Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer
File:                     5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.cer (raw, json)
Hash identifier:          k3JZiYgXh6BwYTqzVhvapEkgptVPfcbxCg5waR+Z6Z4=
Subject key identifier:   5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05B123EFC566A4E843D541B65DEADAAE2701925A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 17:59:24 +0000
Certificate not after:    Thu 12 Dec 2024 18:04:24 +0000
Subordinate resources:    AS: 263524
                          IP: 191.253.24.0/21
                          IP: 2804:1340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b1:23:ef:c5:66:a4:e8:43:d5:41:b6:5d:ea:da:ae:27:01:92:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 17:59:24 2023 GMT
            Not After : Dec 12 18:04:24 2024 GMT
        Subject: CN=5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:c4:40:86:41:cd:03:46:ac:9d:95:58:02:
                    32:ff:28:0c:66:c3:66:6a:70:11:6f:31:0c:88:76:
                    bb:77:e9:9e:d7:3a:5e:7d:0e:f9:d3:da:83:e2:b0:
                    a2:f6:94:7c:2a:35:f8:fd:b3:37:5c:08:5f:1c:ce:
                    99:ca:b8:14:32:84:86:5a:38:27:3d:b1:e4:81:dc:
                    a8:92:bc:ba:7b:aa:9a:5a:59:db:95:32:83:ea:6f:
                    8d:ed:b1:1e:62:8a:c8:06:1b:d2:8f:6c:7e:ee:60:
                    94:3f:02:96:e4:ff:7e:0b:14:8d:44:bc:be:54:db:
                    ee:54:d3:4f:d8:46:0a:95:9d:2e:ca:69:dd:b8:1c:
                    17:45:0e:1d:0b:94:1e:6d:35:80:d5:d3:7a:4c:6a:
                    c1:16:0f:4d:77:9f:8c:94:fd:d1:06:e4:ce:3b:d2:
                    66:c7:49:d1:76:b2:3c:89:d9:ba:26:41:b3:8f:80:
                    ff:a3:d3:b4:7c:0a:81:30:0c:5f:ad:ae:80:60:f0:
                    93:95:07:32:96:d3:c3:7f:c7:6d:e0:f3:67:90:2d:
                    30:ae:54:25:12:60:cc:be:b2:cf:87:4f:4a:c3:66:
                    f3:c5:72:5d:cc:da:d9:e8:23:39:9a:75:11:7a:34:
                    df:a8:13:18:ac:48:7b:ef:84:5f:bd:34:84:a2:fd:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:FA:9C:C8:0E:4D:E4:A1:A6:80:D6:A4:DE:3C:72:80:C2:62:72:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PC4JRS969A7rRwBN6EMhj6w9VcXuKf3EYYHZTyNJ2Li/0/5CFA9CC80E4DE4A1A680D6A4DE3C7280C2627258.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.24.0/21
                IPv6:
                  2804:1340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263524

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:1b:93:6f:bd:6c:cb:13:c5:19:76:99:7b:97:0b:ef:90:
         0c:14:91:d8:2b:f2:43:f4:e7:d8:c4:9d:a6:31:8c:2c:d8:f9:
         38:36:6a:88:1f:a4:a2:c2:16:75:1c:5a:48:31:1e:d1:62:d1:
         b9:1a:94:b0:bc:d0:91:ae:d9:c7:5b:4e:74:0a:f4:54:b7:74:
         f6:ce:4a:97:e9:60:e6:f8:97:9b:1f:93:e6:e0:d7:b3:96:6b:
         3c:c5:8b:60:cd:be:92:79:ba:4b:68:5f:f1:c6:8a:60:16:9c:
         4c:45:60:81:90:16:d3:bd:12:b1:cf:25:79:e8:e7:9f:b3:a0:
         c7:50:c5:e2:0e:3c:94:da:b9:c0:76:26:96:cd:08:bd:0b:21:
         2f:fc:00:8a:53:ce:94:3d:1a:39:31:ef:42:c1:0d:04:cc:df:
         5b:6b:e0:a7:e7:6e:ce:64:9d:7b:0a:17:7b:69:d5:88:44:cc:
         fa:fc:00:65:71:3b:01:1e:9b:20:6c:1a:8c:a8:e1:df:f6:c3:
         2c:59:74:cc:bc:eb:60:c4:03:40:bd:04:13:be:0a:9b:61:b4:
         f3:2f:78:84:0d:43:f0:48:c3:b1:33:5e:93:b4:7d:46:0e:0d:
         06:ac:61:c4:5e:64:54:75:2e:74:44:11:f8:e2:1c:f0:0b:ef:
         f8:3b:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----