Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
File:                     11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer (raw, json)
Hash identifier:          7q5IPXUqFWUBYLcd0wvb/QDTzxiJZV99kvcMYiQw9wo=
Subject key identifier:   11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ACA4E4B83DD3B393C5C46C07C21C61E3568CCE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 19:26:13 +0000
Certificate not after:    Wed 25 Sep 2024 19:31:13 +0000
Subordinate resources:    AS: 264889
                          IP: 168.227.220.0/22
                          IP: 2804:2f68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:4e:4b:83:dd:3b:39:3c:5c:46:c0:7c:21:c6:1e:35:68:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 19:26:13 2023 GMT
            Not After : Sep 25 19:31:13 2024 GMT
        Subject: CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:22:75:0f:45:f4:43:b9:c9:a5:01:fc:df:
                    85:da:f0:54:bb:5b:60:49:9a:83:84:e2:bd:45:53:
                    10:7e:dd:ba:d6:d8:f6:8b:c7:39:6b:1d:df:22:36:
                    f1:07:c6:e3:b1:e5:a4:81:db:ab:e1:fe:83:ca:46:
                    f6:d4:92:a9:1a:df:86:20:9c:fe:c8:f6:93:e6:99:
                    ea:35:9d:64:79:52:fd:80:48:9d:bf:13:fc:e3:c2:
                    74:1d:a2:d7:32:c8:5a:f3:78:50:22:44:07:b4:64:
                    13:68:c2:e7:ad:f8:23:d4:38:02:25:90:12:0b:8d:
                    1a:bf:78:ab:24:7a:f4:9b:8c:81:0a:6b:31:86:0c:
                    b2:1f:3c:f7:16:52:e2:e5:8d:69:86:26:6b:d3:4a:
                    d4:a0:4a:3e:96:85:d3:04:a9:13:3d:3e:34:5c:c5:
                    1e:ef:d2:3e:c4:cf:6d:73:5d:cb:26:4d:b0:80:e1:
                    94:fd:d5:a7:5c:95:82:98:64:4e:62:29:ce:0f:e8:
                    05:73:f3:95:26:f6:ad:05:2c:0f:b9:1c:20:91:f2:
                    5f:29:53:76:6f:25:1e:08:69:29:3b:61:21:e9:e7:
                    cd:ae:cb:bc:b9:c4:71:9f:5b:07:73:19:78:55:36:
                    03:4d:8c:0a:19:8b:f6:f8:61:37:01:26:85:ac:58:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.220.0/22
                IPv6:
                  2804:2f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264889

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:3a:75:e0:55:2c:a3:79:88:3a:d6:68:b9:06:c4:b1:61:
         90:a6:ce:df:28:44:a0:ab:46:5d:d9:45:4f:a3:b2:ce:ab:9d:
         53:4d:bf:94:59:e3:0d:0e:fa:98:68:6c:50:79:a6:2a:4c:c3:
         72:0b:3e:b7:8b:e6:87:4c:db:71:6e:4c:2a:28:5e:a2:4c:c4:
         19:80:53:a1:d3:28:5f:39:fb:e3:5d:43:03:5c:d4:22:65:31:
         74:2c:58:13:aa:97:2e:c1:c7:27:fc:32:20:71:68:77:ef:a6:
         cd:af:7a:8a:22:b5:6e:ca:b8:b1:64:2d:59:60:bd:e1:3c:f3:
         92:1c:e3:b8:05:98:2f:ea:57:26:a1:fb:60:2c:ed:77:78:28:
         96:eb:0c:ff:f1:99:5d:f7:3d:2b:de:e4:4b:8c:4f:79:bb:cf:
         40:90:aa:da:ab:69:b3:3c:76:0a:10:de:0f:fd:43:da:a7:e3:
         1a:ad:6c:3b:c4:1f:89:61:98:24:d6:8b:08:d0:98:02:f1:0a:
         2a:07:50:0d:16:50:02:95:67:e5:06:76:2e:c9:d5:dc:63:13:
         d2:ce:a7:51:59:b8:cf:7b:dd:39:68:9a:d4:a7:41:84:31:2b:
         7c:0f:ca:9c:84:9c:71:e9:98:2e:53:81:87:f2:ac:8e:d1:78:
         06:07:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----