Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
File:                     9A87074F73DD530421306A811F62BA127C58A09C.cer (raw, json)
Hash identifier:          hd1MCMg0bV/+7mYXF/7ea/9CACvW+MIQvklVTGZ3nhI=
Subject key identifier:   9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1882EC66074727EFE19A5AB0E95248D7DF370D7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 19:16:04 +0000
Certificate not after:    Mon 16 Dec 2024 19:21:04 +0000
Subordinate resources:    AS: 270793
                          IP: 201.159.160.0/22
                          IP: 2804:7180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:82:ec:66:07:47:27:ef:e1:9a:5a:b0:e9:52:48:d7:df:37:0d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 19:16:04 2023 GMT
            Not After : Dec 16 19:21:04 2024 GMT
        Subject: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:9f:18:fc:7a:8a:d0:3e:ec:93:12:96:90:
                    33:63:6a:12:85:4c:6b:16:44:8e:4a:08:25:2d:97:
                    e0:17:6d:89:54:61:48:5f:79:03:41:75:73:f1:f6:
                    e6:cd:4c:76:da:e7:91:60:1b:85:7e:29:41:69:9e:
                    d1:cc:12:dd:e1:b4:39:4f:33:50:56:0f:3c:f9:8e:
                    eb:47:92:04:f7:c1:2a:f2:63:60:38:f5:01:a7:14:
                    19:be:13:e9:29:56:3d:ef:e7:c6:30:94:8c:24:df:
                    7b:1c:61:41:07:6b:85:08:44:c6:0b:a7:8d:5c:1d:
                    41:90:0e:cb:43:63:1a:27:52:70:81:39:1e:a3:ff:
                    ff:36:71:67:1c:ff:0a:65:67:02:63:17:f9:cb:e3:
                    bc:3a:9f:5c:e8:b6:ad:81:ea:5b:6b:9e:93:10:bf:
                    af:9e:4f:ce:8e:5e:6e:7c:48:b2:d3:1b:98:85:06:
                    95:e3:be:7a:a4:61:72:34:63:f1:b3:3b:cf:bc:c7:
                    a5:2c:bd:7b:6f:f9:ea:10:6c:8a:ad:df:21:cb:c9:
                    25:8b:46:e0:d4:02:84:3d:5a:91:38:81:25:7b:f0:
                    9b:34:a2:5f:77:fd:04:ce:0b:9f:f2:76:73:0c:70:
                    0a:58:fa:e9:47:b6:c2:2f:f2:b4:05:c3:b4:e8:69:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22
                IPv6:
                  2804:7180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270793

    Signature Algorithm: sha256WithRSAEncryption
         a8:f9:51:0b:c5:3f:66:fa:20:9a:fb:cd:54:a8:44:e5:f6:a9:
         5e:0a:45:60:ae:0b:7a:6a:02:41:2b:51:fb:3f:6b:ab:3d:f9:
         d8:cd:7f:4b:82:47:a1:1b:4a:4e:13:b9:55:d1:7a:a0:dc:c0:
         47:a1:7d:ce:7d:cf:24:9c:42:92:ef:3b:50:76:c1:4e:ea:a4:
         b0:a3:e3:cc:67:78:20:85:2b:51:37:90:d7:5f:b1:19:70:7b:
         63:26:d6:01:28:b1:a9:51:77:8b:3b:6d:32:9d:61:67:09:92:
         5b:89:31:64:ee:3c:f9:12:50:78:62:67:ff:d9:ac:f0:1b:f2:
         49:e5:b7:8d:44:9a:7a:db:00:2e:c4:76:76:bd:43:8f:42:15:
         2f:2f:ba:66:34:7e:a8:61:c6:e2:12:2f:00:71:e1:f7:7b:93:
         39:f8:c2:8c:ff:47:8f:d8:6a:a8:12:83:91:8e:2b:27:16:7e:
         fe:95:fd:62:a3:91:87:64:a5:69:e0:64:85:59:c2:50:79:89:
         4d:65:b4:ea:3e:eb:d9:9e:15:ac:2d:70:89:5d:4c:c3:8b:68:
         99:e7:df:19:9c:f2:b0:d9:ba:67:a0:5a:80:69:09:e3:a6:8a:
         10:cc:a0:25:8c:b7:32:69:7a:c7:56:0e:4d:72:ed:b1:84:43:
         19:46:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----