Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer
File:                     2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.cer (raw, json)
Hash identifier:          caM8rhYTyRUuG0NXWAqxuzFnx9SfdP3iwmuUMg9kftk=
Subject key identifier:   2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32893635CFCF94798929C7110A9BC277F02D8FFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:15 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:15 +0000
Subordinate resources:    AS: 271589
                          IP: 177.184.208.0/22
                          IP: 2804:7de4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:89:36:35:cf:cf:94:79:89:29:c7:11:0a:9b:c2:77:f0:2d:8f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:15 2024 GMT
            Not After : Feb 11 12:45:15 2025 GMT
        Subject: CN=2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:11:eb:eb:a9:0b:5b:28:b8:f0:63:19:55:
                    7d:88:ec:66:a1:04:88:60:e3:fc:10:98:23:59:ad:
                    c5:46:e0:1c:36:42:1e:ca:8c:b1:d9:8f:ad:47:67:
                    52:a9:94:fb:c1:a7:c1:77:e5:7c:1f:1e:08:29:50:
                    9e:cb:d4:fa:ed:b1:5a:61:f1:f8:a7:cd:65:e9:8d:
                    bc:6c:a0:1d:69:74:c1:97:f6:52:a1:d1:c1:21:2e:
                    e0:3d:16:35:08:9e:4f:7d:f2:8b:a0:a6:58:9c:27:
                    18:a4:ad:05:66:b4:4a:56:d8:7c:9a:39:e3:73:33:
                    bf:3a:f4:cd:6b:59:47:ae:17:58:5a:cb:62:c6:3c:
                    59:4c:08:11:7a:5d:ca:e6:9b:84:30:bf:b1:b8:ac:
                    ef:29:31:7d:31:c4:da:6e:b8:c4:7c:c6:de:73:a6:
                    88:94:39:c8:f4:ad:66:ec:13:c6:22:1f:65:2a:58:
                    a5:92:e4:a7:a5:02:d7:e5:65:3e:de:2e:4b:52:bc:
                    7e:03:ff:c5:4b:7e:b0:7d:09:bd:cb:c8:67:9c:97:
                    be:1b:97:bf:c2:c7:bc:e1:fe:98:70:04:bb:cf:8a:
                    c0:1d:0e:a0:f6:17:c9:ea:3f:0c:8f:2d:1d:b6:1b:
                    00:f2:a9:6c:40:44:31:e2:b7:0e:80:b5:fe:de:0c:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:C0:C7:3B:B0:AC:C7:A9:74:7F:8E:96:22:4D:53:7C:BA:2C:AE:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/0/2CC0C73BB0ACC7A9747F8E96224D537CBA2CAE69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.208.0/22
                IPv6:
                  2804:7de4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271589

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:3c:c0:92:a9:26:3e:1f:2a:8f:d6:c8:38:bc:44:9a:e9:
         96:34:78:a6:e3:c4:fb:8a:f7:d7:a0:fd:18:fa:f2:3d:c4:7c:
         2e:0d:12:00:b5:65:9a:8e:f3:6f:50:e5:55:01:1b:32:b5:26:
         ee:27:17:41:72:e2:5a:7a:8d:40:8e:55:fe:20:87:33:41:45:
         22:e7:77:ff:5f:82:ec:5d:1e:c4:19:d6:46:46:32:cb:74:f0:
         b2:31:ce:96:2c:f1:a4:60:f6:08:1b:1d:8d:41:df:2e:bd:95:
         d0:8f:94:4d:9c:a4:81:6a:f6:16:f2:78:ed:fd:94:9b:da:34:
         33:bc:10:f5:65:df:f4:5a:5f:3e:39:09:ba:d7:6d:fa:4c:79:
         8d:4c:28:f8:44:c3:16:0a:97:49:84:43:45:f6:1c:8c:09:eb:
         3b:ab:61:ed:8a:90:b2:9f:8d:25:be:b7:8c:42:44:f3:19:12:
         b9:24:54:73:5d:b2:84:58:95:5e:b2:13:56:01:a2:6e:b1:ce:
         6b:d2:9c:28:73:33:58:7b:a8:99:8e:51:8a:89:1a:36:b2:a1:
         b2:b0:68:bc:bb:4c:99:f8:16:0f:81:3b:4a:f3:91:f6:e5:2a:
         57:71:12:0f:53:fc:92:19:64:af:66:d1:65:54:b4:8b:14:1b:
         36:10:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----