Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer
File:                     A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer (raw, json)
Hash identifier:          I9/CdKle7U4WfKv/EnNzxxGFJGdyYeyLgJtW5tMRpWg=
Subject key identifier:   A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16E4A1809EC647321BD32B5A470E357A1C5923DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:28:52 +0000
Certificate not after:    Thu 12 Sep 2024 20:33:52 +0000
Subordinate resources:    AS: 266534
                          IP: 160.238.144.0/22
                          IP: 2804:3d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e4:a1:80:9e:c6:47:32:1b:d3:2b:5a:47:0e:35:7a:1c:59:23:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:28:52 2023 GMT
            Not After : Sep 12 20:33:52 2024 GMT
        Subject: CN=A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:15:0e:b8:f6:73:48:31:e8:ed:1e:b4:21:
                    be:42:6b:22:dd:4a:2c:8e:d1:73:53:2e:10:d4:fe:
                    87:6b:5e:14:0b:c2:ee:18:d5:56:d4:a0:38:e2:4d:
                    f0:95:ea:41:12:a3:21:39:9d:c9:21:6d:62:a9:e3:
                    47:48:40:06:61:0a:47:be:09:2b:25:a3:45:f7:07:
                    54:2e:02:68:4b:a3:c8:8f:67:64:83:d5:43:05:c4:
                    23:05:44:cb:0f:05:ae:ee:3c:f2:46:40:58:e6:a7:
                    2d:07:05:8c:37:43:8d:68:fa:a5:74:1e:fd:55:af:
                    c7:a8:3b:54:f4:7a:1a:16:bf:9d:37:19:a1:18:a9:
                    8a:0f:21:ec:d6:16:6d:9b:d9:aa:4d:d5:85:ac:a3:
                    e3:26:8f:c0:62:a3:a8:09:5c:f1:ce:24:37:9e:8a:
                    ab:1c:5d:9c:cf:e3:3c:b5:ab:ee:99:a7:ff:b1:5a:
                    d9:9f:9f:f4:22:e7:0d:fa:cc:e1:9a:d3:7e:e6:c3:
                    97:ce:14:21:b2:e6:11:c5:89:38:7c:3d:7e:29:17:
                    19:74:33:93:8f:05:b2:20:5e:80:bf:19:af:3a:61:
                    bb:22:55:34:e5:a1:11:98:4b:42:d0:73:e8:c0:f9:
                    b3:47:d6:59:f0:49:de:aa:dc:19:08:94:fa:c4:ec:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22
                IPv6:
                  2804:3d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266534

    Signature Algorithm: sha256WithRSAEncryption
         ae:e5:3e:98:8c:df:f9:51:15:3f:3d:a5:77:6f:3d:7b:0a:f7:
         6d:6c:76:9e:0d:a0:69:55:1b:42:ce:d3:a0:06:f7:16:71:9e:
         c1:1f:fe:e1:d6:f4:9b:19:0b:80:d7:4e:f3:12:37:d5:ee:72:
         4e:8a:ee:dd:4f:03:5e:e7:e4:d2:3f:c0:f6:be:26:79:0f:e9:
         25:ee:46:b5:a4:ce:c0:29:47:ba:3f:93:85:d8:4d:96:32:61:
         fc:f9:81:b9:fe:29:1c:a1:9e:f5:9c:63:4c:6a:9c:a2:cb:47:
         fe:ab:e1:c7:62:44:1d:36:bd:44:ff:69:c7:4c:00:ac:12:7b:
         3c:27:5b:d5:50:1e:60:80:f2:20:42:d6:79:90:f5:93:72:af:
         ce:fd:a1:c8:e7:4a:28:6f:f2:2a:92:da:a7:35:43:95:e2:37:
         d2:40:1f:b2:42:2b:79:fb:0a:45:31:b5:cd:99:f4:91:d3:33:
         bf:f6:27:c1:aa:85:e9:ef:49:59:fb:14:fb:78:85:ab:24:96:
         a7:40:c5:00:5c:00:cd:21:ec:3d:e3:6c:50:e0:1c:e1:dd:2e:
         6c:9a:37:e1:73:75:2e:42:98:0e:e4:fe:61:85:3f:ce:f1:43:
         4a:9b:aa:c6:17:f8:57:28:f0:66:61:df:19:33:14:f3:44:93:
         6e:3c:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----