Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
File:                     913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer (raw, json)
Hash identifier:          gGOOnCu9SQ054Jwz8dHY0h4dO9bSstSbKnlOi02W1XA=
Subject key identifier:   91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       247965B2829356B2623A26C301E40DC124990B9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 18:45:12 +0000
Certificate not after:    Wed 10 Jul 2024 18:50:12 +0000
Subordinate resources:    AS: 271419
                          IP: 200.39.52.0/22
                          IP: 2804:7b3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:65:b2:82:93:56:b2:62:3a:26:c3:01:e4:0d:c1:24:99:0b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 18:45:12 2023 GMT
            Not After : Jul 10 18:50:12 2024 GMT
        Subject: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:f8:b1:9e:bb:4a:34:f8:8b:fd:b8:cf:dc:
                    e2:77:e3:14:d5:4d:5b:7a:9e:9c:eb:87:44:aa:ae:
                    3f:29:b5:6c:4d:23:38:0d:b2:d0:3f:35:39:7b:4c:
                    f9:95:62:68:85:f9:31:9e:d1:47:0b:80:c9:2c:42:
                    a2:8f:16:55:40:26:73:fc:38:8c:bc:04:d0:4c:a9:
                    f6:f7:50:b8:af:d4:03:8d:91:d5:93:92:46:12:a5:
                    2b:de:f4:ad:b3:a1:ab:92:c7:28:37:7e:ad:3c:9a:
                    80:18:30:d0:2a:b2:9f:d7:51:ff:8a:37:8c:81:11:
                    cf:27:85:6f:a6:4e:c2:31:f8:e7:9d:42:f5:0b:a0:
                    90:ce:b7:09:09:e5:ae:29:c2:d0:46:e7:68:70:4b:
                    94:9a:09:b3:5a:70:71:ff:a8:f9:a1:df:17:fe:2e:
                    1c:4f:f4:2b:f3:7c:b7:81:a5:7c:f9:f7:47:82:52:
                    1d:8f:d6:cc:79:6a:ca:29:7f:f7:af:7f:76:72:d5:
                    aa:9f:38:78:5b:54:93:58:3d:20:0a:1a:51:78:63:
                    f1:d4:10:0d:62:78:a0:68:af:90:0e:5d:df:26:84:
                    27:96:7a:3a:3e:42:d4:3a:73:a2:23:f7:5f:27:ca:
                    b0:b9:bc:ea:19:ee:c9:55:cf:8f:3f:77:d7:e3:cd:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.52.0/22
                IPv6:
                  2804:7b3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271419

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:00:61:26:23:4a:86:b0:a1:37:59:38:3c:35:d1:1f:be:
         bc:4d:8c:03:a2:72:ec:b1:41:b1:71:72:a8:f1:19:86:99:2e:
         f6:39:a0:e4:75:cc:6c:16:8e:0b:f6:3b:1e:1e:fd:e1:a9:81:
         eb:c4:5b:7e:5f:f8:c1:aa:4a:92:82:86:2e:e9:93:9c:ad:28:
         85:c4:f6:2a:88:71:b2:07:31:65:26:aa:d4:c5:85:fe:57:0e:
         7a:bd:c8:e4:57:1c:21:02:7f:37:20:0b:33:e3:3f:ff:a7:b9:
         67:88:66:70:19:cf:db:f4:2b:0c:25:90:1c:46:9d:63:f1:29:
         d5:07:c6:16:0e:2a:75:44:04:79:89:3c:40:ff:3b:a3:7d:89:
         40:8b:bf:ac:c8:50:05:2d:83:fb:ef:11:86:7c:76:d0:fb:06:
         63:c7:3d:d7:85:af:71:3e:f1:b8:f0:5d:57:4e:ef:c8:29:66:
         94:61:fa:56:93:0f:55:21:b3:c8:39:3e:15:97:cf:df:7c:28:
         e3:b6:e0:4f:55:b8:99:ed:b2:47:1f:b9:4a:5a:01:a1:2c:f0:
         99:28:63:7d:29:23:50:4e:c6:12:31:84:40:6d:8a:9d:33:15:
         a7:c9:f8:04:f4:da:15:d9:c5:55:26:da:69:90:17:b9:ad:c6:
         8e:6a:c5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----