Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
File:                     9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer (raw, json)
Hash identifier:          2vbJQRo3w51TYoXgR1c/x7LzfkJVVpmwaXxkCqKYw7c=
Subject key identifier:   9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66927BFECAA1685C9529ACFF3F8AA38C6906A68B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:21 +0000
Certificate not after:    Tue 21 May 2024 09:25:21 +0000
Subordinate resources:    AS: 264178
                          IP: 138.99.72.0/22
                          IP: 2804:23b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:92:7b:fe:ca:a1:68:5c:95:29:ac:ff:3f:8a:a3:8c:69:06:a6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:21 2023 GMT
            Not After : May 21 09:25:21 2024 GMT
        Subject: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:f7:47:6e:c5:b9:8e:65:ac:f8:8c:be:23:
                    08:25:81:db:3d:39:3a:d6:08:07:84:98:83:99:e5:
                    f9:fb:be:d9:3c:8a:d8:fb:6a:88:04:f4:2b:24:9a:
                    83:08:2f:3b:21:d3:a4:ae:0f:dd:d9:12:ab:37:ee:
                    84:42:85:ab:75:f5:13:12:c8:12:87:60:75:57:51:
                    d4:21:54:e1:8e:10:67:f3:e8:e0:34:5c:e1:f8:91:
                    9d:76:06:a3:16:3f:9b:e3:04:b3:f5:9d:a1:e2:fc:
                    f8:48:c0:90:40:32:c7:8c:30:cd:79:4b:84:8f:9d:
                    40:60:2b:8a:48:bd:dd:a0:3b:4c:98:7a:a5:b0:41:
                    3c:25:02:26:bb:c6:0b:0e:f0:e5:9e:94:b6:87:63:
                    ba:19:ee:31:a7:02:f1:76:e0:b5:80:86:07:22:16:
                    34:47:fe:1e:14:a8:a2:af:78:9c:b7:b4:b4:5e:23:
                    3b:0b:cb:6d:50:8c:7d:4a:34:5c:18:54:64:d5:dd:
                    3f:07:2b:6e:4e:d7:d1:4e:65:7f:cc:da:85:de:07:
                    33:7f:8c:2c:de:04:84:95:f9:65:55:32:13:1b:de:
                    b8:10:5e:ee:58:f5:cb:66:bd:bc:43:74:ef:93:49:
                    47:0e:6f:15:2e:2e:b0:a6:8e:96:0b:26:e7:cf:ef:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/22
                IPv6:
                  2804:23b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264178

    Signature Algorithm: sha256WithRSAEncryption
         a6:c4:b4:ea:2d:fc:e1:95:44:5a:7b:90:c4:e9:d7:ae:41:f5:
         0f:a5:ea:f0:1c:9e:4e:e1:6a:4c:d5:d6:88:9b:c3:5b:d2:fc:
         fe:96:71:7d:f2:e6:e4:26:f6:89:c3:a7:9b:e3:d5:1e:76:a8:
         ad:11:cb:eb:e0:d4:92:6d:84:f1:a2:5d:4a:33:91:18:99:c2:
         c4:2f:b8:e2:bb:db:d4:cd:0a:bf:73:31:14:10:88:de:20:71:
         26:d7:80:f6:05:a0:66:18:c0:e3:44:db:35:d5:f3:2b:02:a3:
         9b:f4:6d:e3:a8:16:62:c8:0e:d4:07:d8:58:5b:ec:38:cc:c4:
         05:69:dc:f7:89:72:49:3f:f4:bb:4d:26:4d:f1:34:54:8f:3a:
         99:83:10:bb:c7:c0:98:f3:34:d3:42:35:bb:0d:44:ab:f4:8a:
         68:a6:0b:d2:cc:86:db:1d:21:0b:f2:0d:8c:66:78:c4:11:23:
         69:17:61:8c:85:4a:8a:a6:8b:2e:ee:de:23:6f:0e:16:ba:17:
         79:fe:e6:42:66:4b:21:a7:2d:bb:28:22:df:43:59:5e:f6:9d:
         0d:e1:a6:9f:2c:e2:f4:4f:79:42:b3:1d:f6:88:8f:3c:a7:da:
         74:3c:68:7b:ab:f9:0c:3e:7e:cd:a4:9c:f3:31:06:b3:5b:57:
         63:8c:54:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----