Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer
File:                     23C3E44CA01A119A4CB89CB013DD725A6EE2137A.cer (raw, json)
Hash identifier:          XXO3yuJ7rdJyUABGi8bqzsfcXpoUHhnz5Ewqb5AI7tg=
Subject key identifier:   23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0362656CDEB1973B99EA885DC6BF76B4FCAB605A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 02:56:13 +0000
Certificate not after:    Thu 31 Oct 2024 03:01:13 +0000
Subordinate resources:    AS: 264992
                          IP: 170.84.96.0/22
                          IP: 2804:3118::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:62:65:6c:de:b1:97:3b:99:ea:88:5d:c6:bf:76:b4:fc:ab:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 02:56:13 2023 GMT
            Not After : Oct 31 03:01:13 2024 GMT
        Subject: CN=23C3E44CA01A119A4CB89CB013DD725A6EE2137A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:0c:81:7a:39:08:a0:81:a7:5e:cb:af:8f:
                    82:0a:70:12:9f:e4:cb:5b:9f:84:6d:b0:99:e9:31:
                    1f:d9:22:a2:6a:37:9c:fc:d6:5e:a9:2e:d5:f7:ee:
                    a3:68:94:5b:cb:d6:b7:48:0a:25:67:bd:ea:04:05:
                    00:a5:aa:91:ff:c6:c0:a9:53:d2:68:c0:24:93:88:
                    03:8a:c4:f3:a6:3d:1c:62:0d:f0:af:89:98:02:61:
                    a4:d2:10:04:de:cf:99:e4:32:3e:93:47:94:5a:fa:
                    90:9d:4c:3d:20:81:82:f7:3a:31:1f:18:81:4e:24:
                    c6:58:f0:40:1f:0d:67:db:25:ab:27:e2:18:81:53:
                    99:ee:38:64:c2:23:4e:a4:c9:05:a8:6a:3f:11:40:
                    6b:1c:72:5a:94:8a:ed:bc:cf:ef:65:28:7a:b0:05:
                    c9:2d:0d:c4:ff:af:3f:70:bb:1f:cd:9a:b0:c3:3e:
                    28:31:0a:3b:a0:18:ae:bc:0e:86:a7:63:7c:b5:c5:
                    12:dc:f0:ad:12:7a:8d:16:a8:d7:a5:fa:81:a1:cf:
                    10:cd:40:6b:c6:95:e5:74:62:52:b2:c4:ce:cf:5d:
                    3d:f2:54:91:df:6d:de:9d:62:36:98:df:90:01:ab:
                    4e:f1:c4:55:d2:c6:15:df:84:f5:eb:9b:f8:46:26:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:C3:E4:4C:A0:1A:11:9A:4C:B8:9C:B0:13:DD:72:5A:6E:E2:13:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/0/23C3E44CA01A119A4CB89CB013DD725A6EE2137A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.96.0/22
                IPv6:
                  2804:3118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264992

    Signature Algorithm: sha256WithRSAEncryption
         54:43:eb:60:c1:91:19:df:3a:b8:55:cc:ee:d8:a1:63:63:2b:
         03:3f:a2:d4:ce:de:66:d5:89:77:28:13:7c:90:73:11:5f:c8:
         33:b5:a2:6b:1a:e4:3c:40:c0:67:70:6e:15:dd:f4:83:c3:bb:
         7f:75:2f:3f:3a:da:e6:80:b5:ba:5e:34:00:60:d8:27:dd:ef:
         72:ec:e8:7e:40:f1:58:e4:97:ec:f9:d2:4e:9a:52:5d:40:2a:
         de:26:cf:64:38:dc:c3:d1:ac:bb:ca:47:d0:a8:3f:5b:c1:0e:
         02:2d:dc:3f:f3:5a:e8:2b:2e:e2:01:c3:66:fc:89:73:c3:1e:
         06:4d:da:92:59:77:4c:f8:0d:fa:d4:af:70:c5:a9:87:e2:1c:
         39:16:c2:72:9e:c6:aa:5f:79:bc:20:e5:82:21:f8:55:ad:77:
         aa:fa:91:04:f3:0c:3b:ad:31:61:97:83:d6:f0:09:99:7f:84:
         44:d2:89:42:6f:51:da:70:a0:35:34:46:9f:55:19:c6:de:7b:
         5d:ae:8e:0d:23:08:3b:ca:32:37:a5:51:44:91:a8:e7:d9:f4:
         fe:f6:50:18:eb:97:2d:39:bc:06:67:95:c0:da:ba:9a:2c:83:
         36:9c:f1:db:dc:1f:1a:22:92:26:71:13:c6:74:de:53:e0:43:
         7a:9c:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----