Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer
File:                     8AC235BC60EADB8095B935DFEE5FC7047348B33B.cer (raw, json)
Hash identifier:          thC58BYz1mV4BYfWqRQmV1mMc1z9igHcWrVvYonoVrE=
Subject key identifier:   8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C9D9A2B52805FBA5FAAAE0426D90198C587E10B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 22:10:22 +0000
Certificate not after:    Wed 04 Sep 2024 22:15:22 +0000
Subordinate resources:    AS: 270888
                          IP: 177.129.240.0/22
                          IP: 2804:72fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9d:9a:2b:52:80:5f:ba:5f:aa:ae:04:26:d9:01:98:c5:87:e1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 22:10:22 2023 GMT
            Not After : Sep  4 22:15:22 2024 GMT
        Subject: CN=8AC235BC60EADB8095B935DFEE5FC7047348B33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:3c:88:58:98:ff:37:2a:55:bd:ee:c5:4f:
                    78:2f:59:af:e3:41:e4:52:7b:18:de:ac:fc:e2:3a:
                    f1:1d:c0:85:09:cb:c1:95:1f:d1:ec:89:2e:8d:8f:
                    93:65:f8:cd:ee:4a:e7:1f:bb:5d:44:ea:a3:36:86:
                    1c:61:f9:51:bc:a7:77:77:c1:39:cd:b6:67:1c:7d:
                    ee:c9:04:50:74:b9:5e:ef:ea:a6:90:40:9d:45:32:
                    42:82:9b:e7:be:66:96:bd:e2:3c:d1:c3:35:c1:32:
                    f6:96:52:53:78:6a:4c:90:88:05:9c:c0:b6:99:3f:
                    cc:c1:4b:bd:98:2d:70:2f:d7:92:b8:2d:b7:f5:68:
                    d1:c6:b7:e3:39:00:40:22:94:32:90:2a:ce:ab:01:
                    ec:5a:40:d0:80:c9:7e:13:2e:42:fd:5d:6b:42:ef:
                    9d:c3:5e:89:1c:7a:15:0b:7f:09:d9:9d:74:07:93:
                    08:00:fb:32:1e:11:4c:44:a2:4e:e6:49:84:35:f4:
                    16:07:4e:ef:44:18:4f:bf:7e:a2:12:b3:2c:ad:f3:
                    e5:2b:75:ad:99:d5:e9:35:30:47:0c:98:33:c8:d6:
                    c7:12:bb:32:79:68:c0:b4:4d:f9:98:33:4a:39:25:
                    09:1d:8d:3b:20:e0:a9:61:e7:e4:72:b8:78:6e:2f:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:C2:35:BC:60:EA:DB:80:95:B9:35:DF:EE:5F:C7:04:73:48:B3:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/8AC235BC60EADB8095B935DFEE5FC7047348B33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.240.0/22
                IPv6:
                  2804:72fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270888

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:55:09:b5:d4:2d:92:2d:83:e7:90:34:38:ec:c8:4d:a8:
         cd:68:10:e6:37:74:98:d1:41:f5:6d:bb:20:2a:05:36:88:53:
         6c:fa:1c:03:0c:30:b9:a5:15:e7:1f:38:98:37:d1:b3:f3:28:
         95:05:dc:d3:da:3a:99:71:39:15:87:e8:ad:bc:ee:d8:bb:c9:
         72:dc:57:d8:34:4e:63:1c:df:7c:8a:8c:55:73:82:94:9b:ec:
         cb:00:6c:d8:d1:b3:f8:32:49:ac:93:ba:cc:99:e7:5f:cc:fa:
         d1:1b:d3:bf:a4:fe:2e:df:68:3d:15:83:94:98:87:f1:69:36:
         c6:20:4a:fc:23:e4:fc:ec:51:f4:59:3d:80:df:ba:78:d6:d9:
         3e:65:a6:16:8c:ff:1b:37:5e:fa:32:a8:6b:9c:04:62:9a:6c:
         5a:60:9f:68:27:1c:31:24:de:84:42:8c:05:40:dd:a5:e4:5b:
         9a:ca:c8:b4:17:04:0f:22:33:84:1d:42:a3:ed:d1:6f:18:5f:
         04:1c:6d:12:6d:cf:a6:5b:ff:20:e3:4e:50:86:d8:31:39:cd:
         93:ed:d4:d8:4c:d3:cf:5a:e3:e2:b9:66:2a:43:23:8b:46:22:
         24:96:b7:8a:72:bd:0c:d7:83:bb:4d:24:fd:87:db:7e:dc:aa:
         69:7f:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----