Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C21190B2F2A59DE494BB999906A83D7149A3F8A2.cer
File:                     C21190B2F2A59DE494BB999906A83D7149A3F8A2.cer (raw, json)
Hash identifier:          qe7zVd+wYJe+fS0YQFwU2raMkPegOtbBkIEqm/ECBuA=
Subject key identifier:   C2:11:90:B2:F2:A5:9D:E4:94:BB:99:99:06:A8:3D:71:49:A3:F8:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BF68070F0992C5B0F01C8EC6135E6DD07208B7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C21190B2F2A59DE494BB999906A83D7149A3F8A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 18:19:22 +0000
Certificate not after:    Thu 11 Jan 2024 18:24:22 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f6:80:70:f0:99:2c:5b:0f:01:c8:ec:61:35:e6:dd:07:20:8b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 18:19:22 2023 GMT
            Not After : Jan 11 18:24:22 2024 GMT
        Subject: CN=C21190B2F2A59DE494BB999906A83D7149A3F8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:d7:43:e0:6a:bb:c7:95:1e:1b:b2:97:97:
                    a8:97:f4:25:dc:c6:3c:fe:ca:50:92:bf:20:4a:ab:
                    cc:6d:db:62:45:89:fe:ec:85:1c:d5:a7:12:99:38:
                    3e:af:d7:b6:02:44:5b:38:67:cf:0f:60:7e:5c:83:
                    63:e4:94:7b:a6:56:43:1a:00:44:bd:ea:c1:86:ad:
                    da:83:45:13:fd:13:6b:86:55:e3:4b:55:e5:02:f5:
                    7f:4e:a6:01:2f:1f:97:f7:24:1e:03:38:dd:12:75:
                    83:6b:13:f1:de:4d:ba:70:76:2e:80:95:00:77:6e:
                    42:71:8b:69:13:3a:73:88:4c:1e:18:ce:4b:87:ad:
                    af:d0:6b:de:a6:16:e2:e9:1c:6a:5a:70:da:63:5e:
                    17:9d:18:fe:9f:96:82:0c:5e:99:cd:d9:17:c6:86:
                    b7:ac:04:fa:aa:c3:2b:e6:29:7b:4b:7c:c1:94:8b:
                    5b:e6:db:6a:bf:9d:3b:72:d7:c1:3c:82:fe:7b:d0:
                    ee:a3:e3:6f:e3:cd:bd:14:88:bb:89:39:87:7b:09:
                    b8:24:c1:29:b5:e0:9c:bb:bf:0f:0d:0a:92:06:dc:
                    1c:8b:d1:38:00:a8:32:40:f4:15:38:e5:3c:7b:d7:
                    48:d5:5a:c2:2f:d4:50:5f:b1:fb:5e:52:4c:c9:21:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:11:90:B2:F2:A5:9D:E4:94:BB:99:99:06:A8:3D:71:49:A3:F8:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C21190B2F2A59DE494BB999906A83D7149A3F8A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:a5:df:f9:7a:cd:93:03:6e:48:c4:4d:3b:92:dc:d2:32:
         85:a3:9d:5a:29:ae:75:6b:8a:e3:ba:2b:86:3b:6e:7e:61:a5:
         66:f2:9b:97:a8:e3:ff:08:86:f4:68:a0:2e:02:1d:4e:9d:6a:
         99:96:31:4b:b8:63:49:3c:11:52:22:a0:df:ae:89:65:6a:05:
         98:8c:ae:0a:50:4a:c0:d9:37:fc:bb:75:fd:57:26:a3:31:af:
         4a:cf:0c:df:f6:c0:e5:13:4d:13:13:9a:61:bc:fd:ba:3c:cd:
         8f:6f:79:d4:18:df:f5:f2:a0:55:53:84:c6:0d:32:5f:8e:f9:
         bd:74:92:19:9a:30:01:67:fd:11:c6:a1:51:9e:72:33:aa:f6:
         06:cc:ff:a4:34:56:51:a1:f6:c9:a6:62:af:f3:c7:60:ba:d5:
         87:b8:96:6e:ef:03:2e:ea:03:cc:eb:8a:4b:87:18:ec:71:e7:
         24:e5:d2:4c:f3:5f:64:cc:e9:09:07:20:f4:0b:76:5e:07:08:
         37:f3:63:41:9d:58:06:90:12:a3:76:70:8b:8f:5e:12:e1:ba:
         e0:4f:9b:8c:5a:6c:83:45:70:39:07:12:d0:33:6f:a8:e5:fa:
         5a:cc:0c:78:5b:17:f1:87:11:b0:ce:2a:e4:c0:cb:47:a4:85:
         e8:fe:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----