Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer
File:                     A8C8557DD5953EB8299531CE4E9861DE6FB5E004.cer (raw, json)
Hash identifier:          RGXSJ9XygRQUYlLjGu9Tc08gWxC2qCg4xDTIUsZhsv4=
Subject key identifier:   A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E7280A6CAA191A9C0EFCDA81BC2064A7E1B81F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 17:48:00 +0000
Certificate not after:    Fri 27 Sep 2024 17:53:00 +0000
Subordinate resources:    AS: 266252
                          IP: 192.140.120.0/22
                          IP: 2804:3d14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:72:80:a6:ca:a1:91:a9:c0:ef:cd:a8:1b:c2:06:4a:7e:1b:81:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 29 17:48:00 2023 GMT
            Not After : Sep 27 17:53:00 2024 GMT
        Subject: CN=A8C8557DD5953EB8299531CE4E9861DE6FB5E004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:cc:0a:88:fe:9f:41:4f:e5:81:f3:9d:d1:
                    d8:6e:16:d8:a9:84:fa:83:9c:14:6d:04:48:1f:5c:
                    8a:e3:f0:48:9c:ac:ef:c2:3c:d3:d8:63:3c:c2:4f:
                    7f:8f:79:4f:d3:51:2c:a3:5b:e0:1b:28:15:9f:7f:
                    71:21:99:35:c3:35:b5:73:f5:30:35:f2:38:fa:56:
                    e2:6f:21:f5:3b:6f:8c:fe:28:f2:0c:97:cb:30:40:
                    a8:73:73:80:83:f5:f6:0d:49:74:20:7d:a2:57:90:
                    04:1b:35:9b:68:87:ee:2c:cf:3b:8e:93:e5:05:45:
                    21:04:e2:30:f7:bf:98:13:30:9f:d4:0b:31:72:d6:
                    83:a8:1c:9c:c5:85:0a:36:06:93:a0:19:02:71:87:
                    e8:45:21:72:a7:be:80:da:e9:56:3b:49:82:fa:30:
                    8a:c2:a4:11:63:0d:8e:33:03:09:b2:ca:f1:e0:93:
                    f6:bd:96:c1:e3:9c:01:cb:e6:c8:4c:36:1d:4a:10:
                    d2:d1:dd:50:55:4f:59:25:6f:99:ae:37:47:48:fa:
                    43:a7:e8:62:ed:18:06:2d:84:e8:2f:69:65:44:db:
                    c9:78:af:da:a4:3a:cb:bb:6d:67:ea:af:e8:29:88:
                    ae:b4:3f:7b:68:1b:0c:9f:e1:bd:35:dc:69:47:f3:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:C8:55:7D:D5:95:3E:B8:29:95:31:CE:4E:98:61:DE:6F:B5:E0:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/A8C8557DD5953EB8299531CE4E9861DE6FB5E004.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.120.0/22
                IPv6:
                  2804:3d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266252

    Signature Algorithm: sha256WithRSAEncryption
         13:3c:96:6d:37:c6:76:1b:6f:fc:16:8f:e1:a7:c4:73:6e:c4:
         69:a5:4c:97:c3:69:66:12:96:8c:b3:9f:d7:1d:1b:f4:15:4e:
         70:04:92:43:e9:0f:3d:58:8c:6c:7d:4c:be:6c:0c:bb:3d:95:
         31:3a:00:27:db:77:39:ab:70:d8:a4:7e:7e:c0:82:ac:99:5a:
         70:e2:db:34:81:c5:16:b6:37:e6:1d:48:28:7f:e4:5d:7d:f5:
         2a:98:e7:2f:e5:2d:54:40:d5:fd:8a:1e:f9:bb:ba:50:7e:c8:
         cf:3b:8b:ed:5a:70:f6:21:b6:eb:6a:14:db:a0:14:d3:72:2d:
         c5:a4:00:bb:bb:92:26:25:6d:cc:9a:4f:28:32:b4:e4:8d:66:
         f0:c7:f8:f5:83:44:74:2f:3a:b5:a7:ac:70:50:f2:ef:4b:80:
         dc:50:65:97:50:43:9f:d2:f5:1d:c1:04:89:cc:58:44:88:78:
         f4:df:97:da:aa:84:98:e5:89:5a:8a:08:34:01:dc:8f:12:08:
         53:86:ad:ef:95:ab:0e:1a:e2:24:25:e3:fc:b1:e9:25:1a:4a:
         ab:bd:6f:e7:a6:a5:92:1f:6f:bc:6e:02:df:d1:fd:e5:0f:c7:
         34:bf:03:43:8a:3c:98:60:af:55:df:1b:2e:dd:4d:42:1f:aa:
         fe:2b:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----