Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer
File:                     AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.cer (raw, json)
Hash identifier:          ymiVmI7QoePJK51Vcl025AImKU38Hy2UFMJUnNW4Nbs=
Subject key identifier:   AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38B002B951FB2D134704D0C2D8C6A138C87686FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 13:28:51 +0000
Certificate not after:    Fri 07 Mar 2025 13:33:51 +0000
Subordinate resources:    AS: 267507
                          IP: 201.182.96.0/22
                          IP: 2804:428c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b0:02:b9:51:fb:2d:13:47:04:d0:c2:d8:c6:a1:38:c8:76:86:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 13:28:51 2024 GMT
            Not After : Mar  7 13:33:51 2025 GMT
        Subject: CN=AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:ec:36:14:11:9e:eb:f1:33:62:17:32:3a:
                    68:d4:d9:21:76:2f:d4:55:d0:5f:43:8e:01:45:4c:
                    e6:38:65:3d:43:1f:58:c5:d1:f3:a6:aa:77:79:6f:
                    e3:18:46:e6:fc:5a:6d:06:67:c5:da:66:7a:40:11:
                    90:c1:45:f9:25:30:60:f3:66:a6:90:9a:0d:19:44:
                    27:e1:ad:77:67:ed:fa:64:9a:bc:be:7f:a5:72:74:
                    81:9a:cd:e4:aa:11:01:26:e0:85:b6:50:e4:c8:74:
                    5c:5e:90:f8:5e:86:67:c9:fc:64:12:62:72:8b:5f:
                    64:7d:87:5d:45:b7:e4:a4:ca:53:3a:7f:a1:eb:db:
                    ae:21:1d:de:79:bf:be:48:bc:e2:9d:0b:97:6b:51:
                    40:7c:ac:f8:b5:1d:22:fd:91:c3:23:7e:df:da:b4:
                    3d:7f:40:f5:d4:61:51:a2:f3:40:c2:f9:7e:3f:94:
                    c0:48:94:27:98:d7:9c:e1:a9:72:22:f2:eb:fe:0c:
                    70:b8:81:ed:0e:93:1f:81:85:c3:cd:45:cf:78:5b:
                    17:bb:5d:bb:d7:15:61:a0:d3:eb:86:e1:64:d5:99:
                    7b:61:66:cd:22:f3:1f:45:45:62:d4:77:8d:75:16:
                    8f:96:a5:08:7b:04:98:df:ff:57:d6:26:f2:ea:d9:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:8C:62:F6:CC:79:9D:F8:DE:31:4F:2B:27:04:A3:F1:0C:7B:57:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/2/AA8C62F6CC799DF8DE314F2B2704A3F10C7B5721.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22
                IPv6:
                  2804:428c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267507

    Signature Algorithm: sha256WithRSAEncryption
         43:84:62:24:e7:f5:1a:ce:21:2b:cb:db:9f:6b:7b:52:ac:08:
         e9:cc:69:b8:e6:2a:74:8c:7b:60:16:2a:c6:54:8d:6f:8e:25:
         fc:de:9c:f4:ca:9b:3c:03:42:0d:3a:39:27:b3:35:fc:0e:70:
         bd:b8:e8:03:34:d0:ea:52:63:78:79:58:b1:6d:c1:41:f5:5e:
         dd:fe:2b:45:4f:be:d7:c1:cf:b1:0d:72:94:31:65:14:62:b3:
         bf:c7:ac:20:1d:60:ef:10:e5:86:b5:05:fc:57:05:31:c1:3c:
         2d:4b:c1:35:9c:e4:fd:d9:a2:da:82:95:71:36:a8:4f:83:5f:
         7d:80:b1:27:28:1f:15:e9:bc:d1:74:12:cf:de:ae:ab:3d:81:
         85:ad:dc:b9:9c:2e:98:7a:35:8e:74:54:35:d5:c1:79:f0:e6:
         e1:30:96:82:2c:9c:5c:f7:0f:07:6b:c5:f6:e3:ed:36:e5:f7:
         a5:77:be:2c:39:45:95:f8:2e:c6:a8:ef:e8:d0:37:3f:c7:c9:
         66:04:bf:45:2e:a8:bc:fe:06:37:18:56:4f:7d:9e:61:e7:f8:
         8c:4f:9b:22:ee:a4:6e:f1:1a:d0:b1:df:15:42:d0:5f:f0:f1:
         c7:1e:6b:43:dd:f3:64:0e:b7:c6:1f:e9:9d:99:6b:99:9d:db:
         f5:0e:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----