Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer
File:                     C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer (raw, json)
Hash identifier:          0xw8gok6TDZNGkWLapDn/1B9dM7qCHy+lML5h1USJO0=
Subject key identifier:   C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B8711F2580850ADF22811576065A7151B0B8C4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 16:52:54 +0000
Certificate not after:    Fri 08 Nov 2024 16:57:54 +0000
Subordinate resources:    AS: 264344
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:11:f2:58:08:50:ad:f2:28:11:57:60:65:a7:15:1b:0b:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 16:52:54 2023 GMT
            Not After : Nov  8 16:57:54 2024 GMT
        Subject: CN=C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:cd:08:53:1c:93:16:b6:0b:75:e9:1d:97:
                    e4:29:86:cf:4f:8c:80:b3:45:6e:b9:f0:fa:16:eb:
                    dd:28:9d:77:fc:e8:d5:2d:68:aa:f2:81:43:e0:f3:
                    8a:1d:df:e0:6c:3b:6f:02:55:45:a3:4a:1a:37:0a:
                    7f:72:9b:82:78:0f:f6:bb:eb:bd:fc:70:e2:83:8c:
                    6f:d1:0d:2f:0d:cc:95:a3:69:09:e5:3c:94:ec:90:
                    ef:d4:33:9e:be:d2:7b:d7:a9:ca:64:ac:97:86:fd:
                    93:e5:08:9c:df:66:7e:00:2e:d8:b7:22:83:a0:86:
                    15:06:8e:1a:b1:f3:3a:12:82:3c:ea:00:fc:b1:ee:
                    65:72:f4:8a:5c:19:94:b2:11:71:7a:c7:5d:b6:70:
                    22:a3:ab:fb:aa:18:f2:4e:5a:4c:13:0c:3b:11:23:
                    60:6b:01:28:90:4f:9c:b1:3e:62:a2:93:0c:62:ec:
                    5b:d0:85:4b:53:10:e0:24:a6:96:30:aa:7c:77:49:
                    89:1b:06:91:38:a1:45:11:80:39:ba:1e:a8:f0:74:
                    3e:bb:8d:09:08:a6:c8:99:1b:b9:d6:f7:57:f9:43:
                    fe:b9:bd:bb:9a:b0:2b:6f:8c:72:57:29:ef:32:e4:
                    6c:b1:fc:06:9a:16:9d:a3:26:3c:a6:99:dc:a3:b3:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:5e:c8:e7:13:c7:fc:95:07:64:58:96:ed:05:b2:35:08:
         85:57:8b:a1:80:51:1c:dd:d8:6d:be:b6:7c:7f:3c:ea:42:a0:
         ad:e3:e0:8c:01:a3:7b:c9:a4:37:89:af:65:16:93:dc:b9:99:
         b9:51:be:23:f2:d2:05:4a:26:1d:79:b8:e3:2b:e6:d5:f2:53:
         eb:f9:1c:5c:55:c3:61:ea:ae:71:1a:37:49:7c:94:39:04:ac:
         1a:03:29:3a:c3:6b:9a:55:6a:8b:98:eb:6e:40:3d:33:5b:9d:
         65:8c:d8:db:2c:cd:02:4b:16:4c:c5:38:31:08:55:29:e8:a6:
         54:d8:a9:94:82:21:75:41:5b:90:cc:62:b5:ee:46:14:d0:65:
         b4:f6:57:67:03:4a:ef:e3:b9:f2:94:9f:01:dd:f1:7b:f5:74:
         4f:8d:14:d3:9d:b6:0a:30:a2:f6:e4:a8:aa:ed:e1:1d:24:23:
         6f:44:f6:d9:1e:de:81:fe:6d:47:8a:e8:e0:26:76:46:d5:8f:
         8f:06:f8:04:f9:2a:44:9e:87:6b:16:57:a5:65:bd:49:55:10:
         bc:65:4c:b6:c0:d1:42:06:08:f8:13:ae:99:90:09:e0:be:c2:
         37:af:7d:19:81:bd:29:71:fa:9a:2f:a5:db:50:d0:88:6f:ec:
         29:a6:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----