Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
File:                     AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer (raw, json)
Hash identifier:          fY3DITDcH2HnKJDwHKPSfpxDKl7xPf6Xw/f/YCX9C7o=
Subject key identifier:   AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27EF90C0DA05BB7A09AEA4410BF8EB68C5342DD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 14:49:20 +0000
Certificate not after:    Tue 24 Dec 2024 14:54:20 +0000
Subordinate resources:    AS: 267995
                          IP: 45.167.48.0/22
                          IP: 2804:5664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:90:c0:da:05:bb:7a:09:ae:a4:41:0b:f8:eb:68:c5:34:2d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 14:49:20 2023 GMT
            Not After : Dec 24 14:54:20 2024 GMT
        Subject: CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:83:75:d7:d7:4f:c1:6d:68:cd:dc:49:9b:
                    9b:84:31:7d:25:8c:c9:74:75:76:c9:0d:dc:01:87:
                    f3:5b:d9:5e:a8:76:28:6c:55:c0:d6:a0:d9:4c:51:
                    36:2c:f0:49:3d:f4:5e:22:da:8d:ba:94:dd:57:33:
                    88:3c:21:e6:5d:df:92:90:12:2b:a6:6d:c2:63:c1:
                    4f:ce:2f:b8:c2:17:4a:56:45:61:2c:36:ca:98:09:
                    56:a9:28:dc:16:30:4d:0e:a1:94:99:e1:f4:4d:72:
                    99:17:dd:8e:14:9f:ac:f7:9a:f3:26:3d:ae:14:70:
                    e9:d3:5e:37:f6:02:65:b1:76:b6:0e:4d:bd:ee:2b:
                    b2:42:bd:b7:fe:ca:c4:70:9c:f9:d7:54:a0:fc:d6:
                    5a:8c:ac:6e:39:b0:ba:8f:25:b1:7d:45:ce:02:66:
                    89:0e:9e:f9:3c:1d:e7:d7:6b:57:2e:f9:dd:77:ad:
                    ec:8c:83:f1:72:cd:e8:b9:91:ef:c7:c7:2d:ba:cf:
                    80:bf:5b:8c:01:5f:95:50:45:fd:d6:d7:dd:be:6b:
                    3b:81:3f:58:9e:36:1e:3b:e5:93:63:9e:63:b0:e5:
                    65:1b:05:26:48:f7:ef:4c:d7:17:8b:c5:f3:57:e9:
                    e0:48:b3:22:b3:30:6d:45:4d:1c:49:95:bf:ad:ad:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.48.0/22
                IPv6:
                  2804:5664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267995

    Signature Algorithm: sha256WithRSAEncryption
         19:df:d5:15:41:d7:2f:e1:12:f6:cd:ce:4a:89:2a:08:af:f1:
         ce:98:9f:5e:37:18:aa:3f:c4:2e:8d:17:70:19:76:f6:77:b7:
         d3:5e:73:44:58:c6:c4:e9:0c:ac:97:6b:a5:3a:8c:df:25:57:
         a1:f7:f4:2f:22:dd:5d:73:9b:04:c5:b3:13:9b:c9:99:50:f6:
         e0:fb:d7:f6:eb:75:06:f0:10:3b:df:de:5a:cf:36:67:94:1a:
         77:6a:db:cc:94:11:b6:24:fd:f2:54:48:06:1d:c7:d3:93:2e:
         3f:94:7b:b6:b9:93:90:a9:82:8c:e2:79:ba:01:bf:ea:db:94:
         ae:dc:c8:19:45:3c:0d:6d:51:80:70:ba:94:f2:32:81:1c:22:
         5e:bf:ff:7f:87:8a:11:02:73:aa:ec:75:e2:9a:ad:1e:e5:33:
         a3:57:50:d2:e4:e9:8d:3a:ff:18:8b:1f:86:3b:17:17:cc:c5:
         58:f5:da:c4:3e:f5:ea:25:4c:d1:2f:23:30:30:7f:03:fd:27:
         91:7a:93:92:ac:36:44:f9:9c:07:f8:8f:0f:93:77:fb:99:3f:
         c7:e4:56:e8:72:20:f6:0f:1f:2b:ff:a3:3c:25:30:3b:c5:20:
         c6:0e:8b:ca:20:6b:07:91:77:1d:d7:ed:b3:95:a3:d3:be:13:
         de:d2:03:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----