Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer
File:                     A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.cer (raw, json)
Hash identifier:          LWFWqkVmvfV8uLVLNDP9o2AmO3ESsRmPQaiitthyGI0=
Subject key identifier:   A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F3C6FD5FC808C92976755B66E3D849CB4FBBC08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 02:56:20 +0000
Certificate not after:    Wed 11 Dec 2024 03:01:20 +0000
Subordinate resources:    AS: 265953
                          IP: 164.163.52.0/22
                          IP: 2804:4058::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3c:6f:d5:fc:80:8c:92:97:67:55:b6:6e:3d:84:9c:b4:fb:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 13 02:56:20 2023 GMT
            Not After : Dec 11 03:01:20 2024 GMT
        Subject: CN=A54C688946518EDDF4A5ECCFBCF9D720E13EC64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:6c:7d:ea:5e:e4:ae:84:52:bf:60:f9:44:
                    69:5a:0f:04:1f:cf:d2:a3:1f:b4:07:bb:85:a9:5c:
                    48:ea:f0:f6:95:a8:04:92:e3:a6:26:4e:03:1a:a4:
                    26:d1:b4:f1:0d:e0:52:83:3e:f1:2d:5b:14:4e:4f:
                    65:e9:01:ee:d7:ef:6b:20:a7:89:ff:d3:b4:37:87:
                    32:5b:f3:ae:6c:ff:0c:e6:c6:dd:f6:7b:83:27:91:
                    0b:21:ff:c6:f2:2b:3a:c0:25:98:9a:7a:10:4b:af:
                    b5:dc:d4:08:d1:ba:9f:3a:4d:71:14:88:64:b1:06:
                    70:1a:07:0b:92:a5:ce:f2:c1:b2:15:c1:05:ec:ea:
                    67:c2:4a:47:88:9a:fd:76:2c:1d:9c:88:f4:e6:a9:
                    d1:be:bb:c5:7f:dc:98:4e:ee:61:6c:f1:a4:9f:cc:
                    27:75:3a:2f:07:a5:d1:44:8c:dd:5f:c3:38:ed:7c:
                    d2:53:76:0f:39:a4:2e:b4:2c:79:94:01:49:88:6a:
                    14:24:e4:3f:8e:f8:15:5b:a3:8a:f8:c4:75:79:14:
                    7a:ea:82:4b:8b:e1:a6:96:e7:c0:89:1a:f8:a9:9d:
                    e0:3d:13:68:52:1f:b1:89:f1:11:a8:bc:1a:ec:8a:
                    f2:5a:b2:e5:f8:1b:0d:58:2e:6d:c9:a1:96:25:cc:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:4C:68:89:46:51:8E:DD:F4:A5:EC:CF:BC:F9:D7:20:E1:3E:C6:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/A54C688946518EDDF4A5ECCFBCF9D720E13EC64E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.52.0/22
                IPv6:
                  2804:4058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265953

    Signature Algorithm: sha256WithRSAEncryption
         08:37:01:73:f1:58:ab:61:63:b8:85:91:a8:bf:cf:6c:08:d2:
         cd:30:95:0c:21:00:f8:9d:65:42:db:23:1b:19:a7:b0:90:4a:
         24:63:d3:eb:d6:a1:6f:d3:73:33:d5:0a:19:72:54:be:a8:21:
         1c:1f:1a:6b:ef:6b:ef:ca:29:32:2a:f3:35:87:96:e6:cf:81:
         ca:40:0b:a3:e6:79:fe:e3:b0:d3:b9:2d:f4:5a:10:ae:10:8d:
         66:96:c8:c6:70:8e:69:97:d9:f1:01:78:22:b5:dc:ef:d7:65:
         b0:c2:24:36:ae:a3:24:0e:e5:c6:63:07:3e:f1:2b:5b:a7:0b:
         44:a8:d9:50:ae:86:66:8a:f6:99:66:12:8c:58:9f:92:ee:f2:
         fa:32:12:35:00:c1:78:46:f8:fd:65:ad:30:ae:3c:c2:43:32:
         87:b0:b4:03:19:11:f9:42:f1:ee:38:85:9f:de:2e:64:6b:d6:
         5f:f4:21:b5:d6:c1:80:6b:43:0c:f5:c4:d4:51:3f:72:38:c3:
         db:30:c9:34:5e:74:c5:49:ae:3f:0e:96:56:3d:14:35:fc:b3:
         4c:7b:22:15:23:fd:e7:97:66:3a:45:02:e1:7b:16:77:9a:91:
         7a:52:f2:48:1e:ea:7e:9f:2e:e6:6e:03:e5:22:69:00:3f:c1:
         9c:95:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----