Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.cer
File:                     E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.cer (raw, json)
Hash identifier:          A7aCmX6bG1LjyPLua1Nn/jBzzPM/4VdcIQxYTLjlzpE=
Subject key identifier:   E8:9B:D1:66:D8:87:13:4D:A1:D3:FE:3E:BF:98:56:B4:D0:30:1D:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70C73A9E6FE5AAB9429197CAF20D8C8154012293
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 12:51:07 +0000
Certificate not after:    Thu 01 Aug 2024 12:56:07 +0000
Subordinate resources:    AS: 269286
                          IP: 45.183.112.0/22
                          IP: 2804:6240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c7:3a:9e:6f:e5:aa:b9:42:91:97:ca:f2:0d:8c:81:54:01:22:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 12:51:07 2023 GMT
            Not After : Aug  1 12:56:07 2024 GMT
        Subject: CN=E89BD166D887134DA1D3FE3EBF9856B4D0301DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:1f:17:e9:d9:4b:a6:fa:f6:39:9a:e0:0b:
                    f8:f9:4b:41:95:7f:76:70:3e:7b:f4:75:f0:4f:29:
                    08:04:d8:b8:4f:59:74:d8:2b:09:ae:89:d5:7b:17:
                    d7:29:b5:4b:15:68:3f:fe:b6:57:db:4d:96:cd:a5:
                    a1:06:9b:53:e4:c5:5f:ea:fd:45:f4:1e:14:32:ea:
                    3a:a9:a3:54:1d:55:08:d2:5a:4a:b5:1d:8c:b1:d4:
                    d7:4e:e2:39:6b:6c:ce:97:ba:87:50:0d:38:01:6e:
                    59:2f:8a:f4:72:31:d1:76:f7:fd:0f:ac:63:19:8f:
                    07:6f:79:b2:db:c9:a5:59:bc:d4:cd:10:c4:46:48:
                    e1:f3:4f:09:92:02:f8:e3:60:13:6e:76:ec:04:02:
                    9c:7a:7e:db:43:93:54:df:77:74:36:cc:65:c9:d4:
                    91:52:7c:98:7f:60:f2:85:96:3f:95:54:e5:fc:2f:
                    56:59:ce:b2:c9:35:1a:41:3f:79:5b:11:97:41:db:
                    f4:70:2a:f5:1f:ef:d7:52:7b:b0:6b:2d:d5:ca:f5:
                    3d:e4:74:8b:06:81:7f:f6:dd:e3:ef:4e:7c:87:4d:
                    a5:be:94:bc:bd:a8:f5:26:d5:25:d6:96:b0:59:c6:
                    3d:3b:e5:6c:51:c5:46:16:2b:de:b5:2d:5f:5e:4b:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:9B:D1:66:D8:87:13:4D:A1:D3:FE:3E:BF:98:56:B4:D0:30:1D:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/0/E89BD166D887134DA1D3FE3EBF9856B4D0301DE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.112.0/22
                IPv6:
                  2804:6240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269286

    Signature Algorithm: sha256WithRSAEncryption
         1c:3f:8b:62:7f:35:2b:b4:ff:3a:77:b4:93:e8:be:c4:8c:f7:
         e6:1b:e5:bc:20:78:f1:1d:6e:04:14:00:6d:74:62:45:31:45:
         b0:3d:8e:f8:0e:46:3d:67:55:14:05:00:8a:49:83:c2:1c:d0:
         f9:9f:05:95:68:9b:c8:ee:1c:60:22:69:43:0c:b0:1f:d0:96:
         db:96:d9:aa:43:1f:d9:27:00:9d:58:f6:87:4d:59:3e:f4:9e:
         0c:a8:df:28:cd:ea:f8:86:2d:55:fd:e3:41:f0:4f:e9:02:2a:
         1a:03:e8:91:e2:bc:b1:b5:5d:ca:ea:46:e8:aa:72:e3:fd:af:
         b8:32:7b:61:b0:30:fe:28:da:33:dc:42:bd:34:5c:4d:a8:fe:
         79:ae:26:9f:18:e3:c3:ac:df:25:05:6c:4d:c2:26:ce:9f:7c:
         57:e6:e2:aa:4b:33:78:04:72:4f:e7:76:46:83:62:33:de:7e:
         c6:a5:67:d9:08:4b:70:45:e2:86:d4:8f:7b:9c:37:5e:f9:6e:
         42:b8:2f:7a:a0:35:f5:fa:ea:3f:8e:3a:92:b9:c2:ef:8b:ae:
         08:b4:88:99:4e:aa:39:98:28:db:6c:c2:de:d5:5b:31:c1:fa:
         e4:96:59:4b:c5:a0:41:ad:de:99:b5:47:53:eb:b9:98:29:b7:
         9b:c5:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----