Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
File:                     F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer (raw, json)
Hash identifier:          e4q3WYBhM2xwZFHGdojyO73HYHBH/H2jJKyHqrm4Z0g=
Subject key identifier:   F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A273F6B8341C01422538792EDBE8C24E0C6F230
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 12:36:41 +0000
Certificate not after:    Thu 05 Dec 2024 12:41:41 +0000
Subordinate resources:    AS: 263053
                          IP: 177.137.128.0/20
                          IP: 2804:920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:27:3f:6b:83:41:c0:14:22:53:87:92:ed:be:8c:24:e0:c6:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 12:36:41 2023 GMT
            Not After : Dec  5 12:41:41 2024 GMT
        Subject: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:1f:4a:cc:f3:12:90:8f:21:1b:59:07:78:
                    ce:84:46:c7:f0:ae:e3:5d:eb:f4:e0:38:b9:38:45:
                    7c:57:91:77:9d:78:bf:7b:28:b9:9b:16:65:fe:c4:
                    7d:e8:2d:09:b4:95:64:14:b6:18:fa:21:4a:7b:eb:
                    8a:52:d3:b8:03:cc:f1:7a:a9:80:8c:ea:17:db:8d:
                    90:bd:dd:11:94:59:ea:61:53:e6:03:c6:f0:fa:bf:
                    0f:8e:c2:22:90:17:fc:6a:09:0f:1d:91:99:b1:de:
                    ee:d5:1a:d7:bb:4b:c2:52:df:e2:6f:01:f6:e6:a5:
                    6f:f6:9a:ca:24:55:f5:63:6d:a4:b7:10:b3:aa:ad:
                    a9:08:78:b3:5d:cc:63:74:26:4c:ef:5d:0e:be:bb:
                    37:e7:ff:56:89:2b:3f:79:a2:2e:0b:16:f6:26:b7:
                    b9:9c:49:01:ac:99:66:4e:e2:06:4c:a5:dd:d3:ba:
                    a5:8c:af:2f:de:3c:78:b6:89:c1:25:b6:8e:4e:2e:
                    b3:32:0a:28:46:a5:0e:75:c7:13:a0:bd:a7:3e:c8:
                    04:68:8b:2f:ab:1d:2c:ad:7c:63:6b:cc:d5:9d:5f:
                    10:ed:ef:50:1f:8a:9f:17:85:29:e6:a0:f5:84:fe:
                    0b:ae:6c:8d:46:eb:11:ee:6b:27:1c:62:7e:eb:3a:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/20
                IPv6:
                  2804:920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263053

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:8f:c2:16:0f:ad:a3:dc:6d:8b:37:84:ff:f4:38:2f:4a:
         48:3c:a1:c6:1b:0a:4d:26:a8:aa:a3:f4:e9:68:57:11:30:77:
         eb:f2:1b:93:2d:db:77:d6:11:b7:5d:69:cf:8d:09:1e:41:28:
         ab:be:f1:14:9e:13:01:aa:a3:b3:51:b5:b8:97:4f:07:c3:a3:
         22:e2:4b:35:87:49:69:6e:66:31:3a:f5:fe:78:87:33:29:d5:
         f4:f4:67:e8:45:2e:4a:58:74:41:bf:49:35:c7:c5:b0:d0:fa:
         a9:89:1c:37:0c:fa:6b:c3:44:cb:88:63:89:6d:e2:59:b3:d8:
         37:31:54:f8:ae:4f:79:2d:f7:ee:89:3f:73:ba:ec:4d:cb:50:
         cb:13:28:8e:b5:9b:85:49:36:f8:65:f7:48:a0:c2:e3:c5:8c:
         b8:06:14:91:cd:a9:cd:ac:8b:9a:93:1a:82:cb:4c:f0:ff:32:
         df:3e:21:39:4a:2c:86:bb:9d:a6:a0:0f:a6:e5:b9:cd:b2:13:
         53:db:e0:13:a7:bb:95:9c:97:cd:9f:9e:a8:cf:b3:4d:71:a2:
         ef:69:05:33:b6:c2:13:ba:17:7a:c9:da:3d:bd:97:49:38:74:
         ad:e8:cf:41:19:cb:4b:ea:72:fd:24:8d:cf:8c:49:34:51:b3:
         22:73:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----