Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer
File:                     9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer (raw, json)
Hash identifier:          XDJz9MbOcPm57cdMP+gzYSGZG8V6CCeOVJz1+h+/Cu4=
Subject key identifier:   9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CC5BFB122AC30F8521E310AFDFF34D3622ABDDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 12:47:06 +0000
Certificate not after:    Wed 12 Feb 2025 12:52:06 +0000
Subordinate resources:    AS: 52820
                          IP: 177.52.174.0/23
                          IP: 2804:8ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c5:bf:b1:22:ac:30:f8:52:1e:31:0a:fd:ff:34:d3:62:2a:bd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 12:47:06 2024 GMT
            Not After : Feb 12 12:52:06 2025 GMT
        Subject: CN=9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:53:36:47:21:92:98:cc:c4:23:1f:a3:2d:
                    b9:28:ed:15:ab:52:bf:af:f0:b1:2e:de:7d:6e:a9:
                    fb:ee:58:ac:d2:47:e0:ce:f3:7c:91:41:45:af:ff:
                    52:d4:3b:73:f7:9c:a5:03:93:21:7c:87:bf:cb:34:
                    5c:35:96:78:73:7d:8e:34:cb:3b:ae:88:e7:07:2f:
                    37:ef:3e:53:d2:82:22:41:64:71:78:de:78:7e:9b:
                    27:f3:0f:38:eb:87:79:c5:3d:d4:da:5c:f1:16:c1:
                    e2:4a:18:fa:f0:5c:db:94:23:a1:c5:c6:72:ea:51:
                    08:12:43:a4:b7:55:a5:32:2a:de:59:3e:1b:72:09:
                    2f:16:a0:61:3f:d1:dd:d2:63:72:b5:b3:2e:f7:95:
                    3c:13:b5:f1:61:51:a0:b2:90:e2:e0:6e:10:22:dc:
                    17:0d:44:bb:62:b8:06:0b:8c:5e:11:78:fa:65:7e:
                    44:30:e6:a5:15:af:5d:73:b2:b9:59:70:f5:f7:e0:
                    bd:f0:e0:a5:09:6d:6e:a0:e6:02:37:ea:e9:61:3b:
                    b8:8d:f3:74:9b:16:38:19:c5:38:f2:ec:57:63:ed:
                    5a:ca:dd:05:1e:25:01:0d:1d:5c:0e:2a:71:67:94:
                    e8:9f:8e:38:d8:f0:5e:78:7d:8f:d7:88:84:a5:c3:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23
                IPv6:
                  2804:8ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52820

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:6d:f0:ee:e7:b4:76:0c:f4:48:3f:ae:0a:e7:3e:98:76:
         61:f8:c4:ef:65:9f:9b:c0:5c:3d:a9:65:6e:d7:a7:39:48:f4:
         19:d8:97:a7:b5:b6:2a:a0:70:f3:bc:78:4a:47:45:ce:9c:7f:
         1f:e3:08:22:66:b6:ec:bd:7c:3a:7a:9a:b8:69:f6:1b:6e:1d:
         5e:33:f9:bf:1f:2b:64:65:9f:93:4d:0c:6a:3a:e1:86:33:87:
         1b:28:1f:3a:2a:09:13:e4:4f:12:94:47:26:4b:79:5a:7d:05:
         66:7b:89:3b:2f:34:4d:93:27:68:96:d6:63:5c:13:f5:a0:be:
         f1:03:72:72:25:77:28:b9:98:01:b0:b9:19:71:46:17:52:7f:
         13:5b:34:cb:d0:59:5d:35:d1:f0:a2:47:e2:c5:43:c7:86:6d:
         9c:b0:24:0c:be:fc:1b:d4:5e:7c:25:e1:c4:4e:f4:bc:2d:15:
         00:7c:b8:7b:b4:ea:57:3d:cf:07:36:10:b3:48:05:43:48:5e:
         3e:84:75:cd:0c:be:50:88:17:9d:2e:cc:92:3b:df:2d:82:2c:
         8d:7f:9f:9d:78:2d:66:97:bb:63:62:91:9b:d2:f9:12:dc:f5:
         eb:94:ac:cf:47:16:45:a4:25:cb:0c:13:27:06:39:a9:c6:a7:
         07:14:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----