Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer
File:                     34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.cer (raw, json)
Hash identifier:          IQsEPAT/8ZzMszh1r0oqjpMw/BFCa3hWI7OYtW9qAo4=
Subject key identifier:   34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08B79A9753F0A8D9E19E85F641E43D83931CEAA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 05:44:59 +0000
Certificate not after:    Mon 25 Nov 2024 05:49:59 +0000
Subordinate resources:    AS: 271343
                          IP: 200.39.36.0/22
                          IP: 2804:7a08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:9a:97:53:f0:a8:d9:e1:9e:85:f6:41:e4:3d:83:93:1c:ea:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 27 05:44:59 2023 GMT
            Not After : Nov 25 05:49:59 2024 GMT
        Subject: CN=34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:ad:d8:9f:55:33:99:97:61:71:39:03:85:
                    31:5c:5a:54:fe:2b:7a:25:ec:23:b0:b7:0b:be:13:
                    6f:12:74:c6:1c:02:e5:3d:d6:9a:a5:e0:17:6d:58:
                    c7:f7:52:32:9d:4e:a6:c2:a2:0d:73:f0:c8:47:bc:
                    be:d3:2a:01:84:0f:e4:8a:ba:e4:6e:04:b8:92:de:
                    87:fb:a6:a2:16:2c:f3:44:e2:08:c1:a6:59:85:37:
                    04:cf:12:0a:f7:e4:a9:98:16:ea:2f:ad:89:bd:a9:
                    81:38:b7:fe:12:4f:23:e8:27:49:a6:2a:cb:24:94:
                    d3:9d:8d:e7:d1:ba:d6:da:97:b5:de:9a:e3:98:0f:
                    36:b7:18:0f:7d:f5:38:e8:5e:56:76:38:71:30:00:
                    2b:dc:11:91:48:d6:69:67:9b:12:8d:a4:93:a5:77:
                    60:09:dc:ba:36:be:ca:83:e2:6a:54:c9:cb:e4:a4:
                    9f:80:19:5e:0a:71:5c:53:ec:a6:bf:bd:a1:25:c1:
                    db:6f:3a:8e:0f:49:30:69:a2:b0:31:aa:3a:88:f5:
                    73:1d:cb:a1:35:88:92:c9:30:ed:0d:4e:e9:cc:9b:
                    55:3f:e0:b9:a0:80:3e:17:0d:ff:28:68:f0:15:18:
                    80:44:a1:93:48:34:b8:2a:fc:4a:4e:fe:4e:ee:16:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:78:12:68:AC:D3:16:DE:26:79:A9:F8:A0:0E:8B:7B:F1:CE:AF:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/0/34781268ACD316DE2679A9F8A00E8B7BF1CEAF1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.36.0/22
                IPv6:
                  2804:7a08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271343

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:a5:48:eb:30:7d:40:dc:34:7d:c8:05:0e:ef:26:a4:d3:
         e2:11:45:fb:ab:b6:e3:85:7a:9e:f1:31:a5:2a:10:ea:53:f1:
         82:f1:77:6e:75:d9:08:39:6e:a6:68:14:78:d7:be:b2:b8:c1:
         da:c7:e5:fe:c3:a6:79:a7:e7:23:a0:c3:be:79:a9:af:cb:4d:
         20:a4:ec:8d:90:b8:90:75:57:f7:cd:88:56:00:a5:3a:bf:b7:
         b8:43:cc:2b:f8:83:76:27:1a:b2:09:e8:f0:6a:49:7e:47:16:
         42:2b:82:e6:87:8b:1d:6d:7c:75:f2:1d:de:ae:58:c9:f2:5e:
         5e:15:5e:f2:3f:aa:ca:44:47:df:ca:ae:2d:4f:9a:0d:3c:03:
         08:12:6a:3a:3e:6d:ac:3c:6f:02:d3:54:9f:ee:8b:4e:df:78:
         06:23:2a:ba:e8:c8:02:aa:2a:d7:5d:48:b0:05:82:33:ec:f6:
         c6:09:f9:97:a5:cd:eb:8d:3b:5a:e4:e0:6b:f2:ca:c8:ef:dd:
         4f:a0:9f:25:3a:51:fd:2e:dc:49:9e:50:57:b5:51:14:dd:50:
         4e:bc:b4:a1:2b:09:4c:38:04:66:d2:6a:3c:4f:ef:88:6c:b1:
         8a:69:90:b2:ae:a3:01:c2:33:1b:53:b6:4b:9e:89:9b:87:ff:
         c5:b4:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----