Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C27A94F72095E449C89A56D4D36518799302AF7A.cer
File:                     C27A94F72095E449C89A56D4D36518799302AF7A.cer (raw, json)
Hash identifier:          f5d0Oi/8hsbqGpeCKDt9gWy3GWiyt9X4HlcQ65/yAR4=
Subject key identifier:   C2:7A:94:F7:20:95:E4:49:C8:9A:56:D4:D3:65:18:79:93:02:AF:7A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A73ED414C0AA45B29631A5C8030DCC61C695F67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/C27A94F72095E449C89A56D4D36518799302AF7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 11:06:02 +0000
Certificate not after:    Thu 11 Apr 2024 11:11:02 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:ed:41:4c:0a:a4:5b:29:63:1a:5c:80:30:dc:c6:1c:69:5f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 13 11:06:02 2023 GMT
            Not After : Apr 11 11:11:02 2024 GMT
        Subject: CN=C27A94F72095E449C89A56D4D36518799302AF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:b7:72:ad:a2:e9:b4:4e:b6:c2:73:8e:1b:
                    a3:19:48:02:00:be:e9:1e:4e:0e:6b:88:e5:d3:49:
                    2f:44:23:34:37:b9:39:37:88:7a:f2:b9:ad:bf:19:
                    47:5f:33:a0:56:0e:39:b8:44:1f:e1:bc:f8:e1:41:
                    71:a0:7e:e4:42:3f:c3:63:5f:3b:af:aa:8a:86:b3:
                    1c:c2:2c:22:3c:43:b0:8e:75:d9:82:31:d0:38:1e:
                    41:e3:c9:59:48:09:46:76:52:22:a0:ee:c1:e8:ca:
                    8c:c9:e9:80:e0:c5:d1:d2:1b:06:92:2d:39:d3:ee:
                    16:be:db:05:83:3e:9e:84:39:f4:74:b5:5e:9f:76:
                    d4:bb:c5:00:8a:6a:72:48:30:ba:dc:f8:81:af:a7:
                    ad:45:3e:4e:20:0a:5e:c4:df:92:bd:17:e1:60:c2:
                    a5:64:82:d9:d3:4b:fa:a3:a8:4c:f4:59:45:dc:1c:
                    a4:21:73:92:0f:4f:08:73:65:c3:d1:11:5d:a6:47:
                    1c:d2:c2:f7:31:f5:47:70:46:b6:8d:54:f4:9c:8e:
                    45:62:49:bc:1e:da:20:3e:b4:65:4b:94:b9:8c:7f:
                    09:ba:dc:57:e3:78:9b:9b:1b:58:17:1f:7d:8a:f9:
                    1d:17:f0:5e:b3:b6:8c:21:0f:51:17:ae:9c:c9:bd:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:7A:94:F7:20:95:E4:49:C8:9A:56:D4:D3:65:18:79:93:02:AF:7A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/C27A94F72095E449C89A56D4D36518799302AF7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         90:e0:8b:c7:f5:39:65:bf:eb:9b:39:fd:6e:0f:ef:ce:6c:ba:
         e9:f1:4a:dc:ae:be:f6:46:61:b6:83:ad:e5:e4:36:4d:39:87:
         1c:2a:b2:f3:af:b7:1c:57:61:d2:36:c3:41:4b:10:6b:5c:53:
         8e:fc:15:d5:0f:92:f9:bf:d7:d2:d6:82:5b:64:63:e4:c5:64:
         56:4b:cc:cb:48:88:58:58:8d:e5:c1:45:20:90:95:01:89:d6:
         af:3b:13:f0:cd:8c:51:c0:a1:42:6f:a7:b4:ca:fd:48:46:ab:
         60:b8:02:c3:f6:1f:1b:24:7f:f0:ad:dd:78:6a:3b:bc:1a:0a:
         3f:ef:42:14:4f:4b:71:23:5c:a1:66:5e:74:d7:a4:a6:2a:ad:
         bb:be:91:8e:b4:16:88:5c:40:b4:3d:d6:2f:08:10:23:d9:86:
         b9:cc:81:0e:0f:43:7d:71:87:53:29:25:4d:7c:d0:ad:de:2a:
         99:ec:40:d9:a6:aa:18:bb:7f:70:de:0a:49:5d:d0:f3:ce:55:
         e7:06:a2:bd:57:40:ac:ab:b9:14:bf:a2:a8:87:59:db:a9:e3:
         b5:30:94:41:97:78:c3:b8:b0:8f:84:88:a9:55:99:20:1d:67:
         5c:36:16:31:89:bb:48:c2:10:e7:67:45:97:81:7e:27:c1:20:
         77:ea:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----