Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9C4168E5104D077D81E4B301D2558E7CC963310C.cer
File:                     9C4168E5104D077D81E4B301D2558E7CC963310C.cer (raw, json)
Hash identifier:          Fhys+S8CthjXV8bzZq/0PE4dHLo2kB71hKS1o5Y2x74=
Subject key identifier:   9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19DAD9FBA7355CEF568579B106016CE710AD59DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/9C4168E5104D077D81E4B301D2558E7CC963310C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 20:15:09 +0000
Certificate not after:    Thu 01 Aug 2024 20:20:09 +0000
Subordinate resources:    AS: 263499
                          IP: 191.243.72.0/21
                          IP: 2804:12cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:da:d9:fb:a7:35:5c:ef:56:85:79:b1:06:01:6c:e7:10:ad:59:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 20:15:09 2023 GMT
            Not After : Aug  1 20:20:09 2024 GMT
        Subject: CN=9C4168E5104D077D81E4B301D2558E7CC963310C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:e0:39:c5:05:d6:89:a9:63:48:d0:2a:34:
                    2f:1e:e5:86:45:91:b3:35:02:8e:20:28:bc:f9:9c:
                    6c:d3:14:eb:b7:b4:54:b1:3e:39:a3:a9:2b:4c:92:
                    df:2b:0e:5b:d7:89:88:a0:1c:67:6b:5c:d9:6d:f5:
                    5a:4e:31:91:13:81:88:da:4a:8a:5f:cc:78:14:09:
                    c9:b4:80:e3:7d:4a:a8:94:2d:33:6f:c6:88:28:83:
                    e7:0e:36:a7:84:9b:e6:9e:e9:a8:86:7c:a8:f3:69:
                    42:c0:b3:4d:74:f6:f8:02:db:27:e1:88:f2:73:8a:
                    6b:2a:b8:31:73:c3:fb:8d:6c:fc:93:05:66:08:b5:
                    b5:b4:d0:67:8d:25:bc:5c:e6:5c:c0:b0:3f:11:7c:
                    0c:0f:54:f6:00:42:57:2c:c3:f9:b7:ee:18:d2:9b:
                    9c:e8:19:6f:61:bf:84:33:1a:82:d2:ba:2f:14:fb:
                    40:49:c3:f8:42:7b:df:e3:19:c6:f1:7c:06:a0:d0:
                    cc:7b:2d:72:ba:5b:81:fc:fa:4d:dc:67:7c:6a:67:
                    f8:ec:5b:56:40:09:8a:48:e9:0c:f3:33:82:c8:ec:
                    77:ca:1b:2b:b3:b6:82:00:d3:12:2e:ea:92:11:6b:
                    48:13:33:ba:3e:35:65:93:f0:31:8a:fd:8b:4b:0c:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:41:68:E5:10:4D:07:7D:81:E4:B3:01:D2:55:8E:7C:C9:63:31:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/0/9C4168E5104D077D81E4B301D2558E7CC963310C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.72.0/21
                IPv6:
                  2804:12cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263499

    Signature Algorithm: sha256WithRSAEncryption
         32:79:2e:4f:7a:08:4d:3f:f1:ff:d5:af:fe:f8:69:da:cc:01:
         53:6d:76:a8:58:93:ea:f7:76:2c:c5:af:ba:b6:ee:42:e2:77:
         94:08:96:d5:d6:32:d7:1e:a6:dc:62:6f:31:c3:56:18:29:5b:
         34:c6:90:97:9a:bb:13:7b:93:67:e9:f8:de:cd:94:79:cc:a9:
         66:61:16:f4:b5:0f:3e:86:60:31:6d:a3:f0:c6:8f:e2:58:cc:
         97:07:76:2a:24:03:52:de:0e:58:2c:7e:07:b5:ec:cc:70:5d:
         d2:56:53:0c:6d:21:13:b8:82:f4:2d:f7:7d:17:06:f4:c8:23:
         60:c3:7f:13:f1:d9:50:b5:06:08:d5:a8:03:2f:de:5f:f8:de:
         c9:e0:e8:58:f3:2a:90:d5:27:0e:9e:9d:fc:10:cb:bf:97:9a:
         15:c1:32:ef:23:f6:c5:62:c3:5e:6a:2e:79:45:f1:95:5c:63:
         54:0d:85:71:67:43:ed:14:1b:13:41:f5:25:5b:9c:ac:76:1c:
         2e:9f:31:cb:21:ff:d7:0a:20:28:49:c5:33:34:c1:ea:8f:e1:
         22:bb:a6:4a:f4:55:75:43:4a:4d:e7:f8:7b:71:89:e2:2d:9d:
         8c:1b:f8:84:2e:5e:d2:1d:38:57:a0:34:f2:fb:c3:53:20:93:
         16:df:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----