Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BFB21F4F676E6D59CCE068E1A3E916B501831E96.cer
File:                     BFB21F4F676E6D59CCE068E1A3E916B501831E96.cer (raw, json)
Hash identifier:          9HIICK+QGOee2hq1ni6VOniwky7IqEoW4HXd0HF47iE=
Subject key identifier:   BF:B2:1F:4F:67:6E:6D:59:CC:E0:68:E1:A3:E9:16:B5:01:83:1E:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C460B19F5F6DE9C4E2650C6BA42845E859E110B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/BFB21F4F676E6D59CCE068E1A3E916B501831E96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 23:43:37 +0000
Certificate not after:    Mon 29 Jul 2024 23:48:37 +0000
Subordinate resources:    AS: 264500
                          IP: 131.255.228.0/22
                          IP: 2804:2098::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:46:0b:19:f5:f6:de:9c:4e:26:50:c6:ba:42:84:5e:85:9e:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 31 23:43:37 2023 GMT
            Not After : Jul 29 23:48:37 2024 GMT
        Subject: CN=BFB21F4F676E6D59CCE068E1A3E916B501831E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:9d:23:76:be:60:36:03:65:8f:a3:f0:73:
                    92:11:26:9a:11:e9:d1:b4:78:bf:b0:89:27:6d:bc:
                    42:14:df:7c:55:6a:b1:fb:7b:73:73:4e:35:cb:92:
                    3a:6e:43:b7:b6:7d:08:22:47:40:84:ed:25:de:fe:
                    4c:48:85:82:aa:a6:f5:b9:bc:b6:c4:4a:ec:14:f9:
                    8d:fd:ec:b9:46:12:0b:8d:07:72:02:4a:5c:b8:d4:
                    59:dd:64:7a:aa:bb:f9:f7:63:1e:d7:d0:09:ee:3b:
                    b5:f9:75:7f:7b:2b:23:e3:e7:f1:cb:89:2e:b5:d9:
                    76:f0:07:ab:85:f8:b6:7d:27:fc:4d:2c:94:77:91:
                    ae:91:82:90:0e:ac:ad:bc:ef:50:7c:94:bd:a2:54:
                    5d:e8:b3:31:ce:f3:5f:7a:a5:32:e8:1d:23:12:0c:
                    f1:23:29:eb:98:0e:9b:65:bd:99:2e:1e:66:aa:c1:
                    6c:a0:f4:c4:e2:3c:dc:e6:93:ad:e6:23:78:59:d6:
                    8e:66:d0:14:18:1e:fd:59:3f:d8:7d:93:e9:cb:bf:
                    8a:c0:40:fb:5d:9f:c5:7c:42:b0:1e:12:6f:96:27:
                    37:7d:a3:c4:37:d7:0f:8f:19:3f:59:0a:28:9f:2d:
                    c5:0c:de:df:94:bb:bd:81:f0:cb:50:10:e1:6c:6a:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:B2:1F:4F:67:6E:6D:59:CC:E0:68:E1:A3:E9:16:B5:01:83:1E:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/BFB21F4F676E6D59CCE068E1A3E916B501831E96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/22
                IPv6:
                  2804:2098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264500

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:9e:2c:13:1f:d6:55:45:19:d4:fb:87:2c:98:b6:c6:4c:
         26:28:95:ec:ff:7b:d8:89:ca:0b:0f:e5:36:a8:53:1b:d6:31:
         d9:36:1a:8f:68:60:32:ad:f3:5f:69:fe:bc:69:84:9f:4b:87:
         72:70:f4:72:01:25:c6:61:a5:8b:e2:7f:12:c7:75:61:eb:b1:
         28:9a:95:d0:c4:3e:e7:c0:a7:24:cf:d2:65:7d:22:ad:02:37:
         be:f9:66:73:8b:c9:e4:d5:1e:17:98:4e:db:1e:ea:58:39:7c:
         0d:a0:5c:e9:3e:e4:52:bb:c2:dc:e5:10:00:30:5f:99:b7:6d:
         ae:e6:2c:2b:89:74:0b:2b:bf:3f:26:48:ad:49:3b:2f:db:97:
         bd:ff:93:66:d9:b8:9a:d8:18:2d:b2:94:1d:2a:87:8b:99:1b:
         38:f7:35:13:2a:e8:23:ef:ed:1e:d9:a3:f8:95:41:26:70:ad:
         28:38:ea:de:59:76:75:8d:f9:29:8a:0a:e9:ac:50:ac:0a:e0:
         cf:7c:9b:74:6f:1b:4b:d2:0c:22:c7:be:ac:ed:81:9b:a6:90:
         9e:fb:8b:e3:7d:42:62:fe:5f:00:33:4a:6f:8a:9f:5a:c4:61:
         e4:b2:5e:e9:04:c2:53:a4:93:c5:69:2b:57:6b:0b:67:eb:8a:
         e1:70:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----