Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer
File:                     9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.cer (raw, json)
Hash identifier:          eJ5SdoIzuua9uHLiB02LTpwt/QFEXJ3mrTj4p9T+K6Q=
Subject key identifier:   91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DC3C20BE6840F515D0017272F09CAA66300AC24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 08:17:42 +0000
Certificate not after:    Sat 07 Dec 2024 08:22:42 +0000
Subordinate resources:    AS: 267629
                          IP: 45.71.216.0/22
                          IP: 2804:4460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c3:c2:0b:e6:84:0f:51:5d:00:17:27:2f:09:ca:a6:63:00:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 08:17:42 2023 GMT
            Not After : Dec  7 08:22:42 2024 GMT
        Subject: CN=9114B30BC2958DF8A98FDDD535605A2DA6E5A37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:3b:4c:a7:e1:89:e2:cc:d0:1f:a7:2c:aa:
                    e1:24:09:4b:4b:89:f4:0a:47:5b:93:81:5c:69:02:
                    ad:5d:99:9d:11:50:2f:33:62:b2:bd:37:a4:1c:ae:
                    a2:83:3e:59:0c:63:d2:60:a3:0c:64:cb:7c:fa:2b:
                    c9:3a:c5:b2:b4:4b:72:f6:ee:e7:fd:36:ef:26:12:
                    f1:af:3a:26:8f:21:28:84:b4:78:cb:96:06:51:c0:
                    26:16:77:cf:4c:9a:95:c5:e6:39:b6:04:7d:42:7c:
                    be:48:b7:63:b8:9b:21:4f:1e:1d:9d:7f:85:b8:c1:
                    2c:09:37:ce:3a:05:0a:e8:38:9d:da:50:63:a6:7a:
                    0c:12:b6:17:fa:c9:d6:ad:f9:b2:57:71:31:29:17:
                    ad:19:15:74:78:52:3b:1a:a7:c2:91:36:61:76:b1:
                    da:db:b9:bc:16:70:a2:ea:df:a3:b3:4e:37:d4:fe:
                    ad:33:47:1e:57:14:72:6f:9e:e7:8f:ac:29:d3:6e:
                    52:a1:d8:2f:a0:6c:2c:5e:49:21:cf:01:a0:40:d8:
                    56:9e:57:01:aa:1d:3a:41:6b:cf:50:75:f5:94:d4:
                    f7:f3:5c:aa:c0:1b:36:92:5e:35:17:0b:23:8a:ad:
                    79:b2:12:e5:c8:61:55:64:63:8f:4f:f5:96:f0:f2:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:14:B3:0B:C2:95:8D:F8:A9:8F:DD:D5:35:60:5A:2D:A6:E5:A3:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/9114B30BC2958DF8A98FDDD535605A2DA6E5A37A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.216.0/22
                IPv6:
                  2804:4460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267629

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:f5:0e:08:2b:e1:3c:d8:d2:cc:a5:99:e2:38:10:f6:9f:
         f0:c4:96:26:fa:6f:b9:01:e8:09:61:d3:ec:63:da:aa:e4:b8:
         41:82:17:e3:4d:ac:18:da:d0:c3:46:c7:e4:74:17:31:8e:99:
         a8:83:52:c2:cd:5e:d7:6f:eb:0d:8b:70:c2:2f:fe:29:e1:9e:
         f9:4e:1b:f1:d4:ed:fd:5b:d4:48:31:73:be:32:32:5c:97:cc:
         9e:01:fc:c9:5e:66:98:e9:4b:01:65:a0:09:2b:21:09:79:9e:
         6d:aa:73:54:8a:ef:75:ab:3e:b7:ad:8b:70:17:a3:0b:06:7c:
         98:c5:08:b3:fd:de:fa:8c:f2:97:ed:01:2c:82:08:81:cf:28:
         12:1c:5e:9b:67:65:11:01:a9:59:f1:04:d0:c2:85:5a:e2:24:
         6e:e7:49:ae:4f:55:9d:87:0b:34:c7:91:85:2d:d7:39:e3:0d:
         c6:34:ec:af:f3:f5:f0:26:9e:bb:38:b7:1d:b4:a4:08:bd:f7:
         82:47:97:38:a0:97:7a:19:8d:c7:8d:ef:c7:3f:af:4d:09:3a:
         7a:d2:c5:f6:e3:b3:b9:ea:fd:fc:a1:6a:1d:3d:e0:0d:b4:c2:
         c8:fb:c7:d6:59:6e:53:b8:a4:d1:48:14:f4:e4:53:38:f5:85:
         99:a9:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----