Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.cer
File:                     406BABB94F8FBE2BD2704292973E70C7A42A2A6C.cer (raw, json)
Hash identifier:          q71y8QVbgtiMlMif3f9BEwObhw0IYMV/uKMpq3igsTc=
Subject key identifier:   40:6B:AB:B9:4F:8F:BE:2B:D2:70:42:92:97:3E:70:C7:A4:2A:2A:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       087D471492F60A7B3E369B65A21BD01B6F959128
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 19:35:18 +0000
Certificate not after:    Fri 05 Jul 2024 19:40:18 +0000
Subordinate resources:    AS: 52527
                          IP: 177.152.80.0/21
                          IP: 2804:dec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7d:47:14:92:f6:0a:7b:3e:36:9b:65:a2:1b:d0:1b:6f:95:91:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 19:35:18 2023 GMT
            Not After : Jul  5 19:40:18 2024 GMT
        Subject: CN=406BABB94F8FBE2BD2704292973E70C7A42A2A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:86:e6:94:f9:32:19:24:66:2b:51:31:ad:92:
                    fd:ca:5a:0f:ce:18:c5:91:4a:b1:85:7a:1e:41:fd:
                    ff:5f:82:0f:bf:9d:60:c1:1f:8e:00:38:f6:c3:3b:
                    5e:a8:64:fb:56:7d:13:a4:1a:df:d4:62:5c:81:74:
                    82:dd:ca:2d:ba:eb:11:fe:bd:0a:b6:92:a0:50:74:
                    d9:9f:6c:19:39:51:55:e4:ba:14:47:80:70:c7:0c:
                    22:59:8d:4f:1b:11:39:44:05:7a:8a:ed:99:98:51:
                    29:be:a9:91:19:e0:21:e2:1e:d6:7d:a7:31:1c:8d:
                    18:e5:13:cb:9f:ea:35:bc:26:d0:ae:c9:57:05:c8:
                    4e:3f:02:8d:4f:a2:dc:b1:c1:fc:97:20:10:cd:30:
                    ed:85:16:2d:da:49:1e:88:86:84:1f:70:ff:9c:27:
                    c1:c2:31:b8:e0:24:c5:93:df:57:d6:5c:6a:dd:68:
                    3e:06:12:b3:e5:a4:ed:96:45:58:3c:ff:0b:08:7b:
                    a3:57:db:50:fc:cb:bd:c3:b4:1b:93:f3:67:95:01:
                    db:49:04:f5:2a:73:c5:d5:81:97:a5:0c:86:c7:cd:
                    54:08:f9:83:ff:ac:ed:9f:1e:d2:76:f3:09:dc:ac:
                    7c:92:37:72:e5:be:f3:4d:45:e6:5c:29:02:74:63:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:6B:AB:B9:4F:8F:BE:2B:D2:70:42:92:97:3E:70:C7:A4:2A:2A:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/406BABB94F8FBE2BD2704292973E70C7A42A2A6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/21
                IPv6:
                  2804:dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52527

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:99:35:c4:75:8a:72:6e:ff:a3:e2:0f:84:8d:f5:81:67:
         3f:4f:8b:ca:1b:b5:5c:3e:be:54:6e:58:82:6a:6e:88:a7:12:
         1c:64:c5:3b:60:a8:97:7a:19:4c:17:f9:16:06:32:6a:05:44:
         6a:cf:96:47:19:ea:bc:fa:a3:aa:71:a6:10:97:f1:16:4a:05:
         99:c6:24:bf:ab:db:23:04:a0:2e:ee:f4:a7:8a:68:3c:ac:61:
         79:df:d7:10:fb:e7:53:6e:e7:a0:7f:4a:e6:ee:a8:d6:b6:e0:
         0c:5d:9b:c4:86:dd:b4:5c:22:e9:11:c7:18:71:c1:e6:9b:5a:
         b7:84:4b:c1:8b:ec:9a:94:0e:92:f0:d3:d0:ca:ec:7d:46:23:
         b7:c6:48:09:5e:66:ed:9e:36:3d:23:ac:a9:7c:84:fc:6e:0f:
         9d:61:5f:7f:f9:9e:c5:a7:96:f3:c1:a2:0e:2a:f8:7b:84:7c:
         58:ed:e7:cb:c2:f9:c6:0f:44:78:3f:cb:b4:77:8e:d0:2e:62:
         fa:33:72:b8:3e:79:92:64:ae:fd:4a:00:39:72:86:f3:ea:cd:
         e5:03:96:ae:6e:2e:37:9b:7a:4c:be:9a:96:cc:c6:20:f7:99:
         da:df:d9:fa:9a:d7:12:ab:21:85:ad:ed:60:d8:0b:76:1a:5b:
         c8:02:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----