Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1701C1617832DD377398CFB3509D60E26D87228.cer
File:                     C1701C1617832DD377398CFB3509D60E26D87228.cer (raw, json)
Hash identifier:          O4LZgRtixkX5bTfLmuUsycgm3IjB3RUZ8ZudRPCBuS0=
Subject key identifier:   C1:70:1C:16:17:83:2D:D3:77:39:8C:FB:35:09:D6:0E:26:D8:72:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20AF6581A8F3C0AA75091D5FA4CDD6EA7BF3D415
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Nov 2023 18:58:40 +0000
Certificate not after:    Thu 21 Nov 2024 19:03:40 +0000
Subordinate resources:    AS: 262411
                          IP: 177.38.208.0/21
                          IP: 2804:778::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:af:65:81:a8:f3:c0:aa:75:09:1d:5f:a4:cd:d6:ea:7b:f3:d4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 23 18:58:40 2023 GMT
            Not After : Nov 21 19:03:40 2024 GMT
        Subject: CN=C1701C1617832DD377398CFB3509D60E26D87228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:d2:be:07:d6:a1:1f:83:c0:66:13:e8:fe:
                    ca:a8:d2:ed:f3:ad:bd:46:38:85:e2:c9:1a:01:c6:
                    8d:8e:c5:40:68:66:5d:46:1c:92:e9:4e:77:b4:84:
                    11:6b:7c:95:d3:6f:1e:5f:f1:e5:60:0c:d7:18:0b:
                    ac:e7:ac:33:cb:ff:ab:72:a9:25:c3:72:ee:5e:6e:
                    29:23:bf:5c:bf:78:89:3c:7d:a0:ab:a3:9f:5a:27:
                    9b:25:d7:43:2b:ec:d0:df:15:87:2a:a8:bf:7a:11:
                    89:8c:af:b7:c7:16:17:bf:70:64:28:9a:38:d8:63:
                    b5:03:dd:41:b9:d4:81:5a:5a:00:42:96:42:db:38:
                    85:f8:79:e0:21:3b:31:91:b8:99:6e:3d:6d:6b:8b:
                    9a:2b:21:72:fa:ef:43:70:14:49:55:4a:28:ce:e3:
                    92:53:84:68:68:1e:07:06:aa:8f:37:7c:99:28:cf:
                    9f:25:7d:f8:dd:31:18:13:66:04:89:ef:33:4c:0f:
                    08:9f:89:3b:a6:70:43:fd:30:e9:1d:d4:06:18:dc:
                    7b:c8:1b:c9:28:93:90:d6:1b:ba:eb:8a:a5:e9:e9:
                    56:cb:47:32:c7:7e:18:27:93:9b:ce:71:da:4b:90:
                    d9:eb:01:2d:20:3a:a2:e8:36:2c:44:d4:0d:ce:cf:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:70:1C:16:17:83:2D:D3:77:39:8C:FB:35:09:D6:0E:26:D8:72:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbEaPQmuZC5sV7pzWHLzG5eWdnDsykBCaYv8s3p8yb6W/0/C1701C1617832DD377398CFB3509D60E26D87228.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.208.0/21
                IPv6:
                  2804:778::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262411

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:64:b2:97:99:50:4b:1f:c9:1d:b6:02:9b:8b:a8:cc:88:
         14:ff:7c:a6:89:70:6a:73:14:7b:29:90:4d:01:bf:a2:e5:a5:
         3d:b4:af:56:ec:3b:a8:14:20:22:d3:56:78:0f:9d:e2:ae:7f:
         46:6f:bd:a8:d5:93:01:5b:17:c0:bc:a9:b5:d8:67:26:10:0d:
         1e:c5:c6:ff:d2:27:19:dc:b9:44:c7:c1:a2:31:7e:13:00:98:
         13:8f:3b:6d:d9:51:21:fd:36:cb:45:34:48:35:a1:d7:2d:78:
         fd:aa:af:a1:41:9e:7c:ed:7b:30:33:6c:d5:10:6a:a4:bf:97:
         78:eb:03:c4:3a:49:2b:5e:1b:b1:56:d3:ce:ea:08:71:9b:5b:
         e8:3c:d2:26:ab:cd:51:26:23:80:04:fa:5d:1d:07:c6:88:14:
         12:e2:6a:f9:55:59:29:41:77:17:84:c5:48:18:57:4a:cd:92:
         7f:b8:09:f9:49:87:f3:1c:9b:91:ef:a7:75:8e:27:d7:15:ae:
         68:db:cf:5d:27:c8:f4:b4:39:b5:2f:3b:58:f7:06:eb:f3:33:
         f7:82:a7:22:14:7f:44:a1:d9:43:40:02:33:08:ad:a7:34:c7:
         91:44:09:8e:58:1d:8d:8d:94:23:09:66:f3:f8:c6:d4:eb:21:
         6e:39:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----