Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CCB097ACA8EE51D21DFBE397BEF1D78345EF82D9.cer
File:                     CCB097ACA8EE51D21DFBE397BEF1D78345EF82D9.cer (raw, json)
Hash identifier:          bs7fHV0ECtQ2HicSbnM77tuEzaGfj7qVdDiQOUgfijc=
Subject key identifier:   CC:B0:97:AC:A8:EE:51:D2:1D:FB:E3:97:BE:F1:D7:83:45:EF:82:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D819E14D7A2B4339DC95D4EEA8B97CB210BEA54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/CCB097ACA8EE51D21DFBE397BEF1D78345EF82D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 18:01:33 +0000
Certificate not after:    Tue 10 Dec 2024 18:06:33 +0000
Subordinate resources:    AS: 266000
                          IP: 181.191.40.0/22
                          IP: 2804:410c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:9e:14:d7:a2:b4:33:9d:c9:5d:4e:ea:8b:97:cb:21:0b:ea:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 18:01:33 2023 GMT
            Not After : Dec 10 18:06:33 2024 GMT
        Subject: CN=CCB097ACA8EE51D21DFBE397BEF1D78345EF82D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:11:bb:56:24:b1:23:92:62:a0:75:19:bd:
                    04:8c:ba:1d:e6:0a:ef:44:23:11:d1:38:79:8a:52:
                    6e:af:1a:20:74:32:75:8f:95:27:00:58:1b:88:6e:
                    18:bc:b5:3c:24:9a:3d:87:dc:e8:90:b2:ab:81:66:
                    e6:0a:b5:1e:44:26:51:b6:af:cc:e1:94:0b:5f:c6:
                    09:2e:81:f3:2a:4d:af:fb:72:f5:c9:09:e7:23:70:
                    ab:0c:58:7d:0b:d9:54:37:35:ed:02:bf:1b:85:27:
                    a6:3d:fb:5e:10:fc:82:29:f2:16:b4:a9:f0:b9:87:
                    21:f5:60:01:8f:8d:f4:13:cc:f6:07:bc:02:66:92:
                    ab:5d:bd:a8:be:45:d4:44:6b:8c:82:e2:ac:da:ff:
                    b6:50:42:2e:86:93:47:94:7f:8b:c4:a8:d2:e0:5c:
                    83:8c:b1:db:db:29:3e:2d:a5:b8:6b:d4:0e:4a:9a:
                    5c:95:b7:9a:a5:da:39:63:09:4a:8e:81:c9:d9:2f:
                    33:b3:17:f5:8f:43:bb:2b:65:0e:38:51:e9:bf:18:
                    41:4b:4c:3b:65:68:14:af:8c:fd:3b:d0:a1:f9:82:
                    88:42:f8:4f:57:a0:ce:f3:9c:c2:c2:16:02:f0:56:
                    8a:31:36:5d:26:ee:dc:5c:e2:55:fd:c3:9f:0f:3d:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:B0:97:AC:A8:EE:51:D2:1D:FB:E3:97:BE:F1:D7:83:45:EF:82:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/CCB097ACA8EE51D21DFBE397BEF1D78345EF82D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.40.0/22
                IPv6:
                  2804:410c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266000

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:5f:24:a2:08:ad:36:23:da:13:63:8d:f1:25:90:07:b8:
         3a:d9:24:a8:f1:b3:54:68:e1:18:a8:44:ed:97:d1:c2:6e:ae:
         80:a6:aa:ef:62:43:05:50:5c:56:6f:cd:7d:2a:02:2a:6f:02:
         78:25:2b:2d:c5:58:35:8a:2c:df:0a:8b:04:05:ee:01:8b:72:
         56:3d:b6:51:f7:f4:b1:3b:33:09:c3:7a:9a:99:07:36:0a:19:
         20:29:91:24:d6:bb:db:8b:e8:51:cb:8d:e4:b2:20:a7:f2:a7:
         40:61:98:d4:3a:8b:73:cf:1b:0c:28:23:3f:a1:82:e8:db:a5:
         86:22:cc:d3:01:47:7d:72:cd:a2:1e:b6:e0:cf:d9:23:c7:c7:
         69:9d:09:73:e7:1e:e4:68:d5:6c:8a:26:76:ca:4f:ba:47:94:
         9f:a3:4c:12:86:de:b7:cd:ed:20:e7:e0:ce:0e:e1:a1:2b:c5:
         ac:2c:bd:aa:8a:47:12:4d:e1:02:dc:a4:cf:08:2d:82:47:5a:
         81:45:7d:db:eb:32:db:6d:16:d0:f5:06:cc:2e:4f:60:2a:66:
         f0:b1:0a:b1:c0:28:7c:b3:d0:f4:d2:c3:7b:17:25:db:b7:c2:
         3f:c0:d1:61:c2:77:ee:ec:e1:d0:a2:43:0e:6b:4d:aa:72:eb:
         4d:57:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----