Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer
File:                     29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.cer (raw, json)
Hash identifier:          KNhRdst/m5kISNhgCl4JDphixVYUkWp1nq9W13N4zkA=
Subject key identifier:   29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5BFBC7F9CBA625B68D200EED71C54881E51386A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 16:59:32 +0000
Certificate not after:    Fri 29 Nov 2024 17:04:32 +0000
Subordinate resources:    AS: 271324
                          IP: 186.209.172.0/22
                          IP: 2804:79bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fb:c7:f9:cb:a6:25:b6:8d:20:0e:ed:71:c5:48:81:e5:13:86:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 16:59:32 2023 GMT
            Not After : Nov 29 17:04:32 2024 GMT
        Subject: CN=29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:ca:d4:64:c7:b0:90:4e:a9:b4:0b:87:78:
                    0d:f4:46:ec:9d:b3:d5:90:b3:6c:4b:56:85:6c:82:
                    ae:0c:c7:ac:1e:9c:73:8a:6b:04:da:0b:0f:cc:3a:
                    b0:dc:fa:a9:63:24:2a:ea:74:74:e2:03:db:2c:a9:
                    df:c2:91:2a:d5:5b:56:bc:64:bd:2c:8b:e2:c2:b2:
                    a1:35:a2:23:22:72:6d:ee:94:2d:d4:11:30:96:1c:
                    3f:c6:a6:36:a1:31:89:32:df:5f:5c:53:92:b8:3c:
                    7c:20:c1:ef:d9:52:86:f5:e8:ac:62:af:3d:e4:3b:
                    d3:c5:8d:93:cc:c7:12:b6:50:33:18:50:66:ae:51:
                    6d:30:1e:2b:23:6e:7d:84:c9:aa:00:28:63:b1:64:
                    73:f5:ae:e6:6a:35:b3:0c:cd:8e:8c:1b:88:62:37:
                    c4:dc:86:68:81:2f:45:03:2e:e0:26:f9:cd:73:e9:
                    25:e8:41:74:a1:eb:3a:4b:54:62:3a:f4:d4:77:5b:
                    c7:cf:33:6e:db:7b:1a:45:99:30:18:eb:f8:93:08:
                    dd:ab:73:51:e1:cd:41:8f:e3:05:67:3c:36:99:bb:
                    87:ab:97:6a:03:58:99:7f:1a:c2:8b:40:f6:1c:33:
                    c8:8e:bf:c2:bd:9d:fc:31:b8:de:a6:c0:d5:63:8f:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:BE:07:A4:A4:35:08:C5:1A:E0:9D:DE:39:CF:51:A3:FE:5E:31:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GbonDppgvqtXd62AP1CbTTHaBmdUmKFuQHcXkhzNffaj/0/29BE07A4A43508C51AE09DDE39CF51A3FE5E31EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.172.0/22
                IPv6:
                  2804:79bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271324

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:60:0c:b1:bf:59:6e:70:0a:8c:c9:29:ec:76:13:fd:e0:
         b8:b8:5b:9e:ec:c2:42:51:c3:31:7b:38:bc:be:a2:d4:b5:25:
         4a:ac:c7:ac:9b:55:f2:bc:b6:ee:92:d8:2d:3a:92:36:b1:69:
         ed:92:4c:8a:fe:70:0f:f3:48:88:28:cd:bc:8e:00:cb:a2:5b:
         44:64:26:33:01:3d:bf:36:d1:81:c0:fe:7a:0f:b7:44:66:c1:
         e4:1d:89:ca:9b:7f:47:43:97:b6:ff:31:96:31:39:a4:c2:23:
         f2:79:8d:7c:56:19:ab:67:44:9a:91:bd:92:10:46:7f:28:a5:
         3c:3d:12:22:a8:52:11:e9:4e:c6:9b:b8:a7:bc:6e:9a:32:bf:
         f0:2d:86:96:f5:13:72:99:80:c8:5b:39:13:78:10:b7:b8:d1:
         81:f5:bc:18:3b:0b:68:11:95:e4:9b:33:4d:ac:15:00:ce:d0:
         18:4c:f8:48:29:a2:4d:a1:1e:ba:a1:c0:3f:15:64:16:fe:a0:
         f1:15:20:d2:3b:81:98:82:a8:28:46:ae:26:a2:70:6c:df:74:
         c1:66:d5:3f:5b:6d:eb:67:57:f4:7f:86:33:09:a3:f2:d9:b2:
         13:69:3c:db:dd:d9:db:8e:e0:99:ae:fc:3a:a5:1b:4f:a5:d2:
         2a:ab:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----