Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer
File:                     E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer (raw, json)
Hash identifier:          PpmMvKODw+FqkyfcLgdFQ7pFv2yHykRgVUeB7VEtjt4=
Subject key identifier:   E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14856E143D75873EA21A11047B004D4C8DD16FEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 12:42:35 +0000
Certificate not after:    Sat 29 Jun 2024 12:47:35 +0000
Subordinate resources:    AS: 61638
                          IP: 131.100.136.0/22
                          IP: 2804:1c1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:85:6e:14:3d:75:87:3e:a2:1a:11:04:7b:00:4d:4c:8d:d1:6f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 12:42:35 2023 GMT
            Not After : Jun 29 12:47:35 2024 GMT
        Subject: CN=E57F8D91E328DC79CA4961B77D81A3140C83DB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:2d:fa:75:85:a7:f9:ea:d4:a0:a8:97:4b:
                    b8:d2:ce:7f:3b:63:b4:f6:91:d7:45:27:5a:bf:0a:
                    75:ed:40:10:ca:32:95:86:92:19:ca:95:3b:3f:1b:
                    0d:7b:13:9f:de:80:b1:f7:bd:41:1b:60:9c:f5:57:
                    2e:96:e5:6d:f4:60:b2:82:42:6b:df:09:45:7f:4c:
                    06:be:0c:24:1c:e5:34:d9:08:2b:1e:3e:89:a1:ab:
                    f1:ac:1c:b1:82:77:37:e8:d6:25:a5:be:91:de:fd:
                    fd:4a:f8:41:79:dc:72:84:d0:09:57:d6:7b:1d:37:
                    d7:87:e4:38:c5:34:58:5d:5a:22:8b:a6:11:a2:e1:
                    97:ab:10:89:79:f9:d0:1b:82:03:20:2f:d2:91:5f:
                    b5:b4:0d:10:ea:59:64:d7:94:bc:93:59:cc:74:29:
                    15:99:30:fe:73:2a:17:f9:da:ac:f8:e6:55:cd:6e:
                    88:d8:cb:6e:54:aa:83:90:61:9e:95:71:60:4b:5b:
                    4a:30:76:fa:35:9c:d3:3a:42:ff:ac:d1:96:c0:94:
                    75:db:0c:73:85:60:11:e6:5e:be:30:5b:8f:7f:e8:
                    e5:71:89:35:71:f7:e2:00:20:d4:73:74:5b:39:0d:
                    ce:5a:26:a5:72:eb:c2:95:50:fc:4f:50:16:54:b3:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.136.0/22
                IPv6:
                  2804:1c1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61638

    Signature Algorithm: sha256WithRSAEncryption
         a5:f4:88:01:b4:b3:b7:e8:ac:3c:20:cc:30:93:84:42:e8:29:
         b6:ba:f6:1a:69:22:10:3c:cd:cd:49:88:b9:8c:32:5f:14:86:
         f4:98:7c:1e:70:a5:69:29:dc:29:72:b5:6d:ee:98:d2:88:a4:
         ac:90:43:19:e8:b9:77:e3:e7:88:a2:4d:ac:30:ed:8d:0e:2c:
         4d:f6:dc:ab:97:88:8e:7b:5e:6c:b9:6f:36:62:87:fe:ce:bb:
         40:ee:de:36:b7:32:02:29:a1:cd:ff:d9:a0:77:05:c0:ea:83:
         d5:f6:1d:08:e1:11:54:5f:a6:c9:8a:91:05:8c:8f:dc:11:96:
         e9:6d:f9:9b:70:f1:76:a0:a4:96:89:4e:f8:47:4d:a8:55:d1:
         27:73:99:b1:ca:7d:9b:03:bf:da:04:84:cf:b0:66:08:d5:f0:
         1c:75:4c:19:0a:d9:98:2c:12:9a:1c:88:6e:23:85:ff:96:10:
         54:92:8c:84:9b:69:8b:88:da:34:4e:cf:70:50:8e:4d:60:72:
         15:10:8a:51:14:db:5d:0f:84:1e:9f:5b:9f:19:9a:6c:58:46:
         14:b0:91:ec:71:16:b9:1b:e0:0f:00:2d:ef:35:23:ce:7b:da:
         b1:0e:36:d5:cb:62:ae:4d:77:e7:84:8d:4f:cf:59:52:4a:e6:
         73:8b:7a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----