Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.cer
File:                     ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.cer (raw, json)
Hash identifier:          tee9REaWp1OZCvi/POgOTPs6ETKfrEB4lnYi7GN0nRc=
Subject key identifier:   AD:C2:19:C6:9D:CB:C4:DE:99:07:FA:79:84:DB:2D:08:1D:7B:D7:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75C67F418F80CA247F4BC0B10093D4C8B1723905
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 19:13:05 +0000
Certificate not after:    Wed 22 May 2024 19:18:05 +0000
Subordinate resources:    AS: 52852
                          IP: 177.86.120.0/22
                          IP: 2804:830::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c6:7f:41:8f:80:ca:24:7f:4b:c0:b1:00:93:d4:c8:b1:72:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 19:13:05 2023 GMT
            Not After : May 22 19:18:05 2024 GMT
        Subject: CN=ADC219C69DCBC4DE9907FA7984DB2D081D7BD760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:b5:e3:16:07:be:71:6d:c0:38:75:97:8c:
                    af:77:fb:d6:3e:0c:60:c1:a5:ea:b5:df:48:94:43:
                    ae:6f:ea:07:c6:84:14:13:ed:b9:7f:a9:cc:71:14:
                    69:37:90:8e:b5:3c:9d:3b:69:6f:22:9b:d8:16:0f:
                    65:1d:2f:b6:c1:07:c6:19:2f:9c:c8:6f:cb:72:4f:
                    26:41:87:f5:c8:f9:61:ec:dc:a9:d4:09:66:74:d8:
                    66:7d:29:55:e9:ba:bf:c0:3b:b6:c0:3c:c3:b4:bc:
                    4a:88:99:50:5d:d2:de:89:8f:b9:64:73:44:f9:2d:
                    3d:4f:6c:6d:83:4c:13:e1:b0:33:9b:5d:ee:ea:3d:
                    52:96:65:0f:95:5f:1e:2b:7d:55:ce:d1:0a:be:26:
                    12:c1:e8:f0:65:63:6f:47:aa:d8:66:4f:83:d8:49:
                    fd:d7:93:ad:b3:e5:ad:4b:d6:cd:85:61:e4:a5:83:
                    d7:90:ce:83:51:63:88:66:e3:54:f4:f9:88:8f:4a:
                    66:18:bd:da:7a:36:fc:a5:14:7b:01:64:80:76:2e:
                    5f:9d:1f:ec:d8:f1:40:6d:33:74:1c:c4:a7:92:11:
                    42:01:f3:1b:65:c9:45:29:ca:06:34:ae:18:a4:68:
                    2a:16:be:67:49:48:53:8f:07:8a:e7:db:58:43:2f:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:C2:19:C6:9D:CB:C4:DE:99:07:FA:79:84:DB:2D:08:1D:7B:D7:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/0/ADC219C69DCBC4DE9907FA7984DB2D081D7BD760.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.120.0/22
                IPv6:
                  2804:830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52852

    Signature Algorithm: sha256WithRSAEncryption
         91:19:2b:10:07:d4:4a:dd:c9:9e:b9:94:f3:6b:e0:e5:66:e1:
         eb:f8:98:a9:62:46:16:be:29:0c:26:c2:9d:6c:ae:09:4a:57:
         26:9c:e0:31:d7:06:3c:6c:1d:a1:39:84:66:84:b3:70:8c:6e:
         8a:d0:1d:e8:93:a7:b0:f3:6f:db:67:06:30:48:ae:ef:85:76:
         41:e1:56:1c:12:0b:e5:55:4e:1f:65:5d:74:24:c1:c5:a7:e8:
         11:fc:52:eb:1d:cd:08:4a:4b:66:c6:70:f7:cc:68:06:60:2c:
         58:fd:35:1a:ac:e1:8c:ea:53:26:c6:b6:cb:c1:12:94:d4:70:
         14:a3:f2:f5:19:0d:48:47:b2:bc:24:9f:49:d7:11:f7:7e:d8:
         46:d1:5d:33:73:af:5e:8b:5b:78:c2:a2:12:91:01:4b:d5:b5:
         53:b5:bb:48:b3:eb:c8:8b:ea:1d:71:e8:09:29:f3:db:6f:b7:
         01:5a:9c:c5:57:3b:d2:60:dd:25:c1:c4:3f:40:f6:d2:b3:5b:
         95:bd:36:55:2a:ca:c2:e6:3f:c3:cf:6f:fc:1c:a8:aa:21:a0:
         a0:c1:41:8b:a8:b1:2d:7c:23:85:c5:80:16:69:4d:71:e1:c9:
         dc:22:68:2e:54:f9:74:ff:03:9b:31:fc:37:56:f1:c8:f7:91:
         ee:b3:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----