Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer
File:                     0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.cer (raw, json)
Hash identifier:          MGdjRcA3NF5raLZ1KE7UwsKFNe5N8Tg0I2SknxcBylQ=
Subject key identifier:   00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59CDC6A9A10831BF1F03A4EBAB68D8C592350B82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 14:05:09 +0000
Certificate not after:    Thu 19 Sep 2024 14:10:09 +0000
Subordinate resources:    AS: 263470
                          IP: 170.83.200.0/22
                          IP: 191.242.48.0/21
                          IP: 2804:1254::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cd:c6:a9:a1:08:31:bf:1f:03:a4:eb:ab:68:d8:c5:92:35:0b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 14:05:09 2023 GMT
            Not After : Sep 19 14:10:09 2024 GMT
        Subject: CN=0031EE5AFB733F39AED0585DB03F97D7C8F34A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:28:a4:ff:72:d3:7a:0b:e6:9e:e2:9d:e3:
                    42:ba:ef:dc:40:a7:74:96:e3:3e:ed:14:97:e2:33:
                    db:d3:7c:3b:ed:23:dd:88:62:74:a8:90:55:ec:b7:
                    4e:7d:55:d2:6e:b0:b7:65:f0:90:d8:c1:9e:14:e8:
                    10:2b:ef:c6:82:ca:33:cd:09:ac:dc:c3:c0:38:49:
                    30:15:4c:ef:22:c4:42:80:35:7a:53:1e:c7:09:8e:
                    ef:c4:63:23:3d:09:c6:1e:e3:0e:01:ea:3d:31:a5:
                    bc:6c:13:cf:4d:6d:53:a4:d0:16:ad:d6:a1:ba:78:
                    f0:37:db:dc:a8:e6:bf:2b:44:79:43:f0:b4:3d:d0:
                    ae:98:e1:94:81:19:77:24:ed:d0:6c:e9:ca:2e:f3:
                    76:b0:46:63:87:77:79:1d:12:07:7e:f2:12:68:39:
                    d1:cf:51:55:87:9d:ef:5d:b7:c3:01:16:cf:42:c8:
                    66:b5:66:d8:9c:96:54:92:ff:d6:0f:c1:20:81:ea:
                    0e:77:3d:68:08:d1:e8:cd:45:ce:0b:38:bf:b5:99:
                    2a:13:d7:ad:e4:54:29:ef:91:e6:35:9a:9c:ba:60:
                    d5:c7:d5:8e:90:3e:f9:9f:46:5e:69:1f:04:13:fc:
                    15:cf:fa:9b:ec:75:ce:47:14:61:36:ef:49:8c:a3:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:31:EE:5A:FB:73:3F:39:AE:D0:58:5D:B0:3F:97:D7:C8:F3:4A:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/0031EE5AFB733F39AED0585DB03F97D7C8F34A4D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/22
                  191.242.48.0/21
                IPv6:
                  2804:1254::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263470

    Signature Algorithm: sha256WithRSAEncryption
         59:99:5a:7b:97:fa:ba:b9:0f:b9:d9:3a:1b:fe:be:e7:ac:08:
         0a:93:54:1d:1b:f2:e1:7e:97:00:c8:26:6a:95:08:c9:80:87:
         64:4b:bd:ad:74:6d:ff:5c:52:65:d1:ef:b9:de:0f:ba:90:5c:
         d6:f1:ef:12:00:fe:85:27:79:7c:40:49:74:fa:76:aa:b1:67:
         c1:17:c4:c2:a7:66:12:8e:8e:67:72:7f:d7:a5:e4:75:b1:e6:
         e9:57:c5:28:d9:ba:36:73:c4:e5:c9:f8:c8:92:d3:bb:c5:ec:
         e6:42:6e:c1:26:b4:20:76:15:0e:80:57:32:a9:8c:8b:9b:ae:
         30:f8:8e:6c:de:2b:be:fa:19:75:b8:50:c8:75:b2:04:62:69:
         c1:66:e5:9f:89:cf:c4:26:e5:40:59:63:0d:8a:2b:d3:ec:e9:
         f4:16:5b:fd:8e:31:a0:12:bf:f3:6f:3e:d0:d2:d7:f5:f1:d8:
         33:a9:b6:0c:2a:e3:c4:d2:80:a0:c1:60:61:25:9b:31:3e:75:
         34:e2:95:42:9a:6b:a6:c6:37:bc:a4:96:2c:11:23:89:60:7e:
         27:a5:d2:8d:61:e3:54:fe:b4:c9:67:41:88:8a:42:2d:54:56:
         ff:95:32:b0:67:65:d1:67:ec:5e:a1:21:83:d6:93:a5:e4:b0:
         a7:92:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----