3e:0b:e7:d7:2a:02:70:e1:37:66:45:3c:43:b9:
                    bc:13:9b:d5:62:28:d0:e9:82:c8:bf:c9:31:fe:a6:
                    f5:ae:63:43:f1:51:29:cd:68:72:8d:8a:bb:49:41:
                    a8:48:b0:df:44:d4:35:6b:fa:f7:75:d6:b0:08:a8:
                    ef:b1:a9:01:c4:3d:8b:f1:68:96:0e:bc:39:80:19:
                    ec:a0:04:a1:26:48:42:ed:95:d8:2d:39:11:0a:92:
                    fe:63:a7:31:ec:b0:5a:42:15:66:bd:ca:da:2b:00:
                    c4:bc:f5:15:07:91:bb:35:c5:71:ca:63:29:63:88:
                    3a:d5:11:d1:dd:23:26:ba:87:7a:c0:84:d7:96:8c:
                    d0:da:ea:ba:c1:54:96:a5:6f:27:97:0e:90:1e:4c:
                    d8:78:76:88:aa:9b:fb:35:ca:be:26:bc:36:ef:83:
                    d4:d9:42:25:4d:a8:4d:98:7d:a8:9d:ed:54:5c:4a:
                    0a:39:13:dd:66:32:78:60:0f:c5:02:a2:1f:92:36:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0F:BA:AE:57:3C:A8:C9:5B:A8:E1:A3:EF:36:4C:2A:02:1A:4F:D2:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/0FBAAE573CA8C95BA8E1A3EF364C2A021A4FD24D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/22
                IPv6:
                  2804:7e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271607

    Signature Algorithm: sha256WithRSAEncryption
         ad:1c:58:b8:84:4f:41:ab:4c:68:89:c3:54:29:3f:9f:24:12:
         ed:43:a8:2d:a0:6d:70:3b:fe:2a:0a:2a:56:60:27:b5:b6:1b:
         3a:9e:fd:dc:88:f4:2a:83:2c:b2:51:a2:a1:73:de:05:48:18:
         e0:08:bd:f0:b8:0f:a1:d7:a8:63:3a:f2:ab:9d:ce:e9:ca:ec:
         3a:6c:ae:9d:bd:8f:89:2f:d7:59:95:2f:62:69:8e:5a:86:ea:
         fa:64:89:2e:26:fc:2a:b3:19:1a:d9:2c:4f:35:eb:13:12:dc:
         59:2a:90:d6:05:dc:3a:e2:bc:10:ee:4f:a4:c6:62:3a:b5:7d:
         57:76:0f:62:a7:29:73:8c:cd:9a:4d:19:e6:93:41:ba:91:d0:
         a2:d8:31:4d:22:cb:4c:51:a7:ca:32:51:7c:4b:d5:bf:25:e8:
         69:45:5c:22:e2:a0:ae:fb:a4:e0:a3:25:ab:ab:57:1f:cd:77:
         ea:9f:a9:27:ed:81:c8:37:7a:49:f3:78:30:0b:0a:9e:90:33:
         fc:f3:79:7f:0b:6f:5d:10:64:f8:09:f2:e6:b0:52:d1:91:37:
         75:e1:f7:e9:0d:b6:41:9b:e2:36:53:38:1b:f3:65:73:a9:6e:
         6f:28:a6:5b:a3:6d:84:f1:01:04:04:30:4d:52:6e:4b:f8:35:
         67:0f:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----