Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.cer
File:                     1F8D9307D6B304785DFC33543D60E8337F616CCB.cer (raw, json)
Hash identifier:          Jonr7foaYR3EZhlEBOF2ldc6AzyykgnGpJhBhnCYxGM=
Subject key identifier:   1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C464D75652BB7C055077D78B0B3F846B03D0F9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 18:35:11 +0000
Certificate not after:    Wed 31 Jul 2024 18:40:11 +0000
Subordinate resources:    AS: 268527
                          IP: 45.162.172.0/22
                          IP: 2804:5294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:46:4d:75:65:2b:b7:c0:55:07:7d:78:b0:b3:f8:46:b0:3d:0f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 18:35:11 2023 GMT
            Not After : Jul 31 18:40:11 2024 GMT
        Subject: CN=1F8D9307D6B304785DFC33543D60E8337F616CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:14:56:03:d2:51:b6:5f:31:9a:f8:83:bc:
                    a5:d4:31:5d:cd:8c:86:5a:26:22:77:f3:39:44:99:
                    6b:b5:d5:ee:d8:51:6c:48:a1:0b:be:fc:6e:76:ff:
                    a3:55:96:d9:e8:1a:9f:bc:bb:77:31:98:1c:b4:0d:
                    a0:34:9e:19:5a:26:1e:88:dd:f5:27:7a:c1:9a:33:
                    00:63:c4:e4:ba:55:49:5b:9d:26:66:f6:57:7f:a6:
                    a5:2f:94:57:d5:a2:26:88:6d:ec:65:b1:1c:6b:a9:
                    90:94:a9:24:57:74:b1:cf:6c:33:1f:52:6b:b0:03:
                    cf:ca:8c:fd:41:0b:6b:c8:0c:26:cc:22:64:4e:cc:
                    86:ce:71:59:4a:a8:15:43:bb:da:b7:1d:77:62:3e:
                    c9:08:41:e0:e6:5b:ae:1c:83:72:80:f3:24:5b:79:
                    74:7c:fa:8a:cc:b7:cc:0a:fb:bf:ee:5a:f6:c9:3a:
                    d2:e9:3d:1e:77:f2:61:9d:ca:a8:94:fb:60:f5:e7:
                    bf:75:32:52:f0:61:08:c2:c7:62:a2:e9:7b:38:1c:
                    45:31:a2:eb:69:c3:a0:ce:f9:68:97:3c:6c:fe:92:
                    b6:a7:6e:4b:4b:93:94:a1:3f:f2:9c:75:4b:41:06:
                    86:1b:3f:67:fc:3c:8c:be:0d:38:28:72:fa:08:f8:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.172.0/22
                IPv6:
                  2804:5294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268527

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:26:01:94:07:fb:a5:3e:88:f8:03:bf:38:af:00:4f:f5:
         d3:2a:97:64:2c:85:80:55:64:b4:b6:19:57:97:ff:1f:c9:b4:
         de:ac:c4:db:24:cb:18:e5:9b:17:e0:64:a3:a6:b9:2c:a3:b3:
         d0:90:b4:57:b4:c9:98:bc:01:a6:0b:f7:cf:4f:88:91:79:20:
         a3:a4:e1:13:b7:b7:52:a4:d3:f7:a0:47:ba:8e:a9:cb:93:5b:
         c3:c9:86:06:82:75:68:57:12:44:a8:ce:21:8b:09:75:00:68:
         36:54:9b:0c:b9:fb:8e:ab:5b:fc:28:f7:5c:e9:4e:66:22:03:
         60:34:51:1a:6c:d3:1b:bf:cf:60:d5:fe:bf:ac:ff:5e:2e:08:
         8b:b6:2c:de:6e:8a:80:33:26:f1:e5:91:fa:6b:ee:3e:fe:17:
         e4:14:ac:b6:52:a3:79:98:92:61:18:3c:83:cd:44:f3:66:87:
         e4:65:78:e3:72:bf:08:0b:d9:2b:ba:f4:8e:d9:f5:62:eb:40:
         2c:a2:4c:d8:2f:73:a0:75:7b:ec:31:5b:cd:a3:23:dd:66:ea:
         36:54:50:33:89:27:cd:b9:db:6e:a2:73:e2:ea:6f:9e:a9:30:
         3e:3a:60:b9:c6:2b:cb:f9:a7:eb:bb:14:f0:c0:23:c0:a5:7f:
         5d:76:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----