Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer
File:                     EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.cer (raw, json)
Hash identifier:          RT9qimp+Aesvqw3XMzT9mEB8NoMM/uTgie8dL+juba8=
Subject key identifier:   EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       422EDC4F76114F97874A9B2B04AE5682E74F72C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 14:16:32 +0000
Certificate not after:    Thu 17 Oct 2024 14:21:32 +0000
Subordinate resources:    AS: 269684
                          IP: 45.191.204.0/22
                          IP: 2804:6850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2e:dc:4f:76:11:4f:97:87:4a:9b:2b:04:ae:56:82:e7:4f:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 14:16:32 2023 GMT
            Not After : Oct 17 14:21:32 2024 GMT
        Subject: CN=EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:2f:35:e3:fb:04:32:cf:08:19:82:f4:dc:
                    3b:eb:1c:ea:1a:a2:9d:8d:08:f1:dc:53:83:52:6b:
                    a1:90:67:bf:c3:07:3c:fa:98:5c:90:9f:47:f3:b7:
                    25:7a:85:2e:c0:20:21:af:9e:06:84:18:0f:ec:63:
                    ae:70:7a:88:31:18:22:c2:fb:24:0e:e6:66:87:47:
                    1e:34:d3:9c:aa:9e:6c:9c:9d:0f:48:34:83:8a:7c:
                    d7:ee:40:de:06:3a:1d:30:f1:ca:c1:40:b7:5a:7c:
                    c8:0d:b1:56:92:07:15:dc:c2:34:30:77:8b:25:d1:
                    5c:1b:d7:cf:7c:80:4a:78:e5:6d:f3:41:0e:0b:d0:
                    49:d2:b3:81:2d:fb:98:06:37:f4:12:33:c9:43:e7:
                    ae:bc:c4:2e:03:40:50:98:e9:52:0b:d2:64:b5:0b:
                    9b:d0:59:a6:a3:eb:09:6e:92:c4:95:c6:d0:9c:73:
                    fa:99:02:79:8c:fe:7a:7c:3f:6b:ea:99:e4:3b:a2:
                    ec:af:ff:05:9a:bb:50:20:63:ce:bb:48:f3:10:c0:
                    db:42:9d:a7:e1:2b:7d:19:d4:60:ad:75:ff:1a:58:
                    44:18:45:01:10:01:10:d2:86:82:d5:62:54:1c:2c:
                    ee:88:07:76:94:3b:c3:97:a0:b9:66:3d:b6:1c:16:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:7C:9C:8C:00:B2:D4:CE:FE:02:5D:90:03:E9:FF:4B:23:31:70:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/0/EA7C9C8C00B2D4CEFE025D9003E9FF4B2331704D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.204.0/22
                IPv6:
                  2804:6850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269684

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:be:ff:ef:0c:d1:00:2e:e1:13:01:d1:ec:06:77:a4:84:
         e4:43:1c:29:63:c8:dd:a4:c5:ca:ee:e2:dd:63:2c:c7:27:58:
         4b:46:7a:59:4b:c8:28:14:69:fc:69:e4:4f:ea:88:c8:ef:36:
         27:23:73:18:f6:b9:f3:56:9d:cf:c0:ce:a9:50:6e:38:62:4e:
         14:29:ee:65:b0:5c:d8:7c:15:13:34:99:0f:aa:ae:0c:6c:72:
         20:35:44:58:48:d0:e4:c1:33:0e:1a:65:1b:2f:93:e3:06:30:
         3d:ef:63:1d:70:74:7e:c9:16:85:6e:4a:82:2c:2d:64:34:e6:
         0e:62:90:93:f1:3f:ba:f0:de:ce:df:e2:63:e7:b0:2c:10:b6:
         7f:a6:99:b5:c3:6e:57:81:86:9b:aa:63:bd:85:52:af:45:d5:
         8b:90:8c:38:1b:4f:62:32:8f:35:12:6f:a0:79:96:43:b4:6f:
         18:22:69:73:8d:4c:61:46:a6:f2:40:cc:4d:48:7c:8b:47:7b:
         8e:6b:92:25:d6:72:75:00:e5:84:bc:99:7c:59:04:f1:fd:2d:
         56:4c:da:ea:a7:a5:fb:a0:5e:01:4f:11:4e:43:8f:9a:bc:2a:
         b7:09:c8:da:94:1e:6b:28:4c:b6:a3:be:59:cc:24:18:fa:75:
         00:c0:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----