Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer
File:                     2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer (raw, json)
Hash identifier:          JCWN5fWT4aPQR9qZe7qHdQSL/6ylCuZuHXfI/mpl0bw=
Subject key identifier:   2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BA831EE1633FBED5C081FBC794E7FAC3C28FE2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 14:08:24 +0000
Certificate not after:    Thu 28 Nov 2024 14:13:24 +0000
Subordinate resources:    AS: 266998
                          IP: 45.225.168.0/22
                          IP: 2804:4694::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a8:31:ee:16:33:fb:ed:5c:08:1f:bc:79:4e:7f:ac:3c:28:fe:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 14:08:24 2023 GMT
            Not After : Nov 28 14:13:24 2024 GMT
        Subject: CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:be:ec:f9:b1:a0:7c:c8:ad:b5:78:47:30:
                    93:9d:81:9f:16:c2:4b:61:90:ca:e4:e7:c1:29:02:
                    da:bd:c3:ec:88:41:07:a2:a4:61:67:52:22:e5:24:
                    39:70:0c:1e:9f:cb:61:6e:d2:34:fc:13:7b:c6:e9:
                    3f:a7:78:76:31:d1:db:49:6e:09:2c:39:d7:73:1f:
                    79:51:c3:fe:ad:04:25:ab:6b:b7:81:e4:ad:34:99:
                    ba:72:4b:6b:67:2b:67:54:2f:44:ca:28:d3:80:92:
                    ca:1b:cc:47:20:68:d3:c9:6e:0f:71:db:7c:8a:cf:
                    fc:92:80:28:a5:2c:fb:5c:d1:74:07:b1:e6:10:0a:
                    aa:37:92:14:59:13:a2:4e:df:52:72:9c:74:68:57:
                    89:81:85:39:2e:04:a5:4f:6f:68:08:15:7e:64:8b:
                    24:31:0a:b1:74:ad:1c:50:82:40:d6:ee:c9:f8:d5:
                    ac:71:cf:e2:12:30:f4:e6:0a:ea:98:77:a2:8f:5a:
                    7b:d9:1a:0d:ec:19:f4:6e:d1:df:e5:57:e5:58:1b:
                    d2:c7:7e:98:78:af:dc:3f:52:c1:32:01:fa:0d:b0:
                    b6:f4:dc:82:06:22:d9:97:26:0d:d3:9e:38:75:35:
                    35:d8:b5:eb:27:84:f5:77:ad:89:b4:90:32:7f:2f:
                    58:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.168.0/22
                IPv6:
                  2804:4694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266998

    Signature Algorithm: sha256WithRSAEncryption
         a2:a7:da:b5:c8:13:60:d0:cf:d3:8d:a2:0c:c9:02:c6:69:c8:
         b5:c1:53:13:82:10:5a:69:34:a8:08:cf:4f:42:a2:ec:47:3d:
         e0:ad:69:34:03:c5:c4:23:f8:79:9b:30:bc:95:db:0c:36:d7:
         c1:e0:5b:73:a1:56:19:f2:b7:e1:ea:e0:60:4a:b1:a0:49:0d:
         f0:c0:5f:81:bd:c2:64:fc:04:7e:65:fa:2b:a7:e3:a9:66:84:
         ce:c4:ed:90:24:a4:e9:70:6f:2b:21:ae:a9:87:45:18:18:d5:
         2f:c6:c1:96:0c:77:7c:dc:01:73:dd:ee:54:18:ea:85:82:b4:
         ec:21:51:16:50:d0:08:c1:44:72:df:e5:b0:ae:7e:41:b5:fd:
         ce:f4:13:12:65:3e:c0:35:68:7b:0d:8d:8f:ce:cd:aa:db:ff:
         e1:33:2c:85:97:22:56:10:2b:8d:6c:9a:a8:39:dd:80:66:a5:
         b0:6d:ca:a4:de:8c:35:d3:fd:fb:84:70:79:fe:c6:4f:49:53:
         42:59:d7:5f:aa:e5:71:3a:89:5d:82:f0:14:f8:9d:b1:18:55:
         22:0d:7f:5d:d9:67:2c:94:1a:57:d4:24:41:fb:0a:94:9a:56:
         bc:c2:de:c0:36:71:ce:67:14:d3:8c:4b:ee:4a:78:6d:14:3e:
         71:ec:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----