Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer
File:                     ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.cer (raw, json)
Hash identifier:          fTvuKpmkkoCu280L8+eCWI+f1BN3pt3zr2X0xmkOCGY=
Subject key identifier:   AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A9ECA77DF9DF618B43E6B56729C9F4071990661
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 04:26:15 +0000
Certificate not after:    Sat 21 Sep 2024 04:31:15 +0000
Subordinate resources:    AS: 265222
                          IP: 168.0.32.0/22
                          IP: 2804:2c7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9e:ca:77:df:9d:f6:18:b4:3e:6b:56:72:9c:9f:40:71:99:06:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 04:26:15 2023 GMT
            Not After : Sep 21 04:31:15 2024 GMT
        Subject: CN=ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:0e:98:3a:b2:ec:bb:2d:d7:50:f8:5c:e2:
                    8d:04:c2:e3:b0:64:23:7a:64:2c:15:0a:2e:da:a5:
                    1b:79:6c:c2:16:fa:62:ad:a7:b1:21:f4:92:19:56:
                    0d:77:b1:51:c5:f8:c9:f4:7e:35:99:29:50:8b:d2:
                    65:e7:e6:2c:74:b0:6b:45:96:b2:1a:2e:82:de:74:
                    b3:ea:6d:03:99:38:4b:7c:20:51:9b:9d:41:af:dc:
                    18:1d:14:7a:5f:94:56:bf:9a:18:fd:8e:a7:4a:4f:
                    26:37:f7:d3:e2:61:c4:23:67:ef:7b:c8:ce:cd:85:
                    99:d5:3b:90:8e:d5:3d:bb:e8:61:d6:c3:7a:b3:5f:
                    1d:39:63:03:36:a8:a7:1f:53:12:31:3f:ee:eb:98:
                    fe:31:11:00:08:88:67:d6:01:2c:f7:f6:9e:18:34:
                    31:78:39:f8:bc:1c:9d:76:0a:71:1a:b0:17:f7:8e:
                    77:d2:44:3e:15:13:05:d8:f0:19:5d:1e:2c:d0:ef:
                    0a:8c:37:3b:3c:a1:6b:89:0b:9c:e3:eb:7f:6c:b2:
                    59:2c:64:f6:ba:7b:37:d4:8e:24:43:71:f9:1a:75:
                    4f:93:40:f0:70:fd:f7:51:9d:9c:47:b0:d0:6b:62:
                    49:68:42:c2:ee:d4:58:ab:33:c2:24:91:25:e1:0a:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:CC:A6:3E:7F:5C:F9:6D:1B:DA:D6:96:47:DD:C1:F5:33:9B:46:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/0/ACCCA63E7F5CF96D1BDAD69647DDC1F5339B4607.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.32.0/22
                IPv6:
                  2804:2c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265222

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:1e:79:87:99:7e:79:86:a3:41:51:8e:5b:9f:c0:f0:cb:
         d4:ca:8e:75:e2:de:18:e2:ee:8c:f0:0f:2c:d5:58:1b:ce:58:
         03:01:58:82:cf:b3:7e:78:b6:bf:8d:db:69:7e:17:b9:22:b1:
         7e:cc:e3:07:22:54:59:d8:e2:4b:d1:43:fd:2e:f2:83:68:17:
         6f:a6:e0:78:37:a6:7b:48:1c:a3:40:ff:36:e9:0d:0e:f6:be:
         5c:cb:11:c2:05:34:c6:ad:43:bd:bd:95:10:ca:92:1d:51:ee:
         fd:a2:01:f5:fa:ac:8d:52:2f:28:c4:1c:d5:10:dc:76:b8:b8:
         fb:af:63:6d:ac:dc:4a:ef:dc:25:12:b2:15:ab:8a:34:fc:01:
         18:d7:9c:e0:f7:8d:3c:b8:be:87:c5:63:c1:4f:3a:d0:9f:14:
         62:86:46:e9:20:c4:56:92:bd:49:38:05:eb:cc:cf:db:84:cf:
         01:d4:6d:2e:b1:2e:62:a2:ac:03:e4:d2:bc:a4:f2:37:47:c1:
         4c:7d:b2:7d:d5:6d:09:23:32:fa:79:b4:26:5e:07:dd:d5:36:
         f8:91:0c:e2:6c:74:38:fe:ac:1d:23:82:9a:d0:70:a3:ea:8a:
         09:49:91:59:6c:de:44:d1:c5:24:40:c1:cd:25:8a:11:8c:fa:
         41:01:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----