Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
File:                     11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer (raw, json)
Hash identifier:          F41jSG8rN7wOgVOZeusbwuJ2szQsXYbgQosoE7IRpkU=
Subject key identifier:   11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       561475F7DBE6BEF1D120C8BE2F203B35010A78A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Dec 2023 00:02:48 +0000
Certificate not after:    Thu 26 Dec 2024 00:07:48 +0000
Subordinate resources:    AS: 262977
                          IP: 177.190.80.0/20
                          IP: 2804:16a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:14:75:f7:db:e6:be:f1:d1:20:c8:be:2f:20:3b:35:01:0a:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 00:02:48 2023 GMT
            Not After : Dec 26 00:07:48 2024 GMT
        Subject: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:36:3e:31:5f:e1:df:7c:66:1f:e1:3b:fe:
                    8b:a0:10:85:9c:ce:7b:28:85:aa:53:da:89:db:44:
                    51:c3:44:05:81:b6:6a:7c:bd:01:45:f2:36:2d:3c:
                    9b:d0:bd:29:c4:3f:fa:b9:a5:f4:5f:f2:1a:f9:56:
                    c4:66:19:45:78:ce:df:a0:72:b9:c8:e1:71:be:b7:
                    bf:34:ed:08:43:5d:36:3b:40:61:4b:d6:56:ca:1d:
                    47:11:22:34:a6:18:11:b9:ec:b2:43:91:81:ff:e4:
                    6e:32:49:4e:53:3c:88:43:ff:25:10:07:aa:a3:0c:
                    d5:e2:db:9c:59:e5:c5:cd:d7:28:c7:d9:00:21:b2:
                    c8:00:41:d3:1f:ab:e3:86:4d:22:87:38:7d:91:2d:
                    f8:1e:67:34:cf:75:23:9f:73:8e:0a:b8:dc:d2:69:
                    cd:de:e0:bb:4d:84:53:92:ee:43:f0:9b:f7:ad:45:
                    15:20:52:49:e6:92:a6:ad:ae:cb:42:37:8c:27:6f:
                    fd:87:6c:1d:fa:1f:85:52:30:28:df:53:3f:f8:e4:
                    00:c0:c0:e5:e0:bc:04:de:85:d0:c8:97:5b:6d:c0:
                    62:47:b6:ee:e6:fe:6e:e2:26:5c:7b:6e:75:f6:bb:
                    f2:4d:af:58:8c:a3:0b:09:21:1a:e9:3e:f5:0b:cb:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.80.0/20
                IPv6:
                  2804:16a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262977

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:23:8e:06:13:bc:82:83:bb:c0:bb:a0:90:18:16:e8:c5:
         7c:cf:1c:23:ae:8f:34:32:ba:58:d5:3d:fa:e9:c8:51:ee:51:
         b8:59:31:77:79:72:a2:74:10:f6:dc:47:3a:fd:27:93:21:50:
         9c:5e:f8:65:79:e6:ab:67:12:f1:51:92:44:07:98:ee:49:6a:
         52:4a:31:79:cf:f9:26:56:bf:3b:2f:a1:8f:db:50:a8:f2:39:
         92:13:aa:ce:93:42:4e:b5:69:c3:dd:91:0b:71:2b:9c:ba:25:
         f5:11:47:e9:ba:e3:fc:33:40:f5:8e:a4:58:e5:c8:f4:3f:31:
         89:59:40:56:79:bd:4f:ff:d6:fe:b5:e8:6c:93:ee:e1:77:eb:
         da:e6:25:47:6f:64:78:69:aa:af:72:cd:2f:6f:a1:04:33:c7:
         68:5a:1b:a1:22:f1:69:5b:03:ad:92:c6:e1:9a:ae:ca:97:b8:
         d7:f8:c5:62:94:b5:91:d4:f1:e9:87:ad:b4:d6:09:a3:f7:5e:
         72:14:92:11:44:cb:af:af:bc:fe:54:3e:e8:9e:53:b4:82:0d:
         1e:1e:cd:5b:9c:cb:e8:c8:dc:45:82:43:38:62:75:6f:6a:b2:
         8a:9b:c9:28:99:78:86:b4:5f:0a:f7:f3:6f:d6:53:63:5c:3f:
         7b:3b:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----