Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EDCF66A0BE13581602A99B4EA3838797F5BBB300.cer
File:                     EDCF66A0BE13581602A99B4EA3838797F5BBB300.cer (raw, json)
Hash identifier:          ZOGPIXnHu4GYvQVKuUMIDpSoUmpDmU3icSqm9OX2laI=
Subject key identifier:   ED:CF:66:A0:BE:13:58:16:02:A9:9B:4E:A3:83:87:97:F5:BB:B3:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7ECA40B1C823C9143CCCDB0A026ACD45F967D03A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/EDCF66A0BE13581602A99B4EA3838797F5BBB300.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 18:18:25 +0000
Certificate not after:    Fri 22 Nov 2024 18:23:25 +0000
Subordinate resources:    AS: 264196
                          IP: 138.97.204.0/22
                          IP: 2804:23fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ca:40:b1:c8:23:c9:14:3c:cc:db:0a:02:6a:cd:45:f9:67:d0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 18:18:25 2023 GMT
            Not After : Nov 22 18:23:25 2024 GMT
        Subject: CN=EDCF66A0BE13581602A99B4EA3838797F5BBB300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:1f:ef:88:0d:d7:4c:d0:0a:15:51:e1:c2:
                    92:a1:28:1c:4a:04:f7:a7:be:2d:af:93:7a:3b:9c:
                    79:23:aa:cf:d2:b3:6a:c6:92:0d:66:26:c4:bb:11:
                    6c:ec:18:cf:03:04:8d:ce:ad:da:12:4a:f9:20:98:
                    a1:a7:47:a6:56:1a:56:00:a9:75:85:f6:a7:e6:1b:
                    a1:7a:8c:42:a9:c4:1f:34:49:7c:20:94:06:1e:bc:
                    ae:0f:6d:be:ed:56:67:48:2d:81:b8:02:7f:b8:49:
                    f7:77:20:e2:14:d1:0d:8b:c9:f5:9e:b8:09:26:7e:
                    fc:af:03:d1:4f:1c:2e:43:6f:0f:9d:46:fa:f1:b6:
                    5d:17:da:6a:9e:1d:18:ec:43:19:e4:1c:38:6e:3d:
                    9d:d8:6d:93:29:6e:83:dc:4a:5e:22:5f:42:d9:6c:
                    85:14:2c:30:65:5f:e4:7e:1a:66:a1:af:fd:cb:4e:
                    b8:d9:a0:56:8a:38:74:6c:75:f0:ff:04:b7:02:b6:
                    53:35:1b:66:e0:43:a5:2d:bf:33:24:6d:aa:ee:18:
                    e0:27:23:89:48:bd:ee:9e:92:f0:0a:95:73:90:70:
                    c9:40:fe:53:30:cf:08:80:c1:71:bd:91:e0:a9:9b:
                    e1:cd:f8:f8:52:a7:e4:e5:a8:21:28:e7:25:77:28:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:CF:66:A0:BE:13:58:16:02:A9:9B:4E:A3:83:87:97:F5:BB:B3:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/EDCF66A0BE13581602A99B4EA3838797F5BBB300.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22
                IPv6:
                  2804:23fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264196

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:e4:94:da:0b:5c:76:fe:80:72:fb:53:bd:0f:38:3b:04:
         31:4e:8f:c5:b8:67:1b:65:b6:80:2b:82:ff:c7:b9:ed:50:5b:
         c4:c0:a6:d0:8a:f9:34:e2:d2:6f:2c:9c:a6:aa:95:2e:2c:43:
         fa:87:b0:2b:c1:be:db:c4:0e:e6:18:b5:0a:89:e1:31:f6:c3:
         84:1c:ce:48:5d:7b:58:b8:e0:0a:22:0b:f2:6b:41:5e:f1:30:
         e7:c0:df:84:7e:60:12:8c:c4:95:e4:fb:d6:52:13:01:36:82:
         02:91:2a:48:79:bc:15:6b:7c:91:76:d9:8f:2d:f9:30:26:d4:
         94:58:2e:f1:ef:58:b4:57:f0:12:49:7a:5a:0f:2d:e8:fb:ff:
         a2:d4:58:c9:de:ab:92:9d:a5:f6:c2:fa:59:71:3f:ce:36:04:
         e2:a7:60:8b:ba:43:0b:ed:96:39:ab:c7:6b:46:1c:71:38:bf:
         1e:06:80:2d:88:08:2c:43:51:e5:19:dd:97:cb:bb:48:16:98:
         71:3a:2e:9a:e9:a5:51:7c:4c:b0:25:0d:3a:10:82:8d:56:8c:
         a4:de:03:bf:4f:d4:76:ad:bc:52:30:aa:f8:3b:36:fe:e3:b9:
         09:7a:cb:39:64:c0:6d:28:b9:4c:c6:a4:d6:b1:59:3b:e0:3d:
         85:2c:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----