Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C9C7036178B718210B92F136408EFD6CD2942D3F.cer
File:                     C9C7036178B718210B92F136408EFD6CD2942D3F.cer (raw, json)
Hash identifier:          7cEDTAMstaP8oDDCokIpWrNqROVGfuR0B3hm4/8H9uE=
Subject key identifier:   C9:C7:03:61:78:B7:18:21:0B:92:F1:36:40:8E:FD:6C:D2:94:2D:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AC0DCF8F745E279FED9E613E1B5FC69664F5252
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/C9C7036178B718210B92F136408EFD6CD2942D3F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 15:05:09 +0000
Certificate not after:    Mon 16 Dec 2024 15:10:09 +0000
Subordinate resources:    AS: 272191
                          IP: 2804:8354::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c0:dc:f8:f7:45:e2:79:fe:d9:e6:13:e1:b5:fc:69:66:4f:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 15:05:09 2023 GMT
            Not After : Dec 16 15:10:09 2024 GMT
        Subject: CN=C9C7036178B718210B92F136408EFD6CD2942D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:da:5d:5e:b0:09:79:38:57:4c:e7:7f:bd:
                    83:d2:63:d6:78:76:78:7b:54:73:6f:e4:77:29:26:
                    04:f1:45:17:b5:b8:37:1a:a3:be:b9:0b:a9:31:1d:
                    2c:2a:e4:e0:ab:df:2e:c1:40:08:c8:0f:2c:6f:65:
                    e4:91:8e:be:7d:40:cc:17:a0:97:a6:b3:8c:4e:bd:
                    e2:1a:c6:83:25:98:b0:81:eb:c7:6b:cd:46:96:6f:
                    74:87:e8:5e:bb:d2:b5:29:2b:bc:d2:10:17:17:da:
                    f3:84:ad:64:30:e8:73:36:3b:d1:ec:9a:1f:7b:5b:
                    72:31:e8:43:a4:d9:1b:3d:98:bc:75:a3:de:ab:a1:
                    c6:66:1c:3c:fe:ad:3b:d7:fa:89:c0:53:eb:3a:2f:
                    a6:e6:09:91:82:2a:8b:c2:30:b7:c0:83:3e:fe:01:
                    b9:92:c4:20:75:69:43:34:0d:7c:2b:2e:41:0d:76:
                    fa:0a:9d:57:0d:6b:42:99:f3:06:a5:0d:7f:42:81:
                    ad:1b:76:5f:10:9b:bc:21:6b:80:89:bc:47:51:66:
                    e0:89:8b:a6:d6:cb:bc:c7:7a:25:38:28:cd:d9:14:
                    13:71:c7:63:a1:85:17:ef:d8:01:0a:c3:d6:88:d1:
                    6e:04:5c:eb:71:a8:c5:f2:dc:44:1c:d0:94:b8:8e:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:C7:03:61:78:B7:18:21:0B:92:F1:36:40:8E:FD:6C:D2:94:2D:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6K5UpRJxKf5phKeQUA41Q7bszYM1HTgmt9ULWaSQXE7/0/C9C7036178B718210B92F136408EFD6CD2942D3F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272191

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:1b:ae:4e:3e:51:26:c4:e5:d2:9a:25:b3:63:0b:56:ee:
         d8:72:c7:c6:7a:60:54:c2:ed:98:78:2f:8c:d4:b9:69:f0:90:
         d0:a9:38:f8:1a:f2:eb:3d:44:e2:65:75:b5:a2:98:f3:23:f2:
         93:b8:6c:32:e0:ab:41:0b:62:28:ec:3c:25:ec:d9:04:54:98:
         82:b8:00:da:3f:9a:f2:86:bc:c7:36:3b:05:ef:b6:b2:9f:c2:
         92:48:c0:0f:8c:66:cf:3d:8c:54:c0:1e:10:9a:00:36:a6:03:
         d9:a4:b2:45:a1:75:96:cd:d2:40:7b:29:38:4e:e5:c2:cc:51:
         7c:21:b1:51:55:9e:91:26:bd:3a:9f:df:b0:f1:94:f5:b2:de:
         cc:4f:e2:25:a7:bc:85:df:19:46:c1:93:72:3f:ee:bd:a8:8f:
         ed:96:75:de:84:b4:45:4c:a9:fc:40:b2:9c:aa:b7:02:b9:7f:
         b1:34:92:23:0e:b0:a8:c6:3f:c1:97:86:ad:81:32:37:4e:23:
         19:d9:ab:73:f7:c7:ef:0f:9e:f5:19:76:49:ad:f2:1a:f3:21:
         95:bd:3c:9f:44:cc:5a:77:ef:64:0a:91:63:4a:3e:0b:76:91:
         63:82:1a:12:df:d4:61:17:a0:36:d9:42:a0:b1:1e:97:11:15:
         7e:be:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----