Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer
File:                     C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.cer (raw, json)
Hash identifier:          zxoxlc3ABv1z7Xq2E1NF0VYoEnMpdHBFp2qcwnocRoA=
Subject key identifier:   C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C07651F6E4F0CA16584308A561928CFBC0C4DC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 03:38:32 +0000
Certificate not after:    Thu 20 Feb 2025 03:43:32 +0000
Subordinate resources:    AS: 263620
                          IP: 177.155.232.0/21
                          IP: 2804:1024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:07:65:1f:6e:4f:0c:a1:65:84:30:8a:56:19:28:cf:bc:0c:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 03:38:32 2024 GMT
            Not After : Feb 20 03:43:32 2025 GMT
        Subject: CN=C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:30:30:d4:73:0b:c6:d0:d5:32:0d:54:cf:
                    9a:b1:04:33:3b:61:5a:23:ca:7c:7b:ad:18:32:2d:
                    5b:d3:3b:b8:44:21:50:5d:23:ab:73:cc:af:66:80:
                    27:2c:5f:06:3e:31:e0:9a:fa:37:dd:57:ac:09:24:
                    18:eb:11:04:c9:6d:0c:f8:9f:d9:3e:9d:da:fe:53:
                    a1:40:d4:e9:a8:61:95:db:10:92:c5:64:c9:30:42:
                    ea:eb:62:58:76:65:bd:9d:f3:4e:92:75:62:1e:1d:
                    b2:a3:8a:ba:92:84:df:5e:5d:88:60:cd:5f:33:ee:
                    60:9f:23:50:76:84:dd:7c:7b:07:4e:c1:1d:8b:4d:
                    74:be:5f:ac:f3:d6:bf:3e:f8:34:22:e5:ca:8c:a3:
                    99:68:16:74:0f:ea:95:fa:a3:fb:df:68:e8:b2:04:
                    78:21:64:fa:fd:d6:14:43:30:32:84:b8:31:fb:7f:
                    86:e2:88:7b:69:f7:35:6a:f4:d3:70:8e:17:47:8a:
                    2d:5e:5d:e8:5d:76:6e:41:07:2c:41:b5:63:d7:f2:
                    5a:88:4c:b2:1f:30:bc:25:b9:14:73:88:64:0d:06:
                    09:b6:c6:3f:d7:7b:f6:38:07:f0:60:14:43:22:49:
                    33:05:72:34:5d:63:8f:24:33:e7:c6:82:41:71:fd:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:92:8A:F4:0E:C3:F3:01:AB:FA:6B:43:CC:A8:45:42:B1:BD:22:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/0/C9928AF40EC3F301ABFA6B43CCA84542B1BD22C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.232.0/21
                IPv6:
                  2804:1024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263620

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:23:f8:78:6f:43:b1:8f:d0:18:cc:f7:91:34:e9:1d:af:
         85:37:bc:f9:63:d8:2a:31:9b:ea:10:54:e0:d2:1e:b2:f8:13:
         9a:47:07:08:91:2f:06:83:26:b5:b6:2f:4d:84:e4:99:db:5f:
         b0:a4:b0:92:94:8d:59:68:79:f3:c6:75:d3:0e:03:39:7f:a5:
         39:85:08:09:a6:cb:7a:a0:fe:f8:39:62:10:c6:e7:07:08:c2:
         c1:2c:ab:be:eb:ac:24:9a:85:c5:e9:a4:b5:54:03:c1:d7:c5:
         8a:f6:f7:18:5e:65:d6:1f:fa:c8:73:cd:60:39:23:da:c8:87:
         0d:c1:02:90:46:dc:27:e6:a7:87:c0:c4:6e:ca:70:35:97:cc:
         d6:70:43:ed:f0:9f:55:48:16:df:d1:3f:b8:49:36:74:c4:75:
         a6:f6:2e:c5:8b:7c:05:74:15:f7:16:4d:0e:22:96:e1:e2:50:
         ea:eb:36:da:10:9a:37:83:ee:51:f8:dd:87:35:aa:1a:5d:9b:
         1c:97:58:84:a8:9a:a6:b2:33:25:c3:18:a6:7b:86:c4:05:29:
         55:9f:e1:32:fe:29:55:45:ba:fb:d6:73:2f:eb:22:0a:b7:f6:
         05:d7:8e:fb:1f:21:0d:2a:d8:9b:70:70:3b:a6:75:aa:f8:83:
         12:84:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----