Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCC3EE060E3F4DE5A7BF57F3D662CA9D84DC39A5.cer
File:                     BCC3EE060E3F4DE5A7BF57F3D662CA9D84DC39A5.cer (raw, json)
Hash identifier:          G5gHSdycLnWMb281ZAKSa1LNoWztKYYbLFqY23MKa14=
Subject key identifier:   BC:C3:EE:06:0E:3F:4D:E5:A7:BF:57:F3:D6:62:CA:9D:84:DC:39:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3279D3D08260E77141143BC4E5BF5F18744EDC09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/BCC3EE060E3F4DE5A7BF57F3D662CA9D84DC39A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 12:21:46 +0000
Certificate not after:    Mon 17 Feb 2025 12:26:46 +0000
Subordinate resources:    AS: 265973
                          IP: 164.163.204.0/22
                          IP: 2804:40a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:79:d3:d0:82:60:e7:71:41:14:3b:c4:e5:bf:5f:18:74:4e:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 12:21:46 2024 GMT
            Not After : Feb 17 12:26:46 2025 GMT
        Subject: CN=BCC3EE060E3F4DE5A7BF57F3D662CA9D84DC39A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:e8:6e:9a:e3:27:93:d9:48:43:c5:ca:86:
                    de:f9:84:b2:2a:35:3c:ff:31:3d:ff:be:e8:78:92:
                    89:63:58:d7:6e:ee:49:8e:03:e8:53:1f:d9:35:0c:
                    14:4f:e3:96:7a:d2:38:39:62:0f:69:0e:54:10:3a:
                    12:f0:38:9b:3e:fa:ac:71:b7:46:fa:7b:9a:3d:71:
                    8b:8d:ee:9c:8c:62:14:bc:f2:ea:3b:c1:a8:19:a9:
                    3b:55:02:3e:0c:b4:58:71:55:59:b5:4f:bd:74:ff:
                    96:ca:74:58:42:67:21:e4:13:ce:95:26:5e:c2:40:
                    11:eb:51:c9:4f:15:cd:34:bb:25:89:0c:3d:5b:e9:
                    de:f2:47:66:fc:e0:5c:40:51:2f:97:62:b5:4f:90:
                    59:8d:84:08:33:9f:61:b8:9b:65:ae:7a:b7:d0:89:
                    56:bc:ca:1b:35:2b:2b:ee:0e:b4:46:e4:e6:1e:6f:
                    f7:26:94:84:f5:ab:af:f9:6e:c7:2e:23:b2:35:fd:
                    8e:ce:cd:44:c0:a0:a1:47:58:87:e4:fd:de:d7:2f:
                    2f:33:7a:68:2d:e1:33:4f:0c:2c:20:8a:5f:9c:c6:
                    6f:d2:d7:c3:7e:b7:5a:3b:17:38:2e:f2:67:87:a6:
                    b6:d1:ec:4c:ae:83:d7:5a:ca:93:9a:54:d3:c3:7c:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:C3:EE:06:0E:3F:4D:E5:A7:BF:57:F3:D6:62:CA:9D:84:DC:39:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/BCC3EE060E3F4DE5A7BF57F3D662CA9D84DC39A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.204.0/22
                IPv6:
                  2804:40a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265973

    Signature Algorithm: sha256WithRSAEncryption
         9f:5f:3b:41:ee:64:26:9f:e0:5e:43:e7:01:85:fc:dc:29:ba:
         df:7d:c5:83:b8:06:0b:1b:e9:6a:3d:12:1b:1d:18:fc:a1:c6:
         d6:bb:87:7c:3f:52:c4:c2:c4:d0:ed:3f:c6:9c:8f:b3:01:81:
         45:2a:b4:01:ae:3d:4c:a5:1d:b5:d2:f0:71:4a:d0:71:b2:01:
         82:f7:62:02:46:d7:8e:c3:8a:df:c9:10:cc:d2:9a:9e:3e:bd:
         09:2d:8b:ae:27:fd:1d:16:40:07:c7:d0:22:ad:58:8e:b1:18:
         96:f3:43:ca:ec:6e:5f:cf:65:a6:20:69:31:42:43:57:59:44:
         23:09:e6:55:31:d4:fc:f4:c7:30:0c:08:cc:ef:fd:78:39:fd:
         54:2e:20:fc:be:ef:fb:50:06:af:5c:82:d9:c5:3a:88:03:6f:
         13:2b:81:a4:70:e5:57:2a:38:0c:41:47:d5:2f:99:86:24:80:
         f9:c9:0e:2d:3e:88:cd:b2:cb:7c:84:c3:9b:6e:88:c5:c2:f6:
         e2:5d:11:9a:ad:e8:40:8c:da:e7:36:81:cd:c8:89:94:4b:9f:
         16:09:71:8c:5d:67:fb:d2:1c:42:20:a4:c0:c7:45:ef:97:9f:
         3a:11:7f:df:86:16:36:3f:e2:08:54:97:d9:f4:cc:5d:d1:67:
         6e:3b:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----