Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.cer
File:                     E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.cer (raw, json)
Hash identifier:          mC38E+6d0WQLIkJh5BXbDixl8PqOjSiGKRYLQvIQUtg=
Subject key identifier:   E9:F6:3E:00:E8:EE:DA:7E:9C:A2:76:24:98:EB:0B:8B:8A:4C:74:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DA4562F9B38F5E4EC4BD0B9FFCC901401EAA754
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 15:07:33 +0000
Certificate not after:    Fri 13 Sep 2024 15:12:33 +0000
Subordinate resources:    AS: 270479
                          IP: 190.93.180.0/23
                          IP: 2804:6c98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a4:56:2f:9b:38:f5:e4:ec:4b:d0:b9:ff:cc:90:14:01:ea:a7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 15:07:33 2023 GMT
            Not After : Sep 13 15:12:33 2024 GMT
        Subject: CN=E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:df:4b:35:dd:21:c1:ba:97:f0:62:d8:6d:
                    a3:2c:5b:89:14:13:a1:f9:a2:b8:d6:b7:ad:90:33:
                    b2:74:f0:3c:e8:e9:ec:a2:26:ca:48:c1:49:8d:f6:
                    b0:75:fd:b3:71:c6:a5:e1:0b:b0:ce:e0:1e:38:d7:
                    47:82:21:5a:61:02:07:a9:5e:36:58:22:b5:48:b4:
                    87:b6:34:36:f6:23:8d:99:ea:31:42:ff:8b:21:7c:
                    5b:f8:9a:9a:24:af:b1:4f:64:64:8e:e6:a4:a6:cf:
                    4e:08:9e:c4:bd:33:69:0c:38:7e:c3:b2:b3:44:47:
                    80:9c:ce:15:ed:6f:c5:b4:c3:6d:d4:7c:96:41:a8:
                    d2:5e:f7:7d:99:27:39:11:d8:6e:20:29:d6:95:ce:
                    56:75:ca:c7:6a:5d:f9:21:c1:e5:c5:c7:1d:cb:11:
                    56:29:da:97:98:77:11:30:35:f5:b9:96:d3:f4:9c:
                    37:6a:3b:3e:80:a3:46:2d:7f:c1:70:65:e6:f0:74:
                    8e:dc:10:cc:d3:7a:b2:ad:52:c4:05:0c:d4:e3:1f:
                    30:72:f6:97:1c:4e:6c:cc:91:da:33:ab:ca:1d:81:
                    43:39:d0:12:5c:c8:e2:54:f2:e1:b3:89:07:a0:73:
                    e2:20:7d:94:49:36:37:3b:d0:6c:f7:57:fc:b9:9e:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:F6:3E:00:E8:EE:DA:7E:9C:A2:76:24:98:EB:0B:8B:8A:4C:74:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKQuEGpQY9nKCbbZeZR6gBWEeYrGRBwNpfQNuf2yfLsy/0/E9F63E00E8EEDA7E9CA2762498EB0B8B8A4C74E2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.180.0/23
                IPv6:
                  2804:6c98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270479

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:39:7f:5c:9a:35:c5:57:57:f0:72:59:c1:04:3f:45:1f:
         f9:e7:4b:96:1b:ad:5b:a7:6b:26:1f:43:42:9f:37:d2:2c:c7:
         a2:93:85:be:af:ab:b0:b4:e2:d0:c2:7d:52:4c:83:18:ef:0a:
         17:09:cd:83:6c:c1:81:1d:3a:35:e9:ca:67:1d:e5:75:8c:16:
         77:21:1c:43:be:a6:81:9c:3d:0d:5f:23:26:25:f8:1b:bc:36:
         b8:99:1c:66:d6:c6:79:9c:fb:5a:eb:82:8c:28:1b:02:15:91:
         60:70:4f:f5:76:28:2d:2d:fc:29:b9:6d:63:7b:78:23:fe:a8:
         2c:c1:b6:3e:c6:3e:ff:42:1f:76:c0:8e:6c:50:3a:5e:65:8a:
         dc:93:7c:de:d5:3d:aa:22:35:2c:86:67:81:d3:b4:a6:4b:b5:
         86:d5:ce:af:27:72:55:6e:36:52:f9:53:98:ce:a6:ac:e4:9d:
         b5:60:80:e7:37:43:2a:44:74:18:15:90:3c:f8:b2:ef:d9:eb:
         49:6f:62:74:ec:89:7f:b2:fa:e9:b1:27:ca:ac:2b:fa:bc:6f:
         c4:02:92:12:fe:bc:c6:fb:9f:39:55:2d:a1:4c:b8:cf:45:54:
         24:08:69:57:a2:40:24:45:9b:68:70:18:fc:a7:9f:f6:91:54:
         3a:11:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----