Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer
File:                     AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.cer (raw, json)
Hash identifier:          7zSokTqVCrb0ET+mjnsPnLAC3b5BKPuE+mL/aIvFFKk=
Subject key identifier:   AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77B17CBB50B8B0487D2A7073E8EC1AEEEC86A2CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 12:34:30 +0000
Certificate not after:    Tue 14 Jan 2025 12:39:30 +0000
Subordinate resources:    AS: 271350
                          IP: 181.189.64.0/22
                          IP: 2804:7a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b1:7c:bb:50:b8:b0:48:7d:2a:70:73:e8:ec:1a:ee:ec:86:a2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 12:34:30 2024 GMT
            Not After : Jan 14 12:39:30 2025 GMT
        Subject: CN=AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:ce:54:2a:d8:3d:48:9c:3c:87:af:4f:f6:
                    c9:6b:ce:d1:69:24:a4:f8:e2:68:04:ba:6e:6b:f3:
                    d7:f4:85:7d:4e:32:d9:8e:32:da:d6:35:76:cd:9f:
                    b9:bc:56:a8:3f:4f:b0:87:19:d9:cf:2a:2e:a4:ba:
                    9f:c2:ff:44:6f:c2:cc:cc:9b:ed:08:23:d6:3d:e1:
                    67:92:99:08:b0:36:0e:7e:c7:d5:5b:0b:f4:34:ad:
                    8a:35:e6:d9:66:1a:0f:ac:53:49:6f:a6:8f:36:4f:
                    4d:e2:c6:3c:2c:38:b3:79:27:84:cb:85:e2:26:2f:
                    32:84:49:1d:ec:d4:13:49:0a:d4:32:cb:69:a5:91:
                    28:25:8f:30:2d:51:e5:21:28:be:11:1c:10:5d:20:
                    39:56:11:9a:66:a9:23:2f:50:15:69:bb:c7:f3:b2:
                    6b:e8:5e:68:a6:bb:67:6f:bc:23:ea:c8:05:8e:57:
                    89:72:e2:2e:c5:19:ad:0a:fd:f3:a3:97:4f:9c:af:
                    db:92:19:68:49:6d:f4:29:62:3c:19:0c:ab:06:6c:
                    e8:a8:f8:82:17:2d:18:60:2b:5e:b9:ab:93:e4:4f:
                    89:3e:13:3f:ec:29:27:9c:53:98:62:cc:64:4c:7e:
                    db:03:0a:78:bb:e6:fb:97:f1:00:8a:69:25:05:69:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:27:BF:71:D3:4E:93:7B:91:B3:AF:FE:7B:A5:95:DA:A2:8D:B3:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/AD27BF71D34E937B91B3AFFE7BA595DAA28DB39C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.64.0/22
                IPv6:
                  2804:7a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271350

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:ef:14:29:3f:20:6f:c5:bd:31:2b:d3:7e:f9:a7:6e:8e:
         f1:cb:a7:d4:d9:a1:c1:bb:dc:5e:14:3e:8a:3e:50:0a:93:01:
         0e:64:88:0e:01:b7:16:39:f0:35:e1:ee:47:db:a4:08:5e:12:
         88:80:77:c0:8b:40:06:05:67:c6:5f:bd:08:7d:d5:26:9e:74:
         53:22:b1:46:21:c3:de:28:bb:7d:5d:d4:4e:68:e5:92:ba:36:
         f0:0c:7d:6b:c8:06:e8:e9:d7:83:14:ca:7f:3d:b3:f5:25:40:
         0e:10:b6:2d:b1:c2:f2:48:02:62:9b:c7:f4:d4:ea:24:4f:f1:
         bd:6d:41:45:a1:63:43:cb:9c:89:aa:79:70:eb:1f:bb:b9:af:
         79:ef:14:b2:f9:05:22:be:de:65:5d:82:9f:6a:95:35:f8:e0:
         30:1b:53:38:f4:28:b8:57:e1:5c:f2:b2:5f:56:16:a2:49:13:
         cd:eb:30:80:02:09:8e:ba:eb:cd:5c:01:74:c7:f0:4b:3a:39:
         1d:eb:ab:66:41:4f:3c:ff:03:ca:8a:59:c4:f6:6b:2b:d9:79:
         21:11:66:39:18:4e:69:0e:dd:ba:53:a4:2b:28:d5:8b:c5:f2:
         41:29:82:03:b7:92:dc:8c:af:70:95:42:14:b1:1b:35:91:72:
         19:fa:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----