Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9C364BB1BFDE5A83355A804F6070A286EA6849A.cer
File:                     C9C364BB1BFDE5A83355A804F6070A286EA6849A.cer (raw, json)
Hash identifier:          vt9qS597MbjZANHFE7zBErvPZsVJX7WrJw8rLL+TX9I=
Subject key identifier:   C9:C3:64:BB:1B:FD:E5:A8:33:55:A8:04:F6:07:0A:28:6E:A6:84:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73ECF8ECA3A4913DF13937E63879AAB037A47DAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/C9C364BB1BFDE5A83355A804F6070A286EA6849A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Aug 2022 19:09:54 +0000
Certificate not after:    Mon 07 Aug 2023 19:14:54 +0000
Subordinate resources:    AS: 266226
                          IP: 216.98.216.0/22
                          IP: 2804:3ca4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ec:f8:ec:a3:a4:91:3d:f1:39:37:e6:38:79:aa:b0:37:a4:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 19:09:54 2022 GMT
            Not After : Aug  7 19:14:54 2023 GMT
        Subject: CN=C9C364BB1BFDE5A83355A804F6070A286EA6849A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:42:b6:31:46:eb:15:4f:df:7b:ac:4e:79:
                    67:37:56:72:c9:02:ec:f7:e6:37:a7:47:6c:19:45:
                    d0:3c:ba:2c:b1:c7:34:e2:d1:20:c2:9e:f5:44:fb:
                    45:94:ea:eb:16:bf:ec:e0:29:c2:b5:84:2e:20:3c:
                    8d:32:a7:e7:ad:c5:23:24:da:b3:b8:73:0e:1a:46:
                    f7:c5:c2:38:44:e8:1e:5f:ff:33:8a:db:b7:a5:9c:
                    6b:8e:80:55:a1:2b:6c:9f:c9:c2:10:6d:31:06:d2:
                    29:c8:46:cf:a3:da:8f:df:6b:fb:9b:47:e4:9f:9b:
                    3f:85:4c:9b:ec:dc:9b:aa:17:20:8d:3f:51:64:64:
                    30:e5:34:04:92:5d:fa:53:ec:6d:ba:c6:e3:c8:2e:
                    dd:ee:a9:bd:40:7a:24:bb:a7:b3:6d:6a:4e:6f:8c:
                    18:52:80:2f:33:13:7a:06:ef:be:2e:bf:d2:b9:80:
                    a0:38:28:c8:12:21:7f:ec:79:3d:f7:dc:b9:9a:4b:
                    59:76:39:16:a7:b3:cf:e2:c2:56:1b:cf:e3:b1:ca:
                    18:2a:0f:4f:ce:07:9b:80:60:3e:da:9c:22:cf:55:
                    66:39:8b:5b:a4:62:e3:62:ce:83:c9:3c:45:19:21:
                    a6:70:9a:e7:e2:78:7a:7c:f1:5e:cd:c6:d3:d1:61:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:C3:64:BB:1B:FD:E5:A8:33:55:A8:04:F6:07:0A:28:6E:A6:84:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/0/C9C364BB1BFDE5A83355A804F6070A286EA6849A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22
                IPv6:
                  2804:3ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266226

    Signature Algorithm: sha256WithRSAEncryption
         64:73:dc:66:fd:5e:0d:79:e6:6d:76:91:cf:43:e8:fe:b3:f6:
         5a:c1:48:61:39:f5:31:f4:96:d8:71:71:47:26:4d:05:46:85:
         42:34:45:f6:3d:b1:ea:6e:7d:5b:f4:1c:36:cd:f6:e6:34:0a:
         cb:2e:5b:ff:86:c5:37:9d:6c:31:fe:66:78:f7:4d:e5:fc:93:
         01:6a:79:84:57:95:51:d6:c1:df:03:a0:50:8b:96:79:72:13:
         84:24:10:1a:bf:ea:08:9b:e3:c3:af:db:27:c6:0e:51:d9:ed:
         43:4f:ae:f2:be:a8:a4:7f:e3:96:94:06:5b:20:36:37:9b:e1:
         08:27:32:21:1d:60:99:fc:78:17:f1:38:8d:17:b1:44:44:e4:
         bb:df:09:23:9f:72:1f:f8:2e:a0:e1:03:e6:16:40:c4:01:25:
         03:16:3c:6e:0a:d0:05:ff:e3:c0:16:6f:65:c9:f9:0c:03:a0:
         cb:0d:81:07:c4:95:75:64:e5:79:49:5d:1a:8b:d5:07:9a:13:
         75:4b:34:25:0d:be:fb:1a:ab:57:76:82:b5:3a:87:fd:6c:2d:
         0d:79:60:79:2e:9f:9e:1d:fa:ed:12:04:47:98:2a:b7:5a:47:
         5a:0a:02:25:c1:31:fa:7c:16:ed:9f:df:61:62:83:98:e2:db:
         91:a6:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----