Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.cer
File:                     AE2616710A04D19943FCBDA2F29AC92D9E964998.cer (raw, json)
Hash identifier:          tkYaavjgJOq751VEMYT+3ubG3yOuOfhOSGXATYJ/rEM=
Subject key identifier:   AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       689127F05F0382E3E6CD67F20439D616EACD14B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 19:42:52 +0000
Certificate not after:    Fri 15 Nov 2024 19:47:52 +0000
Subordinate resources:    AS: 269380
                          IP: 45.185.92.0/22
                          IP: 2804:63bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:91:27:f0:5f:03:82:e3:e6:cd:67:f2:04:39:d6:16:ea:cd:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 19:42:52 2023 GMT
            Not After : Nov 15 19:47:52 2024 GMT
        Subject: CN=AE2616710A04D19943FCBDA2F29AC92D9E964998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:a3:a9:2a:be:ef:f3:4b:65:65:30:51:92:
                    26:93:55:97:9c:b5:92:cb:80:f4:a5:c3:3d:4b:7a:
                    55:35:a3:d9:5c:4b:fe:9b:59:33:aa:af:ef:40:a7:
                    d7:a6:2b:e7:79:ec:5c:b6:37:22:76:91:3f:f9:63:
                    3f:3b:b5:30:a2:df:9f:fc:6c:80:f8:c6:e1:bf:74:
                    b2:73:28:6c:99:76:e5:84:5f:ae:b6:fe:52:80:94:
                    fa:2f:af:7b:31:d8:e3:df:9c:00:44:90:b8:ab:0e:
                    f9:5d:85:74:55:49:1f:b2:c6:d8:5d:c5:53:ec:22:
                    f3:b1:71:02:7e:21:95:24:f8:89:fd:43:dd:c0:b9:
                    db:26:3f:c7:af:61:11:b9:64:79:a2:4e:09:e3:78:
                    8d:a6:06:3b:e0:8c:84:1d:ba:5d:b4:b8:50:4f:27:
                    f8:0d:fb:57:3f:dc:7f:c9:70:00:c9:ac:18:87:14:
                    32:51:4f:68:95:7e:44:c7:e3:60:f2:10:8e:3e:31:
                    59:d1:0a:f6:73:9a:4e:4b:7d:fd:36:ac:a9:79:37:
                    87:05:f7:68:c7:ec:49:13:49:3f:09:94:f9:e5:48:
                    7e:7a:e1:95:71:a3:45:2d:57:65:bb:a3:5f:a6:9f:
                    c8:1f:92:8c:19:a7:a7:61:77:4f:1d:d4:3e:ce:ea:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.92.0/22
                IPv6:
                  2804:63bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269380

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:3a:14:dd:65:64:76:ab:5b:ae:f6:eb:5e:e3:c9:87:68:
         fb:53:53:20:74:ff:44:4e:50:02:fa:85:89:b1:08:f2:98:77:
         67:4c:b1:6e:31:75:4a:24:04:0d:8b:0a:06:6e:2a:d0:92:7a:
         0d:0c:98:fa:bd:a6:d4:4e:b2:f5:00:3f:a1:25:d3:42:01:f6:
         17:d3:21:8c:1b:71:eb:ad:42:5c:4d:5b:b0:dd:b7:49:6d:fb:
         02:40:85:5d:3e:0d:1a:3a:4a:f4:6b:b4:de:5c:50:55:e5:a2:
         7f:29:cd:f5:98:e9:79:32:81:dd:01:51:9b:9e:b7:9a:26:95:
         a2:67:43:86:0f:6b:59:d0:11:9e:a6:d9:b3:4e:f2:fb:4b:29:
         e1:9d:60:04:e0:54:b7:7a:63:27:a2:2d:fd:03:2c:ff:ef:3d:
         20:8c:b8:c2:fb:a5:cc:62:c6:76:9e:fa:95:da:b2:08:4e:8b:
         b7:a6:c3:4a:76:d6:99:50:69:4a:c7:0f:7c:cc:d6:d9:c9:12:
         fd:35:ae:0d:7a:7d:80:30:48:2c:44:ba:8e:df:16:2b:f5:99:
         0d:2a:a1:0c:11:87:85:f5:58:e9:ba:a5:d0:cc:74:9a:41:6a:
         81:c2:1c:b2:0e:b5:12:c8:0a:6a:bc:50:e9:8c:3f:8d:0f:81:
         9e:8b:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----