Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CCCF19D029F1001E6B8B11784AAC8996CBA7246E.cer
File:                     CCCF19D029F1001E6B8B11784AAC8996CBA7246E.cer (raw, json)
Hash identifier:          JkwYuFk8SmRS2QX1O/Jv1eYmApHdavF7hftDuO2FwQ8=
Subject key identifier:   CC:CF:19:D0:29:F1:00:1E:6B:8B:11:78:4A:AC:89:96:CB:A7:24:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29ECE8B2BB569FC8066DBEE5716DB855D604C42C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/CCCF19D029F1001E6B8B11784AAC8996CBA7246E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 18:30:01 +0000
Certificate not after:    Mon 16 Dec 2024 18:35:01 +0000
Subordinate resources:    AS: 265118
                          IP: 143.208.184.0/22
                          IP: 2804:2ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:e8:b2:bb:56:9f:c8:06:6d:be:e5:71:6d:b8:55:d6:04:c4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 18:30:01 2023 GMT
            Not After : Dec 16 18:35:01 2024 GMT
        Subject: CN=CCCF19D029F1001E6B8B11784AAC8996CBA7246E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:09:bb:9e:bd:75:12:1b:f4:be:32:16:a0:
                    40:b1:61:28:2d:99:f3:09:ae:1b:8b:d2:61:b9:c8:
                    0e:0e:e8:1d:f4:2a:f7:56:0d:9a:38:e5:af:52:7d:
                    a1:22:5e:1f:50:8f:3a:76:3b:90:50:d0:61:e9:a7:
                    1d:eb:9c:01:44:99:e0:42:65:54:82:c4:f4:99:d1:
                    96:20:41:88:ef:9d:63:0d:87:37:e0:d7:39:76:fe:
                    ea:bc:11:7e:0b:4d:9a:12:e5:3d:c2:2d:84:c8:3f:
                    ec:c5:dc:f2:c6:c0:80:94:c7:b2:8d:b9:31:27:4e:
                    70:f7:99:0b:3d:b6:b4:36:ad:49:d0:8c:09:0b:6f:
                    0a:e5:7e:c3:49:83:8e:cf:bb:35:dd:e8:06:98:15:
                    fb:27:59:77:87:76:f4:df:e4:16:1e:c3:9c:6f:ee:
                    eb:32:34:d7:bd:69:cc:74:33:ce:d8:ef:bb:ac:80:
                    de:b0:da:20:9b:5c:73:d7:95:db:d2:e0:47:5d:41:
                    88:d0:58:26:55:6d:4c:ef:28:4c:bd:8f:0c:6d:7a:
                    7a:fe:dd:7f:c1:7e:eb:19:6f:6e:fa:11:2b:98:b0:
                    6c:62:ad:41:59:36:66:93:93:cf:6d:87:17:cd:aa:
                    7d:72:2f:41:64:43:39:ca:11:ff:96:4f:fe:9d:70:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:CF:19:D0:29:F1:00:1E:6B:8B:11:78:4A:AC:89:96:CB:A7:24:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/CCCF19D029F1001E6B8B11784AAC8996CBA7246E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.184.0/22
                IPv6:
                  2804:2ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265118

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:4e:09:5f:26:b1:32:0a:df:50:2f:68:25:f4:34:73:8b:
         03:dc:db:75:6b:09:23:92:27:5d:af:bb:2e:32:ee:cb:6b:db:
         25:a4:d8:ef:e7:e3:18:f9:b5:06:8a:6c:b8:4c:b2:34:b7:e7:
         65:22:e4:33:24:46:39:82:cd:95:c0:e4:96:1d:c9:54:79:4d:
         08:07:2d:f5:00:8d:3f:70:dd:ff:7f:a8:02:42:be:af:c5:b3:
         e3:7c:53:7d:3f:88:31:50:59:d9:38:43:01:22:85:fa:7f:69:
         48:59:7f:d2:69:a0:af:b7:b0:6a:f1:e1:87:99:9f:3e:7e:64:
         2d:69:19:8a:a9:c1:b1:28:dd:b2:ca:2b:e6:25:a4:be:1b:c3:
         32:f1:34:dd:6d:78:2d:9b:c3:dd:c0:ff:da:22:ea:3f:60:4b:
         e1:93:1a:0f:4f:6a:a3:91:cf:32:b3:b7:7c:92:53:4e:ce:a9:
         79:35:f3:37:9c:47:86:af:3c:dc:24:f2:97:f8:7b:fb:a9:0b:
         07:83:60:3a:84:5b:27:fd:fd:b9:f8:51:7f:01:75:1d:cd:9a:
         21:3d:0b:d3:14:3c:3d:f8:cf:33:ba:a8:ec:12:12:f5:a4:c7:
         2c:2e:8d:d1:3a:06:c3:d4:2a:a5:b4:1a:79:fb:f0:b2:e3:b0:
         46:0b:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----