Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
File:                     B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer (raw, json)
Hash identifier:          fhxJTNRBI7SosIS8dsnt0ZCWXoxSitZHzhKX16R498s=
Subject key identifier:   B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E85F841CE2D229618D15EA5EC1D516D98632092
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 14:39:04 +0000
Certificate not after:    Fri 11 Oct 2024 14:44:04 +0000
Subordinate resources:    AS: 61796
                          IP: 201.159.180.0/22
                          IP: 2804:1978::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:85:f8:41:ce:2d:22:96:18:d1:5e:a5:ec:1d:51:6d:98:63:20:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 14:39:04 2023 GMT
            Not After : Oct 11 14:44:04 2024 GMT
        Subject: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:5b:27:83:73:2c:17:22:a4:4a:cd:22:22:
                    b1:54:ac:8e:53:03:ee:bd:29:84:5a:81:09:2f:3b:
                    13:08:22:62:31:bd:f8:2c:e1:0c:44:de:94:47:f8:
                    29:d2:ec:bc:c0:e6:31:55:e6:2b:68:61:c5:73:cf:
                    f4:b4:4a:4b:d2:1c:9e:5a:d8:df:33:f8:c4:bf:9b:
                    8d:3d:81:32:d8:77:26:08:c6:5d:8a:f6:31:46:25:
                    85:70:97:d2:fe:c2:c6:17:ee:58:88:80:76:34:85:
                    cf:83:26:2f:98:0a:11:ce:1a:49:48:c4:97:7d:61:
                    97:df:23:fa:ae:14:98:bb:15:ff:8f:4a:50:60:06:
                    30:d3:f8:ce:e0:c0:12:9e:39:5e:4b:95:cf:aa:c4:
                    e7:18:3c:d2:e7:b3:8f:f0:04:87:5e:f2:65:72:f5:
                    31:53:e5:bf:65:f9:55:77:74:90:2a:1d:4a:14:80:
                    5b:62:3a:26:a2:99:95:53:91:cd:e7:1d:04:76:04:
                    5d:11:e4:50:61:10:8b:09:e1:fd:bd:97:e6:b3:64:
                    34:b5:2f:2a:35:c4:85:4d:55:84:cf:d9:1c:d0:d2:
                    10:29:ef:3f:07:bf:ab:66:8d:d4:01:00:24:31:a0:
                    ce:3f:a3:8b:0c:7b:f0:e9:21:5f:c4:dd:09:0b:24:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22
                IPv6:
                  2804:1978::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61796

    Signature Algorithm: sha256WithRSAEncryption
         50:86:d4:19:19:ab:47:83:62:52:12:d6:dc:83:65:0d:98:92:
         d2:80:b8:62:1c:17:0a:67:4f:29:a6:41:7d:7a:0a:29:aa:46:
         92:3b:cb:61:70:c9:3f:6c:52:4a:56:48:ab:a5:49:af:29:bb:
         67:36:cf:fe:07:58:87:59:3d:c9:73:60:10:53:26:8d:6f:4e:
         0b:8f:6d:ed:36:1d:31:fd:53:e3:40:df:83:fe:42:1c:05:b5:
         74:ca:79:c3:33:06:71:4c:9e:19:42:0e:98:9c:c3:30:72:54:
         75:95:10:a2:3d:ba:b4:43:f0:86:bd:ff:b6:d2:eb:71:51:c1:
         44:98:a9:ee:97:ae:83:1e:f5:b5:0d:57:76:2b:6f:d7:6f:9a:
         7a:29:ef:94:0b:e5:e4:84:90:57:00:c4:9f:54:98:a1:ec:67:
         b7:ac:e3:12:81:cd:24:d8:f5:be:95:d5:b3:c8:b0:9c:66:b5:
         08:6c:f2:79:e5:06:20:83:34:6e:38:97:06:06:81:b2:72:38:
         59:aa:5b:e7:e1:1d:39:6b:3a:aa:32:79:cf:8a:eb:97:6d:c3:
         1f:17:64:5a:64:db:9d:a4:02:b3:3a:2e:5a:18:86:3d:eb:8d:
         01:43:c3:29:99:75:47:cd:2c:b6:99:85:45:cd:e6:c0:ba:0d:
         5f:7c:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----