Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer
File:                     A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.cer (raw, json)
Hash identifier:          bH2PvSnypftV9mZ4svtTOS2YqsoWXwErfwBlcKrzldE=
Subject key identifier:   A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CE3DD3D1F375A7120D362E10C5A2C4E7FAB4876
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 13:34:45 +0000
Certificate not after:    Mon 18 Nov 2024 13:39:45 +0000
Subordinate resources:    AS: 270786
                          IP: 200.39.150.0/23
                          IP: 2804:7164::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e3:dd:3d:1f:37:5a:71:20:d3:62:e1:0c:5a:2c:4e:7f:ab:48:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 13:34:45 2023 GMT
            Not After : Nov 18 13:39:45 2024 GMT
        Subject: CN=A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:30:26:02:24:0b:10:4a:94:06:73:7d:8e:
                    36:49:90:07:73:a0:51:1f:f4:6d:40:34:4b:23:43:
                    25:88:d9:38:0c:98:68:e8:28:95:b0:93:96:c1:6f:
                    c4:67:42:47:69:bc:3c:94:c4:2b:0c:72:40:cd:23:
                    21:c3:14:0b:37:2e:b6:1a:87:f7:1f:70:33:83:46:
                    d4:92:6e:55:12:1b:dc:9a:be:e9:17:91:b1:ef:d0:
                    c3:18:3b:b9:92:f7:ff:60:2c:56:f1:1a:fa:de:37:
                    4a:38:60:e0:1f:be:48:dc:ec:71:b8:0f:67:ff:02:
                    a8:53:95:6b:21:c1:7a:fe:45:79:8d:c9:1a:dd:d5:
                    5a:55:74:6f:e7:b9:10:d2:bc:97:2d:2e:29:f0:8b:
                    3a:ba:6e:32:f1:70:bf:28:7e:ee:15:47:40:9c:5b:
                    54:79:d5:08:c5:12:02:12:a7:84:c6:4b:06:b3:e8:
                    04:b1:94:01:57:f9:0c:7f:5a:76:7a:18:1e:9c:b4:
                    b2:d7:31:e6:ba:0b:ea:d4:b8:d4:fd:65:1a:0a:fb:
                    c9:a4:3a:87:c5:8a:0c:06:ed:37:d1:29:fc:d6:0d:
                    a4:e9:2a:0a:9b:e5:cf:6c:78:ef:a2:27:81:59:ae:
                    d8:9c:08:3f:f9:98:bf:d3:01:47:5c:0a:c6:a4:47:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:B3:62:39:9E:C0:C7:60:B9:B9:D2:F3:CE:7F:93:D2:46:94:DB:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/A9B362399EC0C760B9B9D2F3CE7F93D24694DBE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.150.0/23
                IPv6:
                  2804:7164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270786

    Signature Algorithm: sha256WithRSAEncryption
         51:65:35:24:c6:e3:14:fe:38:3a:78:b5:37:57:bc:29:30:85:
         f7:ba:4c:00:bc:0c:51:ad:d9:25:46:37:19:7e:38:77:c1:ed:
         71:af:b5:5d:ff:1c:aa:35:6d:c8:ad:02:23:7c:cc:ca:ff:58:
         86:7f:3e:81:c4:5b:b7:da:02:5b:97:38:83:74:fc:c7:29:23:
         31:67:60:65:a4:3b:c4:54:b5:8f:99:6d:97:0e:07:5d:3e:28:
         d8:37:ab:86:71:0b:12:16:04:29:a2:55:26:59:c2:e4:05:6f:
         3e:bb:6f:bc:c0:4d:62:e1:2f:21:34:fb:43:24:e6:a3:d8:19:
         40:f0:27:ec:26:6b:7a:3b:d1:b5:9f:25:ef:04:81:64:20:9f:
         b1:d6:9c:91:31:96:de:2f:ac:bd:b4:e3:0f:18:66:17:a8:c6:
         28:c1:d3:56:02:76:93:bd:ac:21:99:bd:3b:48:94:8f:6f:0e:
         ab:ef:84:6c:ec:c4:e4:4f:66:7a:4f:42:13:e7:f2:43:02:0f:
         21:76:5e:f7:6d:e4:f9:8a:56:84:83:7f:eb:c6:37:ba:5e:ad:
         07:70:fc:4f:95:72:d9:d3:fe:20:08:c2:10:61:c2:f0:ae:06:
         7c:6c:fa:19:20:78:eb:c9:00:3a:aa:6f:19:c3:37:c8:90:e2:
         d0:2a:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----