Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer
File:                     AC5F91766846C4C6154EEF497DA9B6A46584AEB3.cer (raw, json)
Hash identifier:          J4PkzHLGtZPIQK3yHTj+X17xAguslJRAVTJxrzB8l7o=
Subject key identifier:   AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C9AC72EDB50FA5CF5FC9E122F1F4C55C9085862
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 21:15:50 +0000
Certificate not after:    Mon 17 Mar 2025 21:20:50 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9a:c7:2e:db:50:fa:5c:f5:fc:9e:12:2f:1f:4c:55:c9:08:58:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 21:15:50 2024 GMT
            Not After : Mar 17 21:20:50 2025 GMT
        Subject: CN=AC5F91766846C4C6154EEF497DA9B6A46584AEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:08:11:c6:c2:94:85:8f:fd:da:fe:b6:5f:
                    f7:8d:ca:74:f7:dc:6d:e6:bf:16:a4:cf:51:04:ad:
                    f5:96:be:61:2b:20:65:d3:7b:fb:63:9b:2d:43:0b:
                    7e:6b:13:c4:b4:79:42:9a:a0:9f:26:4d:ee:45:8d:
                    ca:92:9e:26:b5:26:37:e2:4d:bd:19:a1:49:68:ca:
                    19:66:f2:c0:44:bb:55:91:42:b7:54:84:09:35:f4:
                    29:48:c0:79:01:9b:d1:f4:3b:cf:49:cc:20:51:bf:
                    67:83:2f:a7:a5:be:77:81:52:63:ef:72:4c:66:46:
                    e9:77:e3:47:ca:53:37:99:6e:35:3a:fa:22:9d:71:
                    d6:c1:b9:c0:1a:67:37:7b:30:88:69:d1:a1:96:24:
                    f0:c7:68:cf:30:e8:b1:0e:23:66:e0:c9:fd:e4:07:
                    b4:e8:94:39:8c:9b:41:a4:ae:fb:a9:8b:f0:a1:59:
                    3c:f5:6c:6e:d5:75:74:d0:8d:14:28:18:78:a9:40:
                    1d:2e:62:d9:ef:52:fa:1f:06:fe:74:20:5f:22:0d:
                    b1:51:f0:68:1d:73:c6:4a:d4:1f:76:03:0d:fe:d5:
                    9c:e0:df:b1:43:7d:95:7d:8b:c5:5c:c2:a1:91:03:
                    c7:88:f7:7c:8a:62:ee:d5:91:8c:3f:df:2a:ca:c4:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:5F:91:76:68:46:C4:C6:15:4E:EF:49:7D:A9:B6:A4:65:84:AE:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/AC5F91766846C4C6154EEF497DA9B6A46584AEB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:eb:6e:9e:af:98:ea:8f:2c:7c:98:42:44:ce:bf:2f:ca:
         bf:fc:25:3f:20:d1:31:37:04:2a:a3:69:2c:73:7c:4c:56:ef:
         b6:7e:ea:5b:8b:62:e6:f4:ea:87:14:40:87:b3:8c:54:de:79:
         bf:98:9d:f2:43:2d:1f:40:32:85:0b:8c:79:5f:8c:56:93:ab:
         d0:97:4b:fd:38:e5:ea:a0:1f:ba:54:d0:df:bc:5e:81:80:93:
         b3:03:75:7c:b8:d7:bd:ac:ca:1d:85:4a:9a:01:75:a6:99:e3:
         2c:fb:56:df:ad:eb:6e:bd:e0:83:de:25:0f:86:99:32:b0:60:
         d0:74:b1:54:1e:47:a3:7d:67:b3:f4:82:7d:d5:c3:bc:8a:49:
         60:d9:58:d0:bd:21:68:ae:49:a0:5c:04:81:92:10:70:46:66:
         01:2f:1a:e8:2f:c7:f8:f8:5f:c1:d9:22:76:c5:c1:01:85:5e:
         9b:b1:e3:9b:a7:de:b7:31:9a:de:1a:a1:80:39:8b:98:05:6f:
         71:28:e2:88:9d:36:61:57:95:93:b6:f7:d6:c2:d4:07:f8:84:
         f7:10:5b:86:bc:24:87:e1:0c:14:72:d2:f4:06:89:90:db:b9:
         82:76:38:c4:05:a4:19:65:06:3f:51:21:a1:ec:77:43:84:23:
         c5:5b:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----