Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer
File:                     C99F440A77FA805AD87B90E49EB02EDB6ADA0197.cer (raw, json)
Hash identifier:          Ln7ssTbLjWufqNLjikZbcYlDAEC9OtCc4m/TBsGbMnA=
Subject key identifier:   C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C3EB6151AF77CA85C8C68E9E02DF41370BCBF92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 20:28:30 +0000
Certificate not after:    Wed 31 Jul 2024 20:33:30 +0000
Subordinate resources:    AS: 265986
                          IP: 181.191.32.0/22
                          IP: 2804:40dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3e:b6:15:1a:f7:7c:a8:5c:8c:68:e9:e0:2d:f4:13:70:bc:bf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 20:28:30 2023 GMT
            Not After : Jul 31 20:33:30 2024 GMT
        Subject: CN=C99F440A77FA805AD87B90E49EB02EDB6ADA0197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:49:75:e0:6f:a2:dd:ec:53:01:03:f6:16:
                    73:ce:ae:c1:09:72:dd:5c:a5:bf:75:b4:5c:80:a3:
                    52:64:b7:44:79:52:e5:49:f9:2b:3a:ef:91:53:ff:
                    da:c2:56:92:dc:a6:88:4e:fa:25:bd:c0:82:50:f8:
                    a7:78:ac:6d:83:19:92:d7:d9:99:dc:7e:a7:f8:9d:
                    c5:fc:dd:a7:9d:22:59:9c:f3:5b:8e:28:aa:6a:03:
                    52:02:e0:43:0f:6b:fa:7e:2c:74:ad:56:fa:54:1f:
                    b5:4d:97:29:81:1f:8f:b5:05:e1:7d:36:ac:1a:5b:
                    fb:74:bc:6f:32:ef:2c:5a:3c:3a:6b:f2:31:4b:28:
                    ca:48:46:a3:7e:7f:ee:e8:aa:43:8d:19:98:87:7f:
                    37:5f:ce:6d:3a:5d:64:32:33:33:d5:76:98:65:5d:
                    22:62:64:9b:4c:2a:1d:ec:be:77:26:de:ec:f3:d2:
                    f3:ae:f2:67:2f:52:d7:9e:a4:f7:0f:3d:79:35:a9:
                    7b:92:1a:55:04:c3:26:7c:6c:88:b3:c6:13:8d:07:
                    23:a3:94:0f:2a:6b:eb:77:85:39:f9:28:a8:15:51:
                    f8:90:e7:06:24:87:68:aa:fd:ff:2b:ff:59:59:5e:
                    b3:fe:84:14:9a:95:9a:21:b0:34:da:b2:8b:0e:57:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:9F:44:0A:77:FA:80:5A:D8:7B:90:E4:9E:B0:2E:DB:6A:DA:01:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/C99F440A77FA805AD87B90E49EB02EDB6ADA0197.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.32.0/22
                IPv6:
                  2804:40dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265986

    Signature Algorithm: sha256WithRSAEncryption
         00:95:b2:95:2a:42:da:1e:e4:6b:1b:5d:42:0c:ff:db:ff:cc:
         8f:b6:2b:44:01:d7:09:7b:21:ce:b5:8b:10:85:7e:b1:6d:ed:
         d9:52:f2:f9:97:1d:0c:04:54:23:2f:57:e2:d1:bf:d4:8e:ea:
         89:d3:48:8b:78:f8:4e:47:f2:be:d8:79:07:df:eb:71:16:86:
         55:dc:2d:c1:90:bf:ad:ff:1f:fc:f2:ba:02:ac:58:59:87:42:
         be:0f:f1:e3:ac:81:65:bc:8f:f1:09:04:06:1f:b3:64:76:3f:
         aa:2b:89:54:00:8f:32:50:9d:ef:60:21:c3:02:67:5a:48:f3:
         3d:ee:82:93:47:cf:e6:08:d9:64:66:2b:8a:ad:6f:33:56:44:
         07:26:b9:a6:07:d1:3d:24:81:1f:fa:29:b3:99:e5:d9:c8:3c:
         a6:8e:5c:f0:1a:e0:f1:28:86:9e:de:5b:f2:f0:40:40:34:9b:
         e1:30:b6:f6:13:04:9d:f9:99:d1:f9:b6:e3:53:01:dc:57:7a:
         1b:6f:28:5d:1b:33:ca:87:42:fa:a5:01:b7:48:b8:37:bb:a5:
         41:bd:c4:fd:c9:71:b7:2e:f8:e4:c5:10:e7:32:4d:43:0b:d7:
         cc:4e:b2:c8:5a:09:a7:a5:71:7f:2e:4d:eb:43:a6:34:68:73:
         d0:8a:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----