Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.cer
File:                     C966BFE75D740DECD5CC886F943F0FBC4390193F.cer (raw, json)
Hash identifier:          aO/Nan7ZZ+hgK0BO6WXyRPQyMx7rf1Rb0bYFCLpmJJU=
Subject key identifier:   C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       524A721C7B7419BE87300672C0A3EF4CA82A588D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 18 Aug 2023 11:38:26 +0000
Certificate not after:    Fri 16 Aug 2024 11:43:26 +0000
Subordinate resources:    AS: 271515
                          IP: 168.195.210.0/24
                          IP: 2804:7cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:72:1c:7b:74:19:be:87:30:06:72:c0:a3:ef:4c:a8:2a:58:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 18 11:38:26 2023 GMT
            Not After : Aug 16 11:43:26 2024 GMT
        Subject: CN=C966BFE75D740DECD5CC886F943F0FBC4390193F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:e5:d0:8c:a9:e8:fe:ca:82:ea:93:1d:d5:
                    cb:d5:f7:33:ba:d8:6c:7f:de:4b:87:12:67:e9:56:
                    29:34:d6:03:6d:b5:49:86:ec:49:eb:eb:50:98:51:
                    49:a0:23:a5:51:b3:41:36:fe:48:92:d2:73:59:ad:
                    a9:71:14:1f:4a:cb:54:2f:f1:fb:b7:04:f3:a4:57:
                    ee:8e:06:5d:ce:b9:e5:17:89:a5:09:8d:dd:85:9a:
                    e7:d8:1c:a6:0d:9e:8c:8e:47:6b:15:f0:02:40:2d:
                    8d:64:a6:c8:2b:09:89:ad:05:f6:c9:8a:04:51:be:
                    7a:6a:2a:a3:40:6f:4c:6d:48:72:2a:30:77:e8:a1:
                    dd:99:f1:e1:33:02:ad:ce:7d:9c:48:2d:c4:f0:69:
                    ee:c5:a8:5f:f8:8c:ed:0c:d6:a4:e1:5b:70:40:3e:
                    86:e3:dd:3c:fb:6e:48:75:71:19:4a:d5:4f:0f:dc:
                    3e:1f:c6:8d:1e:9e:57:3c:a6:ed:f0:6a:22:c6:6f:
                    36:41:e7:be:0b:13:d3:e3:9c:06:98:96:5a:9f:9f:
                    8e:25:ec:0c:ad:66:b4:7f:2f:9f:e8:06:5a:65:05:
                    3c:f9:c3:bf:3d:77:ae:68:e5:a8:9d:c3:15:42:e6:
                    c2:8a:9a:4b:53:70:8a:a0:8f:e8:36:60:a5:ff:8a:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:66:BF:E7:5D:74:0D:EC:D5:CC:88:6F:94:3F:0F:BC:43:90:19:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/44L5mqFbmPQ4e5WPfNQEJUvK3QQZ9VZSJcm4mMHTAis3/0/C966BFE75D740DECD5CC886F943F0FBC4390193F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.210.0/24
                IPv6:
                  2804:7cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271515

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:42:56:b0:1b:5a:c7:59:eb:3c:a4:43:4e:e0:ee:3b:bc:
         87:86:5e:b2:67:09:88:94:ef:33:58:98:c0:a4:de:dd:24:11:
         fb:b2:9a:9a:d1:12:96:ea:3d:f1:2f:db:9f:ad:1f:ce:aa:33:
         f5:a7:ef:aa:c8:0c:69:02:19:a4:5e:1f:87:7c:95:40:67:98:
         46:15:1d:ef:b2:20:95:67:25:fa:a8:44:5d:8b:a5:5b:5e:0c:
         73:52:d2:ed:97:51:0e:a3:ce:54:60:f7:bd:45:e3:9a:b9:85:
         e6:9b:d2:02:0e:b4:e0:f8:8b:98:cc:3c:dd:7c:fb:71:8b:33:
         4c:60:20:6a:5a:30:83:27:3e:30:3c:5c:a6:fb:f7:ee:af:d2:
         b4:d9:24:76:b2:e0:ed:84:98:7c:2f:3a:6c:ef:39:f3:07:c0:
         67:92:a1:f5:15:a3:bd:2d:13:78:e5:94:94:3a:30:47:f8:74:
         1e:0b:f7:99:a4:74:9d:a3:8f:1c:70:8b:54:2f:13:fa:b4:87:
         21:25:f4:a9:9b:35:65:42:b0:9a:b0:c3:24:6b:c6:7a:6f:42:
         ca:59:29:2a:e9:a2:8d:d6:5a:64:c1:4a:9c:9c:9c:00:43:75:
         08:d3:68:b1:bc:7a:b1:b3:c3:41:a4:fe:7f:94:85:84:62:72:
         d9:61:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----