Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.cer
File:                     27FF6C0D2340FAB65651A712F06756E2AFD45AF7.cer (raw, json)
Hash identifier:          xQYZY6WTWAiYp2TxZ6+MUJQ8S4JjADMs/Oos8owW8Ac=
Subject key identifier:   27:FF:6C:0D:23:40:FA:B6:56:51:A7:12:F0:67:56:E2:AF:D4:5A:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3720A38C9DC39C478B6698D08B2161255B8AEADB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Dec 2023 01:03:11 +0000
Certificate not after:    Thu 26 Dec 2024 01:08:11 +0000
Subordinate resources:    AS: 265394
                          IP: 168.194.192.0/22
                          IP: 2804:3368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:20:a3:8c:9d:c3:9c:47:8b:66:98:d0:8b:21:61:25:5b:8a:ea:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 01:03:11 2023 GMT
            Not After : Dec 26 01:08:11 2024 GMT
        Subject: CN=27FF6C0D2340FAB65651A712F06756E2AFD45AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:84:c3:9a:a9:ab:e9:ee:f8:50:ea:30:7f:
                    9d:ed:06:d5:34:b4:ec:d1:9d:1c:91:22:15:e3:a1:
                    29:76:27:57:59:87:18:e8:ac:11:fc:fe:dc:f8:5c:
                    e3:e1:ef:6f:7e:f5:e8:67:5b:e5:d8:08:e7:8c:73:
                    51:e5:b6:85:58:ac:e0:32:15:11:4e:46:a4:c1:37:
                    8b:e0:26:c1:9b:35:c9:74:06:b3:ed:53:f6:d7:24:
                    fc:76:51:12:f6:78:67:5e:d2:88:c0:4a:c7:1a:1f:
                    98:78:91:83:ec:cf:aa:96:03:ca:16:38:b1:4a:c6:
                    8e:09:92:34:63:54:c6:bc:ab:a6:c4:69:89:3f:8e:
                    2e:7d:6a:09:39:93:99:ab:95:aa:40:5f:5c:d9:37:
                    2b:43:34:86:10:8d:b4:ea:29:f9:33:e5:51:b4:2a:
                    08:8a:06:81:81:a7:0b:de:21:2c:47:ba:79:66:b5:
                    93:42:4b:7f:29:52:76:59:ce:cd:2b:f5:bc:de:b1:
                    cf:4e:72:aa:d6:ee:5d:53:e7:c1:60:2a:5c:34:8d:
                    9a:bb:88:60:4d:e0:5c:99:e6:e8:29:e8:d4:f5:0c:
                    28:25:7e:c4:4f:07:1c:ec:61:52:72:fa:2f:37:bf:
                    69:fa:b9:8f:e8:59:f6:4a:76:f5:8d:e3:8c:e6:f0:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:FF:6C:0D:23:40:FA:B6:56:51:A7:12:F0:67:56:E2:AF:D4:5A:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/27FF6C0D2340FAB65651A712F06756E2AFD45AF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/22
                IPv6:
                  2804:3368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265394

    Signature Algorithm: sha256WithRSAEncryption
         55:13:16:87:27:5a:2c:70:c3:f5:b9:1e:7d:40:e9:4e:46:3e:
         0f:2b:37:cd:0a:2e:a0:f9:19:8d:71:42:3c:b2:1c:4b:bf:2e:
         c9:a7:7f:2e:c3:dc:be:5b:7c:c6:d5:a9:4f:03:f4:7b:17:ce:
         c2:45:74:7e:24:6e:8d:bf:0d:01:6b:af:4a:c8:45:e3:54:93:
         c7:70:d7:4c:fe:d8:20:a3:48:da:e1:8d:3e:c6:01:23:99:50:
         fc:98:d6:14:11:c9:23:b8:f1:d7:f6:b9:f4:8c:38:ba:8d:27:
         b7:70:1c:5a:15:fd:d9:79:db:4d:b1:ac:20:cb:a2:e7:44:c4:
         6a:68:3f:cd:57:bd:d1:e7:d7:92:7f:d7:67:f7:53:d8:0f:26:
         cb:e2:11:d9:b7:73:fa:3e:c4:11:9e:c6:35:12:76:5f:4c:3c:
         2b:1b:ad:ae:e1:c2:56:73:c5:df:6e:0a:de:44:bf:9d:8a:5e:
         93:86:0f:d7:07:84:9f:76:58:7b:24:24:76:36:7d:25:75:43:
         e3:aa:bc:5d:e3:56:cd:a2:ef:a5:03:c8:6f:57:de:58:10:2b:
         63:0f:21:40:9e:fa:88:08:c2:56:78:27:ad:16:0d:66:fe:61:
         8d:63:88:bf:a8:53:7c:52:11:1d:d1:01:75:36:ff:b6:26:6a:
         82:a3:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----