Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer
File:                     2BC73A920C13C977F506EBD39B6882740FC9BC3A.cer (raw, json)
Hash identifier:          XLJhJbGdzq9M+UUNNW4tkMmALifyehE+vum9xt3w3us=
Subject key identifier:   2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       AABCC3EC9331C3574BF97C6D29CE0B81AAE870
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 18:30:24 +0000
Certificate not after:    Tue 22 Oct 2024 18:35:24 +0000
Subordinate resources:    AS: 262505
                          IP: 177.55.144.0/20
                          IP: 177.66.224.0/20
                          IP: 2804:544::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:bc:c3:ec:93:31:c3:57:4b:f9:7c:6d:29:ce:0b:81:aa:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 18:30:24 2023 GMT
            Not After : Oct 22 18:35:24 2024 GMT
        Subject: CN=2BC73A920C13C977F506EBD39B6882740FC9BC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5e:29:88:ba:23:ea:74:0f:e6:9c:08:cf:e6:
                    e7:6d:c7:5c:5b:d8:88:15:c5:8b:72:aa:b4:88:4c:
                    e8:5b:43:a3:0f:98:c5:9d:41:ae:03:f8:ea:02:66:
                    3d:a2:47:b0:88:96:59:f5:04:8c:b5:c6:2d:10:0d:
                    b0:20:cd:0a:7f:76:49:ee:fe:37:90:a4:16:05:b4:
                    f7:68:8c:09:3c:87:1e:c9:05:2b:a4:ca:9f:5c:36:
                    52:8c:60:14:fe:90:dd:6d:88:df:2e:5d:92:b6:20:
                    06:58:6f:50:a3:c6:30:b3:bd:66:7d:44:9b:b5:56:
                    24:d2:78:ae:db:88:cd:26:75:59:2f:32:f5:d2:dd:
                    cc:41:8a:f2:bb:21:29:cc:43:67:da:45:a9:45:6e:
                    74:56:64:20:0f:9d:68:84:a9:8b:d0:28:13:e0:83:
                    1c:d0:38:a2:db:51:51:83:b4:28:64:cc:d6:d8:32:
                    37:5a:f9:42:a4:34:86:db:d7:da:ca:97:e6:c4:50:
                    f7:7b:83:78:eb:81:3e:57:75:06:8f:67:b4:ca:be:
                    d6:e9:25:5e:f3:33:fd:ba:77:7f:0f:74:9b:01:be:
                    f4:50:6b:44:77:94:e6:61:b7:71:57:2a:a8:f7:fa:
                    aa:20:4f:8b:30:a6:1c:81:1e:37:cc:90:c4:97:c6:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:C7:3A:92:0C:13:C9:77:F5:06:EB:D3:9B:68:82:74:0F:C9:BC:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2BC73A920C13C977F506EBD39B6882740FC9BC3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.144.0/20
                  177.66.224.0/20
                IPv6:
                  2804:544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262505

    Signature Algorithm: sha256WithRSAEncryption
         b0:15:db:c0:27:6d:ef:b8:05:e3:bc:60:99:7a:1b:27:8f:1b:
         fb:76:aa:95:50:09:db:66:3a:51:2f:71:38:c0:ea:c6:93:8d:
         e5:39:10:9b:c5:bd:c9:ba:55:1e:30:d4:e3:ab:77:72:c4:20:
         b9:90:50:55:a2:2d:de:a4:b7:65:68:79:c9:90:98:7a:a3:51:
         7c:ec:3e:b6:b8:33:27:1a:67:55:62:63:f0:be:e2:68:3c:50:
         87:72:b8:2d:3e:d0:bb:14:da:5a:3b:1d:4b:fb:12:13:a0:fd:
         5b:8c:f4:28:67:ca:d3:18:e6:03:56:87:92:a3:cd:1e:7d:75:
         e3:77:11:e6:9e:24:00:46:ae:8b:c1:84:5c:f7:da:4f:fa:6b:
         65:8c:9d:23:01:ee:6d:9f:8d:eb:ad:b1:cb:6b:a6:92:f5:f3:
         a2:63:84:d1:6b:4e:d0:4e:6a:05:ca:e3:a7:79:9a:fc:1a:e2:
         90:00:7b:20:19:89:87:29:22:e4:ad:ec:c6:4f:c5:ee:b1:35:
         0c:34:61:c1:5b:6f:47:5f:20:44:48:8d:3c:91:84:7a:5d:77:
         65:03:82:47:36:35:7d:10:9f:06:40:a4:cf:86:f1:fd:87:98:
         db:9b:db:fc:db:96:8f:70:14:0d:c0:df:3d:f3:95:bd:df:87:
         6a:a3:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----