Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BBB7984252EDD9C0261EABF145A98833F35E7A29.cer
File:                     BBB7984252EDD9C0261EABF145A98833F35E7A29.cer (raw, json)
Hash identifier:          TpNYJQQNa8ytrJcTVWddbVf8Mrcl9kDSWSyhkURvdsE=
Subject key identifier:   BB:B7:98:42:52:ED:D9:C0:26:1E:AB:F1:45:A9:88:33:F3:5E:7A:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       045338FE590E32BC19C5752EF546A99E9338DACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/BBB7984252EDD9C0261EABF145A98833F35E7A29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 10:55:27 +0000
Certificate not after:    Fri 14 Jun 2024 11:00:27 +0000
Subordinate resources:    AS: 273575
                          IP: 2804:8904::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:53:38:fe:59:0e:32:bc:19:c5:75:2e:f5:46:a9:9e:93:38:da:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 10:55:27 2023 GMT
            Not After : Jun 14 11:00:27 2024 GMT
        Subject: CN=BBB7984252EDD9C0261EABF145A98833F35E7A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:0f:ff:f3:cb:b0:ff:39:f9:99:11:f6:8d:
                    ff:5d:d2:6a:84:f7:04:00:4f:f9:fc:11:5e:74:37:
                    b0:10:e6:0f:de:77:04:af:f0:51:d6:9b:23:78:09:
                    ee:7a:fa:c7:de:39:ff:97:81:ec:15:f4:c5:13:31:
                    89:c1:84:16:4d:c2:d4:c9:20:32:47:4b:38:09:27:
                    03:f4:34:0b:c6:38:b5:6d:d9:8e:70:5b:91:8e:7f:
                    ae:c9:14:4f:f3:9d:2e:c2:15:a5:11:d2:d8:50:cb:
                    57:31:9e:88:20:8b:f4:06:7e:6e:89:6e:74:78:92:
                    6b:18:3b:00:5d:c2:03:8e:a1:70:d7:94:39:19:6e:
                    84:04:df:ed:8f:9e:19:52:e7:7c:8f:d1:10:51:16:
                    79:81:30:0d:60:ea:c8:b5:5c:af:89:b6:81:41:1a:
                    6f:e2:33:e5:b4:a9:51:b1:44:6d:01:4c:40:1e:1c:
                    f3:3d:15:a3:b0:8e:c0:44:18:f6:54:45:54:f1:68:
                    c9:52:bb:a9:ac:e4:30:42:a0:c9:ab:26:5a:03:4a:
                    34:15:4b:38:2a:71:7a:c0:f0:3f:ff:19:00:95:27:
                    4e:8e:48:17:8a:44:cf:c7:b4:07:30:19:de:63:12:
                    1f:ff:c1:b3:1d:4d:2d:d5:63:90:4c:e3:f1:e7:b4:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:B7:98:42:52:ED:D9:C0:26:1E:AB:F1:45:A9:88:33:F3:5E:7A:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2b3TUZRcH5Q5Ki66vLw9T1z5ojCfmQQhRkd2hq19WbMa/0/BBB7984252EDD9C0261EABF145A98833F35E7A29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8904::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273575

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:f9:c4:2a:4c:3a:35:41:25:e1:32:67:9c:85:95:f7:e2:
         27:12:8e:78:15:4b:b4:eb:84:07:dc:e8:00:ac:85:9a:f2:c2:
         f7:77:25:74:c9:f8:b9:11:2c:64:a4:66:24:32:e8:42:2b:2f:
         d6:28:00:41:7a:cb:5f:ac:ca:31:3a:91:ea:56:51:92:f0:eb:
         52:96:01:f1:c4:5f:33:af:87:ac:03:a7:82:92:83:d3:c3:eb:
         08:21:c8:d7:13:81:44:37:a4:e0:c5:bd:fb:8d:e2:24:de:40:
         92:99:65:1a:ef:aa:bc:20:4e:28:66:2d:c1:48:bc:77:c2:14:
         85:46:23:5f:f8:47:3c:c3:19:0f:a8:8a:16:4c:df:5a:44:cb:
         b5:4d:1b:57:06:d5:27:c2:97:c2:9b:b2:80:3a:3c:f0:af:7f:
         67:0e:25:62:ab:7a:21:9a:7a:2b:66:4a:02:f6:d0:2e:c3:eb:
         cb:66:89:25:2e:16:c7:9b:9d:36:ff:2d:50:6f:d6:ae:17:80:
         cf:d3:b0:7c:dc:8a:1c:33:ae:e6:25:2d:e2:8a:b2:47:f7:7c:
         33:44:93:8f:08:d0:ec:f3:86:9c:f1:32:f2:a1:d1:4f:0b:75:
         61:09:b9:90:94:c5:d3:ae:62:c3:b6:33:21:d4:31:91:ac:a0:
         84:49:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----