Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CCF96E400ADC8CB70637260575081932C55B87B2.cer
File:                     CCF96E400ADC8CB70637260575081932C55B87B2.cer (raw, json)
Hash identifier:          zIy7Ru1IAMJD27X5mLXhqmb/xknOPqMXSJYDZ/bj6ww=
Subject key identifier:   CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11C77CEC4379FE9330FB887EE6F76971D5F591D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Apr 2024 20:23:25 +0000
Certificate not after:    Tue 08 Apr 2025 20:28:25 +0000
Subordinate resources:    AS: 264533
                          IP: 132.255.232.0/22
                          IP: 2804:2118::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c7:7c:ec:43:79:fe:93:30:fb:88:7e:e6:f7:69:71:d5:f5:91:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 20:23:25 2024 GMT
            Not After : Apr  8 20:28:25 2025 GMT
        Subject: CN=CCF96E400ADC8CB70637260575081932C55B87B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:0b:e4:3c:45:c8:6e:96:fb:76:b4:d2:b2:
                    7d:3f:e2:ae:dd:90:f0:a8:18:ce:17:7a:fd:72:03:
                    f6:bb:c8:52:38:9c:5d:a9:f5:25:53:12:94:06:4f:
                    dd:df:0e:e2:15:d9:e3:b9:49:ea:92:be:8b:0c:85:
                    f9:d3:66:21:d7:a5:f5:2a:aa:12:92:03:f7:7f:53:
                    8e:f8:bb:1d:13:d8:75:c8:4e:f6:3c:27:6e:06:e3:
                    46:0d:64:62:dd:56:ef:82:1a:55:50:34:22:48:0f:
                    bb:87:0d:9e:b7:e1:25:3c:d3:2e:58:75:34:4b:d9:
                    f3:30:d7:0d:ff:fd:7a:e4:76:d8:5c:84:75:01:06:
                    97:67:99:48:ed:c4:40:bd:6f:2b:07:f0:b2:fe:93:
                    85:50:9b:d5:29:11:25:5a:e5:86:cf:b5:7f:80:f5:
                    b6:2a:00:f2:59:47:b7:0b:88:b2:f8:8b:9c:cb:8c:
                    2c:ac:fe:42:71:c6:95:85:c3:ee:fe:c4:00:8c:60:
                    92:f1:70:60:1d:5d:66:a8:4f:2e:df:90:75:1e:d4:
                    0a:9b:2c:01:76:b4:cf:ab:b9:33:17:ec:2a:77:b2:
                    28:47:b5:04:33:1e:51:21:a4:07:88:07:55:42:34:
                    e2:39:75:d1:77:3d:90:96:1c:af:c1:0b:ff:e9:4f:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:F9:6E:40:0A:DC:8C:B7:06:37:26:05:75:08:19:32:C5:5B:87:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmJHDduXBcFFhvFpH8R68macGTSFZh1c97ndvxpHokGx/1/CCF96E400ADC8CB70637260575081932C55B87B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.232.0/22
                IPv6:
                  2804:2118::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264533

    Signature Algorithm: sha256WithRSAEncryption
         08:52:30:c8:65:b4:b6:65:e6:bc:8a:b0:12:bd:1b:b1:42:98:
         f7:ee:63:ab:52:61:9a:6a:3d:ab:66:04:40:f0:2d:4b:22:2d:
         b9:6b:28:e5:0d:45:b9:b9:33:9c:d9:d1:3c:2d:aa:22:ea:89:
         b7:ad:f5:97:95:b5:dd:4d:55:8f:97:b9:57:80:73:61:75:84:
         d1:cd:7b:fa:b8:83:0f:ed:b9:b1:12:c8:3a:cc:8e:a5:79:9e:
         91:98:85:b1:25:46:09:76:55:9b:23:ab:35:55:fe:5d:c6:ad:
         f1:4d:44:8a:c6:42:7f:5e:fb:d5:81:b6:50:19:4e:03:cb:0c:
         f3:a1:5c:31:46:39:91:5f:c8:52:f4:70:f7:52:45:61:58:19:
         fc:1b:5d:4b:c1:80:87:13:3e:1a:2f:d3:df:82:54:8a:d8:55:
         68:a3:f2:ca:d2:2e:ac:77:13:b8:23:b4:23:3c:32:0f:9c:38:
         57:81:e1:d6:69:68:39:1e:66:8b:61:56:c4:5d:46:c5:6f:1f:
         16:31:02:ab:08:68:33:34:5f:c2:29:b0:c3:4a:28:0f:16:5d:
         42:63:e8:22:d9:94:47:2d:88:50:2b:5f:08:d2:5f:6e:4b:f5:
         e0:92:cb:7c:35:f1:16:05:d1:25:a5:c9:4a:bb:4e:b6:db:d3:
         53:bb:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----