Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC19F102714C8236D0C081FAED80472B833EC540.cer
File:                     CC19F102714C8236D0C081FAED80472B833EC540.cer (raw, json)
Hash identifier:          ZN7GBDKeN+eoREStc+wwHdIn3t4Pm5nFm7ZQiETZ5YU=
Subject key identifier:   CC:19:F1:02:71:4C:82:36:D0:C0:81:FA:ED:80:47:2B:83:3E:C5:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F20BDDB6D819EFD56B16C7B819C69CDDA2D3497
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/CC19F102714C8236D0C081FAED80472B833EC540.mft
caRepository:             rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 20:11:35 +0000
Certificate not after:    Wed 23 Oct 2024 20:16:35 +0000
Subordinate resources:    AS: 262567
                          IP: 177.73.96.0/21
                          IP: 2804:45e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:20:bd:db:6d:81:9e:fd:56:b1:6c:7b:81:9c:69:cd:da:2d:34:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 20:11:35 2023 GMT
            Not After : Oct 23 20:16:35 2024 GMT
        Subject: CN=CC19F102714C8236D0C081FAED80472B833EC540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:7a:f0:db:82:c1:91:b1:13:9b:98:a0:16:
                    2e:bd:14:e4:bf:b8:83:5e:f1:4d:2a:bc:8f:50:9b:
                    6e:0d:02:53:b1:d0:ac:2b:33:55:6e:20:26:0d:80:
                    1f:9b:77:26:a7:3a:a4:1d:67:55:0e:22:d1:37:84:
                    18:9b:be:e3:05:37:5f:e7:df:75:a4:7e:b0:39:a0:
                    81:e5:21:3e:6c:fc:aa:60:3a:0c:1a:ab:a8:0d:19:
                    e6:d8:52:f5:57:b1:2b:a1:70:1e:02:e3:a4:73:70:
                    fe:15:4f:d6:8e:82:e7:b8:51:85:75:3e:ef:91:7e:
                    39:25:da:a3:c2:69:82:9a:b3:eb:42:ee:35:f8:10:
                    8a:75:d0:c9:59:13:a6:0e:17:ed:6e:dd:79:70:40:
                    6a:b9:2f:cf:44:6a:dd:56:50:b4:f3:a7:19:ef:37:
                    ad:f7:5a:97:3a:30:5c:15:f5:8d:0b:93:cb:6f:ec:
                    9f:7d:79:fc:87:f4:c2:c6:ff:3e:b9:8b:0a:d0:12:
                    8e:62:88:5b:9e:9b:2e:ac:4c:4b:7c:d2:e3:d6:89:
                    68:36:50:c1:b4:de:2e:ab:4e:86:0f:07:c4:29:ae:
                    ce:30:56:27:65:c2:72:05:91:23:ab:66:6e:62:0d:
                    86:48:05:1e:d5:5e:a8:45:19:be:77:88:81:a6:37:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:19:F1:02:71:4C:82:36:D0:C0:81:FA:ED:80:47:2B:83:3E:C5:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/An6jZxdmRkZFkT6ke6gfu58UgAXBE4bg6UVJJ2hC8dx4/0/CC19F102714C8236D0C081FAED80472B833EC540.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.96.0/21
                IPv6:
                  2804:45e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262567

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:85:6f:7e:6a:55:79:2d:51:1b:d2:20:e9:3b:6b:b6:ef:
         df:d2:00:32:cd:ba:71:d1:7c:b6:52:46:ff:51:42:9d:65:a3:
         21:f8:d1:64:21:dc:05:79:64:0b:f4:d2:4c:00:74:ab:63:42:
         fa:14:b4:2e:2f:1d:bd:e3:44:b9:7a:71:b7:15:fd:f3:da:34:
         57:2f:a0:a6:12:ba:e5:e7:7c:eb:ec:16:b3:9c:48:67:69:20:
         56:ed:a0:de:14:9f:61:fb:cc:d1:48:d3:28:f5:9c:57:f8:de:
         31:7d:49:18:ee:4c:39:cf:d1:11:4e:b1:9d:1b:ca:7c:b4:ae:
         49:39:10:7e:a7:3a:18:dc:24:83:85:b7:65:49:29:20:75:16:
         44:63:df:9d:11:8f:ad:90:2a:eb:d2:aa:58:48:0f:bb:41:ae:
         e7:9b:64:f7:4e:21:db:21:c9:fb:10:3d:e1:60:cf:3d:ca:52:
         a4:34:9f:4d:d6:f6:f7:20:ca:6d:91:ab:83:98:2e:25:c5:24:
         93:d0:71:d0:be:12:88:e6:6e:1a:45:61:1a:a8:b9:75:17:bc:
         f1:2d:15:50:fa:61:c0:84:df:2b:17:93:17:b0:a3:1f:57:88:
         4d:77:3e:af:4b:59:2b:9e:b7:8b:16:14:32:30:9e:e7:13:cc:
         d6:8f:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----