Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer
File:                     CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.cer (raw, json)
Hash identifier:          WQAwSfhLFwTbLaSdTjn1TXoi1+nShDzfuZ/3WJzr/vs=
Subject key identifier:   CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45921DE6100063AEAEC0F6ADB61EA4D890FFCD71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 10:40:20 +0000
Certificate not after:    Thu 04 Jul 2024 10:45:20 +0000
Subordinate resources:    AS: 264336
                          IP: 138.122.124.0/22
                          IP: 2804:2644::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:92:1d:e6:10:00:63:ae:ae:c0:f6:ad:b6:1e:a4:d8:90:ff:cd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 10:40:20 2023 GMT
            Not After : Jul  4 10:45:20 2024 GMT
        Subject: CN=CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:96:3b:62:3c:80:b0:fd:6d:a0:e4:3d:a9:f6:
                    d0:82:44:dd:05:21:fd:cc:e9:8f:4d:45:ac:f5:cf:
                    f5:e6:1a:fb:55:5f:41:2d:0f:79:72:0b:77:96:98:
                    f5:6c:a1:31:d2:4a:e8:60:b0:4f:0d:26:ca:e9:55:
                    73:46:92:d8:68:34:6f:77:ea:fb:6a:d9:c5:fe:f3:
                    a7:46:07:6e:1c:ae:fb:d6:d6:25:e5:a9:aa:2f:4c:
                    47:29:1c:cc:59:e2:57:8f:96:d4:6b:c8:26:d6:05:
                    f3:d3:92:9a:29:ab:8c:66:95:52:d8:de:f8:13:f0:
                    74:0e:fc:e8:ec:32:70:4e:43:f7:26:1d:48:23:6b:
                    66:19:9e:62:5a:f6:c8:0f:78:8f:b5:5f:80:37:ef:
                    5c:1d:e3:2b:a7:70:a1:8d:fa:f5:91:6a:4d:62:9e:
                    44:22:64:bd:04:98:50:10:d9:da:c4:d5:0f:c1:db:
                    38:68:2c:74:81:7c:fe:b6:aa:44:20:6d:25:e0:dc:
                    18:4f:3c:54:57:d7:bd:44:7f:2b:8e:31:ee:79:9e:
                    23:88:b0:97:5a:d0:24:50:3d:d2:d2:6a:cc:cc:76:
                    3b:8f:f5:23:2b:49:91:37:67:62:5d:8c:a0:f7:6f:
                    4c:b0:56:80:d9:f8:17:6d:c5:7f:56:eb:29:a4:f0:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:5A:C0:6C:8F:C3:50:ED:70:1A:22:DE:52:B4:D5:9A:57:B6:A2:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GJ8tJLeRc5b6UG1gqm8b3YprPp61Fo9WKEHMXzSRcGjw/0/CC5AC06C8FC350ED701A22DE52B4D59A57B6A2BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.124.0/22
                IPv6:
                  2804:2644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264336

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:d7:c0:ac:58:a6:70:c7:66:63:83:d4:15:5a:26:73:da:
         a4:5a:26:14:c7:cd:9e:d1:af:fd:43:de:3a:76:e4:82:0a:6a:
         3e:83:21:6a:8a:0a:1a:1c:81:2a:17:13:3b:b8:75:9c:1f:dc:
         30:31:03:74:51:09:c1:b1:aa:db:58:48:a8:23:42:5e:8a:e6:
         ee:64:25:22:73:b0:74:e2:bd:9e:35:3e:5d:05:d0:f1:22:33:
         60:ad:13:e7:52:08:3d:59:c5:1c:b0:b1:a8:d9:8e:2b:49:02:
         db:eb:1f:7f:7d:fb:12:fd:56:89:df:2c:27:4d:23:95:3f:1a:
         f4:00:d9:12:d4:10:39:2c:21:d3:27:ad:9a:03:97:ca:07:19:
         97:ae:30:02:68:28:1e:13:10:bb:27:23:25:36:0c:60:80:90:
         de:fe:75:51:4e:ee:3b:dd:55:aa:86:9c:f2:d9:9e:b9:78:68:
         24:9c:ab:4d:99:28:02:81:ca:4d:64:3a:ea:3b:83:03:d7:64:
         15:3d:a7:66:dd:2b:8f:d4:7b:bc:25:db:ad:2e:5d:1f:4b:e8:
         f0:3f:6e:3d:25:49:dd:d4:79:ba:4d:25:31:91:21:b4:21:8a:
         ad:03:7b:6e:76:f2:82:91:a6:26:ff:e1:50:c7:20:51:f9:6e:
         a8:d0:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----