Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0158331363C2BB878E8FEEF21D0D429D2165FF4C.cer
File:                     0158331363C2BB878E8FEEF21D0D429D2165FF4C.cer (raw, json)
Hash identifier:          HMNNwNpgtSQ5JLrv8nDzrMYXhfNutR4d77J3f0NLUck=
Subject key identifier:   01:58:33:13:63:C2:BB:87:8E:8F:EE:F2:1D:0D:42:9D:21:65:FF:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       508DF20FAE5143DC36E78BC0CA126764726A3D12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/0158331363C2BB878E8FEEF21D0D429D2165FF4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 15:59:57 +0000
Certificate not after:    Fri 02 Aug 2024 16:04:57 +0000
Subordinate resources:    AS: 272438
                          IP: 2804:8130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8d:f2:0f:ae:51:43:dc:36:e7:8b:c0:ca:12:67:64:72:6a:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 15:59:57 2023 GMT
            Not After : Aug  2 16:04:57 2024 GMT
        Subject: CN=0158331363C2BB878E8FEEF21D0D429D2165FF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:73:5d:cd:91:8d:1b:f1:a2:a1:17:c2:56:
                    91:7c:63:e5:82:58:8c:c7:c1:9b:ae:70:20:a6:8d:
                    41:8d:bd:d6:b1:1b:9b:2c:02:b9:5e:c0:87:f7:e0:
                    2e:fc:67:4e:31:fb:44:30:29:ee:6b:d2:d2:97:f0:
                    44:c1:5b:72:12:33:55:fd:b3:9e:85:12:cc:1e:25:
                    79:81:60:6c:8c:cb:b1:62:2c:9c:f4:fe:9f:a8:5a:
                    34:1c:05:9d:0f:ae:1c:09:c0:81:88:54:89:20:bf:
                    f3:3e:5a:98:f5:30:bc:8e:c8:bd:44:fe:cb:ca:fd:
                    35:f1:d8:a7:c4:6b:3a:4c:09:20:42:44:34:40:b6:
                    5a:7c:dd:3f:b2:8a:dc:b5:8a:dc:91:cc:e6:ba:26:
                    0e:5b:9c:c8:a7:67:15:12:f5:7d:f9:c2:0b:f7:c6:
                    68:2b:01:5d:80:b9:fe:9d:fe:2c:88:58:64:17:89:
                    83:f4:77:40:bc:7e:11:ba:b0:7b:8a:31:bc:c7:74:
                    c7:9a:98:e7:12:56:85:63:59:7d:28:92:60:8e:a5:
                    49:3e:68:b7:dc:4b:0c:6b:d2:a8:5a:89:81:df:89:
                    a7:b2:51:25:79:65:c3:f6:2d:3b:4d:47:b3:d5:42:
                    49:7a:10:6a:c2:61:32:51:18:1c:b8:4c:8a:a2:3a:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:58:33:13:63:C2:BB:87:8E:8F:EE:F2:1D:0D:42:9D:21:65:FF:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/0158331363C2BB878E8FEEF21D0D429D2165FF4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272438

    Signature Algorithm: sha256WithRSAEncryption
         11:44:55:37:28:75:9d:ea:ba:29:ad:e2:b2:1c:2c:0e:de:59:
         bd:3a:2f:74:82:b4:c4:0a:90:64:c8:0c:cd:7d:e8:5a:e6:2a:
         97:c5:65:ac:19:e3:55:9f:f4:a1:64:7c:59:ca:c6:58:a4:9a:
         b4:ea:15:41:c6:85:dd:38:9e:9e:ee:30:65:3f:dd:82:d8:14:
         73:1d:73:31:a6:a8:2d:48:95:32:85:33:9b:84:c7:5f:8b:e0:
         8e:72:92:9a:fe:e3:fc:e3:85:a0:6b:88:c5:84:5c:31:24:d0:
         53:36:6a:f8:64:88:3b:f2:46:1d:9e:4a:80:b2:61:7b:f0:8f:
         81:e1:f7:17:68:e6:e4:b0:af:d8:54:14:98:12:51:5f:8b:92:
         77:75:91:4e:16:9e:a1:0e:14:55:2a:0f:3f:5f:1b:d2:6b:4d:
         9b:d6:b6:cc:a8:4c:d4:85:1d:af:f4:c2:14:7a:25:66:d5:03:
         96:66:f5:92:73:5d:d6:8a:84:e9:25:7e:9b:63:c4:a7:d4:9c:
         8c:cc:aa:de:ef:75:94:be:90:cb:d0:57:84:98:b4:e4:dc:00:
         7c:f0:ee:97:b0:65:3d:d5:33:ed:ed:93:29:72:72:fa:8e:2e:
         4c:45:c4:9f:8d:37:58:bf:55:49:9e:d4:38:a0:45:da:c2:0a:
         ac:30:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----