Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8D81805AEEEB4D2EE35DD2B6C7C170A5E94E940D.cer
File:                     8D81805AEEEB4D2EE35DD2B6C7C170A5E94E940D.cer (raw, json)
Hash identifier:          uTHeVGpQPkFo1ZSjQCJMcMSJdclgOLlsJr4BySi4RxE=
Subject key identifier:   8D:81:80:5A:EE:EB:4D:2E:E3:5D:D2:B6:C7:C1:70:A5:E9:4E:94:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       261D6E7E286EA2E537F902869273B0D35B993195
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/0/8D81805AEEEB4D2EE35DD2B6C7C170A5E94E940D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:14 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:14 +0000
Subordinate resources:    AS: 52960
                          IP: 177.23.160.0/21
                          IP: 2804:3a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1d:6e:7e:28:6e:a2:e5:37:f9:02:86:92:73:b0:d3:5b:99:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:14 2024 GMT
            Not After : Feb 11 12:45:14 2025 GMT
        Subject: CN=8D81805AEEEB4D2EE35DD2B6C7C170A5E94E940D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:eb:49:78:68:e5:23:35:36:18:f7:09:4a:
                    89:2b:ba:7b:d7:0b:ca:79:78:61:de:18:d9:1d:55:
                    e1:7c:0a:e2:4c:97:6a:0a:10:1d:62:f2:14:30:d4:
                    d1:c1:01:de:b6:1a:f7:a7:f6:09:1d:44:0b:04:55:
                    25:78:4d:16:54:f5:cd:d3:71:51:ee:20:8c:f0:75:
                    04:f4:f8:f6:67:f8:4f:51:df:19:e0:42:28:c6:23:
                    e0:69:fc:49:78:89:d4:d5:28:8a:d4:50:ae:87:30:
                    0a:d2:bb:c2:8b:e7:8e:33:f8:c0:65:18:a3:97:c7:
                    c4:1e:25:d1:b0:44:f8:06:ea:f9:99:39:2a:13:99:
                    b3:bf:97:89:b5:ad:b4:e5:82:a0:6d:77:06:3f:af:
                    35:93:cb:29:d6:2e:c3:39:cf:8b:c5:9c:16:33:07:
                    8c:20:b8:10:87:ef:59:29:ae:c6:99:57:72:90:51:
                    73:56:73:70:88:33:37:56:86:c8:ab:74:30:42:27:
                    62:22:9e:f5:7b:46:22:51:72:b6:17:c5:97:8f:8d:
                    65:33:90:8c:40:52:69:fa:df:7d:ff:ac:94:96:33:
                    50:65:6f:fb:e4:4c:e6:2a:36:7a:17:53:ed:f9:4f:
                    da:6d:71:2b:7c:7b:6c:86:63:f4:48:97:ed:a1:d7:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:81:80:5A:EE:EB:4D:2E:E3:5D:D2:B6:C7:C1:70:A5:E9:4E:94:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZoKhyJqLw16efaLf4dCfdCS6DFhPDb1J9vswcpfvNUa/0/8D81805AEEEB4D2EE35DD2B6C7C170A5E94E940D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.160.0/21
                IPv6:
                  2804:3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52960

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:3f:d0:74:c2:5f:d5:12:33:d6:d4:fb:1f:2d:06:eb:d2:
         5c:94:20:e6:7e:b3:ab:2e:de:b3:a4:64:e3:64:71:8a:da:f3:
         83:ad:fc:17:11:49:f3:df:98:a2:b0:39:8a:75:0d:a9:7f:38:
         66:cc:98:7c:ea:ee:b4:cd:98:b7:0f:28:43:b7:2b:a1:0d:6e:
         2b:1d:d8:c3:ac:65:e5:5c:ed:06:50:62:8b:60:68:b7:ec:1c:
         80:33:94:2b:46:04:30:c6:de:f8:5e:d5:82:a5:dd:f3:7f:8c:
         23:a1:26:7d:55:b9:4d:7c:71:69:82:c8:56:0c:b0:b3:29:b6:
         d8:ed:c7:45:bd:52:d9:ed:b9:72:d7:a5:65:9f:ae:4f:d2:d9:
         f3:4f:a0:e6:eb:bf:02:a8:9d:da:f2:22:d6:94:35:06:c1:85:
         60:70:7c:bc:e4:b5:52:90:85:7e:08:58:bd:92:1c:d3:50:01:
         1e:e7:dc:4d:dc:5b:c5:c3:bb:96:92:ff:fc:12:df:d6:4c:b1:
         fb:aa:60:63:63:15:0b:fb:21:f4:eb:d5:78:1a:86:cc:b4:82:
         39:48:40:37:ce:7e:9f:3d:d8:0f:3b:4c:35:96:ff:92:45:89:
         65:95:15:67:fd:dd:ea:3e:c0:2d:25:47:69:e0:6b:4b:10:1b:
         13:e3:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----