Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer
File:                     2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.cer (raw, json)
Hash identifier:          jEHjTrAYZRIhNVLD+au4rCQmD9dWDjpOG804g8ngMx0=
Subject key identifier:   2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EC5797DDE85FF0105591CB11842822C3C9E2204
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 01:21:13 +0000
Certificate not after:    Wed 22 May 2024 01:26:13 +0000
Subordinate resources:    AS: 265500
                          IP: 170.78.92.0/22
                          IP: 2804:3518::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c5:79:7d:de:85:ff:01:05:59:1c:b1:18:42:82:2c:3c:9e:22:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 01:21:13 2023 GMT
            Not After : May 22 01:26:13 2024 GMT
        Subject: CN=2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:36:2c:46:b7:a8:a3:b3:5c:77:32:0e:f9:
                    b8:c1:3d:1b:83:64:fb:98:06:67:0e:69:ce:e3:ce:
                    06:17:29:5a:b8:15:90:df:4e:44:d3:28:48:b2:d6:
                    40:4f:5c:21:8a:67:90:cd:db:d7:f7:21:83:ad:7b:
                    61:fd:ee:85:1c:8a:ef:e7:76:29:9d:c8:cd:c5:b4:
                    0d:ca:e3:4b:2f:ae:dd:a7:1a:7f:80:6c:b0:91:18:
                    af:d4:77:58:eb:6f:25:9a:e1:6a:a5:8e:04:12:ea:
                    a2:d6:2a:c3:d3:a6:1c:69:c8:de:a1:35:1f:ea:e0:
                    ff:ce:17:b0:43:d5:a7:73:1f:f6:5f:52:66:61:88:
                    a7:33:a9:d6:81:ca:63:4e:07:58:f6:48:84:42:5d:
                    0b:ac:05:d4:4e:a2:97:9e:be:d0:37:7b:14:c2:bc:
                    75:fb:38:27:86:90:5e:be:d6:04:df:91:b2:e6:8c:
                    1f:bf:43:c2:11:1b:12:b6:0a:ff:33:ac:18:da:2a:
                    50:33:ad:c3:91:6f:41:ed:00:8e:00:9a:a7:d2:a7:
                    d8:49:ec:34:47:dd:07:ed:28:c6:9e:09:f4:e4:26:
                    5c:6a:14:27:9c:e4:d1:62:0f:0e:ce:67:ca:74:c9:
                    19:c2:e7:5c:0c:3d:0b:10:cb:d2:ca:53:ef:79:88:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:AE:B0:C4:29:8C:81:A5:A1:9D:7D:70:0E:A0:E3:6F:82:D2:FB:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/2EAEB0C4298C81A5A19D7D700EA0E36F82D2FB11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22
                IPv6:
                  2804:3518::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265500

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:9a:46:68:a0:0e:0c:28:e0:e4:ce:b6:a7:2c:c9:80:7f:
         fa:65:ed:c3:62:cc:9f:fe:e3:f9:18:96:d3:96:aa:10:9b:6f:
         de:c9:19:e9:e4:6e:d8:52:cc:57:6a:d3:94:6c:82:ed:9b:5b:
         0b:c7:9b:d8:7d:63:31:3e:35:24:f7:92:42:5f:ed:c9:2d:cb:
         b5:ba:3c:7d:0d:29:f7:63:b2:d6:62:02:33:65:0c:79:20:b4:
         25:fb:91:55:44:53:a3:aa:1c:63:2f:d1:09:d7:40:ac:57:33:
         79:a1:01:3e:b6:1c:9f:1c:22:b4:1e:d0:c2:5a:38:fa:51:cf:
         63:bf:df:fd:37:da:e0:2d:ce:9f:7d:67:b6:49:5b:57:aa:0f:
         ef:15:c0:6f:7b:be:b0:9d:6a:8f:b5:cf:bd:4c:1d:5c:74:49:
         03:01:67:10:7f:63:38:c0:f9:c0:46:58:d6:9d:b2:d7:93:81:
         00:55:07:23:ba:5b:b7:34:d2:68:60:3b:e2:80:9d:16:c5:13:
         2c:a9:83:27:e1:04:a8:b3:2f:47:01:bd:fe:01:1f:05:01:82:
         6a:3d:49:3d:ea:fc:73:26:5b:12:74:ce:7c:40:3e:d5:bd:43:
         4d:cc:2b:96:4a:7a:3a:25:3c:2a:83:b4:80:29:c0:b7:fd:af:
         28:6c:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----