Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer
File:                     86F4F5F3F82C697369F8DC3463D628990698CCBA.cer (raw, json)
Hash identifier:          ojAiWOrUVzAM19L6E9y0dKKvMtjAXOdtqM+C19Vfz+I=
Subject key identifier:   86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38D8884AA130C53A6B09E44C9F18F3954B5213B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Aug 2023 16:35:11 +0000
Certificate not after:    Fri 16 Aug 2024 16:40:11 +0000
Subordinate resources:    AS: 264005
                          IP: 143.0.148.0/22
                          IP: 168.194.48.0/22
                          IP: 2804:293c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d8:88:4a:a1:30:c5:3a:6b:09:e4:4c:9f:18:f3:95:4b:52:13:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 18 16:35:11 2023 GMT
            Not After : Aug 16 16:40:11 2024 GMT
        Subject: CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:9e:df:a5:74:b9:e4:09:4c:8a:a2:17:8e:
                    90:c4:cd:32:97:17:5b:5a:05:ed:86:f0:17:c4:62:
                    cf:9a:ec:39:bf:48:f1:c9:71:c8:a2:cd:6f:81:cd:
                    c6:ee:d5:df:8f:15:40:91:1f:c7:1d:4a:33:ba:0b:
                    1b:8d:e6:14:bc:bb:bf:e0:86:50:76:f6:bf:4d:26:
                    db:88:d4:c9:c8:54:02:85:1f:70:08:42:24:c1:93:
                    9d:ad:76:ba:5f:fc:e9:44:5b:55:ea:a5:55:52:3b:
                    8e:3c:88:01:ff:59:3a:26:f9:66:57:75:0b:28:7d:
                    93:2d:dc:49:a8:d9:b4:2e:6b:c1:e4:7a:47:2a:52:
                    cf:96:ed:38:bc:a4:47:de:57:35:71:4d:4b:4e:7a:
                    83:3f:65:c0:1f:c6:66:a4:be:dd:91:d4:2c:57:fb:
                    02:75:b1:77:a8:0d:35:bb:da:28:77:5b:08:47:bf:
                    05:bd:57:3d:0e:c0:9d:61:c6:00:f9:0a:8f:a3:59:
                    8d:52:ed:fb:bc:89:e8:b9:dd:9e:b7:ed:bf:86:fc:
                    6e:d9:f7:67:86:31:e3:a9:0c:2c:66:10:05:ff:a9:
                    30:37:e4:0f:7b:b0:86:a8:ea:d0:4b:98:1c:bc:40:
                    7d:30:80:96:66:73:45:7b:5f:27:52:88:6c:65:b0:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.148.0/22
                  168.194.48.0/22
                IPv6:
                  2804:293c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264005

    Signature Algorithm: sha256WithRSAEncryption
         10:44:55:63:7e:7e:42:24:66:b3:50:75:78:b0:a6:6b:7f:dc:
         ec:c5:82:55:f1:9a:63:30:09:10:f7:86:71:c3:ce:f4:7a:52:
         13:3d:04:89:d1:a9:f7:d7:79:1d:db:66:53:c5:1d:db:b7:67:
         eb:7a:b2:e3:0f:c5:78:9e:da:ce:a5:fb:c7:56:4a:b4:22:0d:
         5d:a9:57:98:ee:a3:88:b7:b6:e6:9c:71:3f:58:3d:6d:73:12:
         de:fe:f5:03:f5:8d:c6:a8:7e:5b:5c:9f:70:9c:c0:f8:69:07:
         a0:34:77:fe:4c:77:4e:cb:46:a2:d2:96:8e:5a:f1:fd:6c:45:
         40:56:96:43:a2:de:dc:60:5f:a9:c4:19:8f:40:f7:34:7b:91:
         ff:de:99:35:a1:8f:90:de:e0:84:34:25:d8:2b:3b:2f:fc:7a:
         6f:03:d2:16:33:25:5d:3e:ad:b6:62:fa:5d:e8:f0:f1:c8:a9:
         70:77:ff:17:6e:fb:bc:83:0e:12:64:ac:da:5d:e8:66:a2:02:
         22:71:27:f6:2c:a7:b6:37:cb:4e:57:60:97:0f:24:32:dc:a8:
         2e:b4:fb:36:dc:4b:db:c3:e5:3e:1d:81:ca:b8:32:c5:0b:d9:
         af:ac:7d:5a:9d:af:99:7d:e1:d1:7c:e3:a7:aa:48:0d:2a:ea:
         01:5f:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----