Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.cer
File:                     EAECF417F30F34ED5C20C0955F311C6417A8F9B0.cer (raw, json)
Hash identifier:          MKnElmTu0kyuYZDxFCAqYxn/CdIuEWBqVQwiGYGBbUI=
Subject key identifier:   EA:EC:F4:17:F3:0F:34:ED:5C:20:C0:95:5F:31:1C:64:17:A8:F9:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CECF7B1F44C448363C348E9A4E708C59BC7BF47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 12:21:51 +0000
Certificate not after:    Fri 13 Sep 2024 12:26:51 +0000
Subordinate resources:    AS: 61919
                          IP: 190.112.204.0/22
                          IP: 2804:17d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ec:f7:b1:f4:4c:44:83:63:c3:48:e9:a4:e7:08:c5:9b:c7:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 12:21:51 2023 GMT
            Not After : Sep 13 12:26:51 2024 GMT
        Subject: CN=EAECF417F30F34ED5C20C0955F311C6417A8F9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:ad:74:7a:62:df:a1:e6:18:8b:f6:64:cd:
                    3e:df:fc:64:b6:5a:ee:21:90:c3:50:3f:b0:17:27:
                    09:95:08:92:bd:50:7c:74:26:d9:18:0e:c2:f6:75:
                    30:ed:4d:ea:7f:a7:59:ef:ea:f1:d6:c0:bf:8a:e6:
                    e9:f6:51:e3:bb:e1:0b:4b:8b:34:b3:67:c6:90:8d:
                    d2:c7:34:ee:81:36:62:09:5e:82:c8:af:b6:f1:6c:
                    cf:73:46:c2:42:ae:a5:d1:ed:ce:15:32:76:3b:7e:
                    3c:a8:8d:3e:75:48:6c:83:be:65:7d:c7:5d:87:19:
                    d3:c1:64:fa:45:f2:4e:45:1c:17:09:2f:ca:a4:c6:
                    26:c8:f3:6f:69:44:2a:c4:6d:98:fe:b1:e1:8b:4e:
                    70:35:aa:6d:cb:02:34:46:f3:db:e0:d2:33:45:b1:
                    9a:75:46:df:06:d0:70:14:14:55:fc:2d:d9:b0:c7:
                    94:a7:67:61:d3:39:02:01:eb:51:83:32:df:e4:2a:
                    4f:5b:8c:5c:0e:d5:96:95:55:87:c1:cd:7c:81:30:
                    ee:8b:f1:bd:10:bc:cd:7b:c5:07:65:df:b9:fa:72:
                    ff:93:e9:42:24:1e:24:cf:4c:b1:30:cf:6b:62:23:
                    c4:41:88:eb:eb:18:6c:2a:3f:4b:d3:50:31:e0:c8:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:EC:F4:17:F3:0F:34:ED:5C:20:C0:95:5F:31:1C:64:17:A8:F9:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8K4odna7GTW6fU9pGGS5MTqNFh4cuSezZK8vBAR6HB5q/0/EAECF417F30F34ED5C20C0955F311C6417A8F9B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.204.0/22
                IPv6:
                  2804:17d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61919

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:9b:f2:ca:bf:1a:8c:aa:be:43:ef:35:15:0f:10:bb:38:
         9f:1b:44:f8:02:6e:63:d8:8a:ee:76:21:ed:1c:de:76:8e:8e:
         d2:e6:b6:1a:28:08:ec:1e:88:b6:4c:de:76:4f:ed:93:28:88:
         67:66:02:25:f6:15:18:53:d5:e4:67:6b:52:12:f3:3f:ee:26:
         1d:44:90:5f:1c:cf:60:ba:d2:bf:d1:d5:b2:fe:c2:dd:8a:8f:
         df:0f:b3:93:e2:cf:d3:ca:39:98:69:14:94:cf:89:4a:a7:ff:
         a3:ff:61:41:01:c9:ac:00:e3:92:0c:6f:4b:b2:77:29:1d:24:
         7c:55:76:54:f2:68:b8:f9:4f:20:4a:9b:aa:83:1a:8d:30:45:
         31:91:fb:14:86:0f:7e:38:0b:fb:c0:26:d7:e6:f2:32:11:84:
         36:0d:b4:92:92:b7:da:d4:12:06:77:46:03:b6:5d:ad:65:9e:
         98:c2:96:d1:20:62:de:ec:aa:0c:dc:a9:99:61:ad:16:48:04:
         69:1b:f5:76:d8:aa:28:7d:8d:03:ec:3e:74:ca:27:dc:ea:2c:
         b8:01:f5:1f:33:32:86:8a:d6:6c:2b:db:0c:3c:e3:e5:bd:16:
         8c:5a:9a:f8:5e:98:67:df:8d:17:6a:27:56:95:c0:84:b4:8c:
         05:91:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----