Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer
File:                     98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.cer (raw, json)
Hash identifier:          cBRb/LaPjbXTTwN6+dkvPWKHuGVLmxLKE7fjFaL9My8=
Subject key identifier:   98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       104835544907D3F417423BAFF75947367A8661A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 May 2023 11:27:07 +0000
Certificate not after:    Sat 25 May 2024 11:32:07 +0000
Subordinate resources:    AS: 271544
                          IP: 179.63.116.0/22
                          IP: 2804:7d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:48:35:54:49:07:d3:f4:17:42:3b:af:f7:59:47:36:7a:86:61:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 27 11:27:07 2023 GMT
            Not After : May 25 11:32:07 2024 GMT
        Subject: CN=98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:6f:16:2b:bf:10:82:8c:ab:b0:93:a7:b3:
                    aa:16:ce:98:49:f2:27:70:50:c7:a9:9c:d1:73:94:
                    ea:e8:42:08:ae:f7:e0:48:b1:8d:3e:fe:70:ed:0f:
                    5b:eb:86:ad:ca:73:f4:34:fe:09:84:85:10:93:39:
                    8a:9e:ec:dc:13:81:ab:4f:50:d2:5c:ef:0e:43:c6:
                    50:a7:3f:31:a3:cd:ab:f5:44:a0:55:46:6c:9d:64:
                    86:8a:97:db:43:b8:47:d3:aa:79:e3:b2:1f:b4:15:
                    31:d6:4e:ac:13:6e:cf:08:72:60:f0:17:69:9f:c2:
                    04:f1:ec:fc:e3:7f:c0:3c:13:b7:d0:4c:1e:c6:c5:
                    05:16:39:cd:61:7b:7f:91:67:83:2f:fb:58:f3:d7:
                    74:4e:fe:a3:da:37:94:7f:9c:ac:17:bf:f5:0a:73:
                    9c:e8:46:ea:e7:de:c8:6d:9e:01:5b:49:f7:69:dd:
                    36:d7:62:98:6b:99:29:bc:ab:5e:2d:47:52:b9:d0:
                    bc:5d:74:5a:67:be:d5:a1:61:e1:73:0c:c1:81:be:
                    2e:e9:f1:56:ef:cf:69:38:91:14:39:06:22:d1:e9:
                    10:50:02:08:ce:4d:76:70:cc:94:56:86:93:23:92:
                    87:4f:ee:41:0f:6f:4a:b3:a5:5a:8d:5c:04:90:8f:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:60:1D:A0:6A:E5:C0:7F:8C:73:EB:53:BF:BD:D3:E5:4F:81:E2:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9JBDm1hGNHTES2dRhxb3aykNkYMwFJcsrQ1B9bv1f6J/0/98601DA06AE5C07F8C73EB53BFBDD3E54F81E2FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.116.0/22
                IPv6:
                  2804:7d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271544

    Signature Algorithm: sha256WithRSAEncryption
         40:09:6a:40:e5:53:88:66:ec:1d:c7:58:27:da:e8:6d:1d:93:
         fc:56:e1:b4:3b:9b:f4:90:55:af:f1:61:45:8d:9e:da:6d:29:
         6b:64:1c:3e:31:34:bd:4b:c0:e2:4d:cf:5c:db:17:3c:df:1a:
         a2:fb:71:3f:d1:61:42:cc:11:59:10:21:8c:f5:43:a4:68:17:
         ce:79:e7:ec:74:99:77:f5:2f:86:f5:d6:fb:40:87:c0:0e:7b:
         9b:76:f6:ec:b0:dc:19:48:3a:a1:5c:8f:a8:f4:a4:3a:ea:9e:
         bd:fa:57:96:8f:ae:39:10:b4:31:b2:f0:a6:0a:52:62:24:c6:
         47:42:67:48:60:fd:61:d7:bd:e0:02:dd:49:1d:93:2a:50:2a:
         60:02:7c:0c:8e:9b:5d:8e:c7:df:e8:0f:6c:7b:1e:e4:b7:ee:
         44:01:d7:5c:5f:57:b5:0a:c1:ce:32:a3:06:23:9c:29:2d:c1:
         dd:46:bb:29:f3:bb:91:0a:12:98:8a:c0:ed:20:fe:49:42:31:
         57:bb:a9:3e:75:f7:93:12:aa:e1:a7:f9:87:01:d0:56:b1:11:
         81:56:fe:bc:77:7a:0c:b7:a6:c6:08:06:db:60:08:c8:2c:68:
         cd:90:ff:c4:64:1d:61:00:3a:33:be:20:3b:72:94:c9:80:78:
         1d:8f:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----