Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/93227EF0B521835744286626F41BC6987D47D43E.cer
File:                     93227EF0B521835744286626F41BC6987D47D43E.cer (raw, json)
Hash identifier:          R8VsaBoLmaf0x8NNQozQJTppM4zpEvganY30Sm/4IlU=
Subject key identifier:   93:22:7E:F0:B5:21:83:57:44:28:66:26:F4:1B:C6:98:7D:47:D4:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72DC911C5DB3563A7A53F72315F63AA8172D1722
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/93227EF0B521835744286626F41BC6987D47D43E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 14:18:00 +0000
Certificate not after:    Wed 04 Dec 2024 14:23:00 +0000
Subordinate resources:    AS: 270463
                          IP: 200.81.48.0/22
                          IP: 2804:6c5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dc:91:1c:5d:b3:56:3a:7a:53:f7:23:15:f6:3a:a8:17:2d:17:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 14:18:00 2023 GMT
            Not After : Dec  4 14:23:00 2024 GMT
        Subject: CN=93227EF0B521835744286626F41BC6987D47D43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:e3:a3:e7:76:5d:b2:f4:40:2b:6f:a0:1a:
                    89:39:99:c9:47:84:c6:31:7d:f7:d0:e8:77:fa:6c:
                    ce:d5:40:b7:94:cc:2e:46:7f:f3:5b:78:fe:77:9a:
                    a7:ad:31:f7:8d:a0:66:8a:9b:3f:9f:1b:1c:08:de:
                    e3:80:87:59:7c:ee:91:8f:69:3b:f4:7a:87:bc:a3:
                    2c:18:7c:92:e7:b2:20:ec:10:e9:db:44:10:66:c3:
                    be:e6:26:21:8b:9b:14:ab:8b:4b:fd:ab:f0:df:6a:
                    53:3f:20:c3:a4:63:6b:63:0e:ef:f0:87:08:68:d2:
                    16:6a:43:57:13:93:9b:2f:5f:eb:12:2c:5a:10:4b:
                    f7:3a:77:c4:f0:31:ec:3f:23:5a:b6:17:f4:a3:20:
                    4a:91:84:e4:8d:bb:18:7f:7d:71:a2:3c:d6:2b:af:
                    f4:6f:d5:99:11:f7:72:ff:76:07:80:54:81:9f:cf:
                    01:92:d3:57:40:b9:a5:67:88:17:f9:68:38:a9:17:
                    e0:0a:10:9d:4a:19:3c:a2:ce:db:57:0a:e3:38:12:
                    32:02:d7:c7:37:c7:08:bc:92:df:fe:ff:81:30:99:
                    c6:1a:21:f9:23:61:0e:f3:6b:13:62:69:a2:af:aa:
                    00:ed:bb:e4:49:d4:f8:a6:55:14:b4:ac:8d:4b:ab:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:22:7E:F0:B5:21:83:57:44:28:66:26:F4:1B:C6:98:7D:47:D4:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/93227EF0B521835744286626F41BC6987D47D43E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22
                IPv6:
                  2804:6c5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270463

    Signature Algorithm: sha256WithRSAEncryption
         17:17:18:f1:a3:44:1d:bd:c9:8e:de:fc:aa:f4:b2:ac:1f:44:
         64:1a:6d:ea:00:ea:4b:5f:89:02:84:86:23:df:88:68:7b:79:
         9d:42:91:61:37:4d:36:b5:88:ab:c8:8c:ea:23:12:ac:33:00:
         bc:95:a8:25:20:09:1d:26:64:97:06:39:05:cc:ae:8b:01:4f:
         3c:b6:dd:5c:ce:45:d2:c3:42:5b:55:8e:45:c6:fe:3c:c1:5c:
         db:27:85:22:21:e3:ab:80:2e:f3:3b:25:1d:8a:7f:83:1f:c4:
         d7:e1:45:36:23:0a:18:d0:c5:9d:3e:6b:5a:b8:a6:1d:8f:e6:
         92:16:81:4f:9d:7d:5d:59:42:57:36:b3:d8:ba:73:e6:e6:a9:
         3c:31:1e:3d:18:06:87:e9:2a:9e:30:ee:41:f0:66:e6:2d:8e:
         4b:86:13:b0:f8:68:36:6f:64:e5:e4:da:ba:fa:04:f9:09:6c:
         90:49:fc:86:ce:c5:93:3e:79:a5:ec:7d:50:7f:ff:e5:00:12:
         bb:43:fc:4c:36:cb:3c:92:67:64:8b:e1:06:57:68:a3:e4:03:
         27:ac:54:da:b2:9a:59:fa:f8:a6:b8:5e:cd:33:67:65:0f:b3:
         03:59:55:0d:97:2c:b9:5b:de:3d:de:7e:0a:13:d3:1e:17:75:
         60:37:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----