Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.cer
File:                     9CE07227B64C2F59198FCE2411C0BEA59721B945.cer (raw, json)
Hash identifier:          FH6OPGJZC7C7u0CNzk0iEZZTffzJArQTS9qekZWTRpE=
Subject key identifier:   9C:E0:72:27:B6:4C:2F:59:19:8F:CE:24:11:C0:BE:A5:97:21:B9:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       489E5D9FB3E50D99DF17C86C502D55835B569EF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 17:35:12 +0000
Certificate not after:    Wed 29 May 2024 17:40:12 +0000
Subordinate resources:    AS: 272733
                          IP: 2804:87d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9e:5d:9f:b3:e5:0d:99:df:17:c8:6c:50:2d:55:83:5b:56:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 17:35:12 2023 GMT
            Not After : May 29 17:40:12 2024 GMT
        Subject: CN=9CE07227B64C2F59198FCE2411C0BEA59721B945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:3d:70:6d:e3:14:2f:ce:3d:d4:58:7d:fb:
                    d9:c2:28:43:74:d8:b4:59:54:91:52:50:29:45:7f:
                    fb:cc:4c:81:57:56:86:a9:69:39:93:ba:e0:ab:0f:
                    d0:47:4a:4c:59:8f:fa:52:16:8b:87:6a:48:eb:9d:
                    e6:a7:c6:ec:33:75:e4:3c:b3:e7:20:e5:e4:13:99:
                    c7:46:88:ef:4c:17:9a:7b:52:8c:b4:bb:b2:b0:9c:
                    6d:32:cb:6d:e9:63:f2:a7:8e:38:4e:de:66:82:ac:
                    43:a0:c6:6e:e0:b9:f7:63:e3:bf:c6:a8:17:d5:17:
                    d7:e9:14:df:97:26:77:6c:ad:9e:ec:ec:0e:7e:bb:
                    4b:30:1d:35:5b:c6:69:5d:aa:fc:31:31:51:29:26:
                    5e:64:09:f9:da:ac:d1:c4:e1:a0:b5:6d:de:1e:3f:
                    81:8a:ba:69:9f:a0:10:ed:a7:35:1e:09:32:5c:b5:
                    c4:ae:c1:20:0e:c3:22:78:fa:cd:65:ca:2a:d5:f7:
                    5b:85:1d:60:09:9c:c3:3b:9c:2d:c7:15:6b:b7:17:
                    11:08:8c:8c:c8:6e:7d:8e:32:d0:b5:05:0e:66:05:
                    e4:86:23:9a:42:52:bc:23:03:0a:67:0d:60:6d:3e:
                    25:2b:e8:c8:b3:9c:1d:28:0c:71:72:9f:52:b2:a5:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:E0:72:27:B6:4C:2F:59:19:8F:CE:24:11:C0:BE:A5:97:21:B9:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SxF3Wttkgypo9v7YWoBcxKYWYeHjPStZXKyDk33TWXG/0/9CE07227B64C2F59198FCE2411C0BEA59721B945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272733

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:e0:41:d5:52:b3:49:d3:b6:b1:27:d4:62:31:98:e0:12:
         04:47:84:58:78:98:47:c2:42:f7:7f:79:34:d4:c0:3f:31:fe:
         9a:ae:ef:ae:9c:0a:a8:09:74:fd:fd:15:a0:3c:5f:c2:5d:c2:
         7f:4c:7b:65:5b:d1:59:7e:be:91:36:9c:35:47:91:05:10:fa:
         cf:a2:6a:7c:5d:f8:5a:5b:5a:96:b2:90:f7:d7:57:20:18:4b:
         61:af:4d:87:37:f9:3a:da:8a:f7:25:60:b4:b0:ac:58:b1:22:
         15:87:c9:91:72:a7:c7:01:96:6c:5e:30:ce:5e:9e:27:f9:a9:
         0b:bd:7e:19:31:3d:fa:70:d7:55:37:73:18:1b:3f:9d:6f:1f:
         44:b1:fd:f5:99:41:ca:52:35:a7:6a:c6:6f:8f:7e:63:d4:18:
         c7:f3:15:fa:41:4a:c6:28:5a:00:16:09:19:3f:1f:9f:db:55:
         f3:21:e6:3e:a3:f4:92:b7:6c:4b:01:f4:3d:8b:83:40:c8:35:
         84:7f:e5:cf:7a:dd:42:ee:28:42:1c:bc:0d:a2:26:44:90:96:
         bf:bd:5a:a4:42:11:9e:e5:a6:dc:b6:8a:72:ef:34:be:65:58:
         81:7f:68:b7:93:2e:eb:c7:5d:54:ae:93:3a:bc:e5:4d:6b:93:
         79:0d:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----