Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27F564704757BB4DF9B2E1B51D2008781F0A7DFA.cer
File:                     27F564704757BB4DF9B2E1B51D2008781F0A7DFA.cer (raw, json)
Hash identifier:          HiVEAyyccUZrExPW6bWrVd+vw/MM8gi1W/9njxKdmp0=
Subject key identifier:   27:F5:64:70:47:57:BB:4D:F9:B2:E1:B5:1D:20:08:78:1F:0A:7D:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B7FED7BD9CFCA7301DA3F2FCE355A33CC4F256A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/27F564704757BB4DF9B2E1B51D2008781F0A7DFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 17:41:18 +0000
Certificate not after:    Thu 14 Mar 2024 17:46:18 +0000
Subordinate resources:    AS: 264899
                          IP: 168.228.4.0/22
                          IP: 2804:2f90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7f:ed:7b:d9:cf:ca:73:01:da:3f:2f:ce:35:5a:33:cc:4f:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 17:41:18 2023 GMT
            Not After : Mar 14 17:46:18 2024 GMT
        Subject: CN=27F564704757BB4DF9B2E1B51D2008781F0A7DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:db:c7:78:89:47:a1:84:b6:9e:bb:be:97:
                    8b:94:7d:fc:28:3c:22:48:aa:e1:1b:54:84:2f:34:
                    0c:a1:95:08:f7:8c:5f:7d:39:35:47:56:21:99:6f:
                    d7:e2:fb:ea:33:73:0e:c9:f2:92:6c:d6:42:d8:62:
                    32:88:b5:d3:70:01:b3:1b:66:d0:88:70:70:f3:1d:
                    4d:47:4c:e8:b9:f1:29:58:db:3c:9c:e3:86:a3:b1:
                    bb:48:84:ba:67:c7:b9:07:86:78:dc:8c:56:df:35:
                    c7:60:8b:5a:00:26:b5:51:4b:5c:f5:4e:3d:3d:3c:
                    51:46:0b:4e:48:9e:1f:95:42:75:c7:60:68:69:1e:
                    b0:be:ce:28:76:9c:d8:06:b4:95:55:b3:94:b1:e4:
                    15:28:b4:8b:57:4a:01:26:1b:5f:11:25:8b:26:57:
                    fd:57:7e:86:f7:25:1d:51:9e:6b:a8:99:37:38:46:
                    fd:22:f9:69:23:3a:7c:a7:52:82:26:e3:c0:6b:26:
                    2a:b9:f8:a3:15:f1:e7:3c:2c:a7:eb:e7:f3:d6:15:
                    cb:ce:8f:2f:ed:43:8d:f1:00:02:1b:04:88:a6:a9:
                    98:08:60:a0:6f:f9:79:00:ab:21:15:34:6e:17:cd:
                    34:3f:54:a7:9a:e3:8b:d5:78:f9:76:34:31:40:81:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:F5:64:70:47:57:BB:4D:F9:B2:E1:B5:1D:20:08:78:1F:0A:7D:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/27F564704757BB4DF9B2E1B51D2008781F0A7DFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/22
                IPv6:
                  2804:2f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264899

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:92:e5:32:53:8c:3e:b7:9d:18:d4:c3:3a:ac:7f:60:4c:
         4c:34:ca:49:53:08:48:b3:7a:ba:e4:61:2a:a4:5d:04:83:24:
         54:b0:72:0b:1b:19:f0:dd:fa:fc:91:58:a0:e1:49:b5:b0:33:
         ce:64:b6:42:44:79:b3:64:58:dd:57:6c:2e:a8:8c:a0:3e:83:
         2f:e4:fe:7c:9b:fe:7b:b4:3a:3b:ea:ac:bd:0d:26:24:8e:c2:
         9c:b8:1b:c8:9a:aa:65:91:f2:3c:b4:6c:49:78:61:40:ab:3b:
         59:72:04:e9:c5:e4:cb:5d:39:e4:6b:db:e6:d1:e7:85:16:e1:
         7c:57:24:e2:be:b3:70:3d:2f:fe:26:a3:64:99:18:8d:8c:0b:
         bd:a9:ee:34:fc:f9:a1:a3:83:0b:87:87:e2:67:5c:38:e0:9b:
         15:b3:3f:64:ac:af:3a:33:e6:f4:fe:d8:57:e4:36:2c:36:97:
         24:e6:52:e1:88:b0:0f:cc:33:06:3e:87:87:6b:73:87:42:a4:
         5e:9f:dc:9f:76:52:66:ca:a0:48:a1:b8:3c:4d:e7:2e:33:8a:
         80:7e:c2:8f:1c:29:7e:f9:9d:ca:63:a5:93:29:2d:5d:9b:09:
         80:8f:28:cd:dc:bb:62:d5:d1:2e:d6:26:cf:ce:10:7d:b9:c9:
         e1:f3:73:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----