Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/162700A209C017D8E4D23A05A44727CC54FCE6B9.cer
File:                     162700A209C017D8E4D23A05A44727CC54FCE6B9.cer (raw, json)
Hash identifier:          3T9taizq2Qptlb/wL4glfH/fUfCPYiIsDzs4UWngqms=
Subject key identifier:   16:27:00:A2:09:C0:17:D8:E4:D2:3A:05:A4:47:27:CC:54:FC:E6:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F6E74B537FB45170985708235263E86A366F3F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/162700A209C017D8E4D23A05A44727CC54FCE6B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 14:12:33 +0000
Certificate not after:    Tue 14 May 2024 14:17:33 +0000
Subordinate resources:    AS: 264368
                          IP: 131.161.48.0/22
                          IP: 2804:1d70::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6e:74:b5:37:fb:45:17:09:85:70:82:35:26:3e:86:a3:66:f3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 14:12:33 2023 GMT
            Not After : May 14 14:17:33 2024 GMT
        Subject: CN=162700A209C017D8E4D23A05A44727CC54FCE6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:32:38:47:66:94:c5:bf:61:cc:26:aa:95:
                    32:1f:4e:c5:fb:ed:13:77:b5:7e:9e:85:c7:56:e1:
                    30:5c:f5:90:ba:5a:94:e4:61:36:70:8e:d8:16:8a:
                    c0:a0:ad:a6:96:aa:68:6f:05:84:43:33:89:94:60:
                    24:65:80:16:ac:b9:02:8b:ac:82:1e:d5:32:c3:88:
                    0d:1a:99:fa:0f:85:c5:d3:90:cb:60:6f:62:ca:f1:
                    f3:f7:17:a9:47:77:42:04:02:86:48:38:50:ff:97:
                    d0:f3:54:3e:5e:b4:f6:66:a0:e3:e1:8e:8d:0c:3c:
                    ae:b0:ff:82:ba:44:61:5b:30:ad:c9:87:9e:76:6d:
                    0d:51:18:28:f6:3f:e1:b5:da:21:95:a7:6a:4a:ce:
                    92:d6:84:d0:e6:bb:a5:c3:fc:d7:0d:c2:dd:99:29:
                    6c:b1:d9:92:c0:36:53:8d:ae:a8:51:8f:6a:5c:73:
                    23:0c:00:f8:67:54:f3:d1:4f:07:59:5d:5c:3f:7e:
                    17:fc:ab:a4:cb:b7:cf:ee:9f:80:95:e9:12:85:97:
                    45:73:af:ac:6e:01:63:73:a5:4f:7b:c7:22:62:06:
                    3d:c0:b8:89:8d:fc:44:9a:57:16:df:29:8a:10:75:
                    d9:86:1a:17:d3:50:fa:b2:77:ba:e0:63:ce:95:75:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:27:00:A2:09:C0:17:D8:E4:D2:3A:05:A4:47:27:CC:54:FC:E6:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/162700A209C017D8E4D23A05A44727CC54FCE6B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/22
                IPv6:
                  2804:1d70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264368

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:05:89:84:b6:26:13:ca:50:5c:e4:50:bb:6f:69:d0:ee:
         57:cc:3c:56:e8:ce:92:34:ad:4d:18:b8:6e:0f:19:df:8f:41:
         05:09:90:1f:fc:7d:f4:95:c0:f6:9b:6e:e4:54:8e:bf:7c:eb:
         f9:6d:75:16:0e:ba:1b:3b:b6:ae:f1:ae:a0:6a:68:0d:2d:84:
         87:9c:2f:e8:06:19:bd:d8:fb:4e:5f:36:aa:34:40:d7:66:a6:
         e6:a9:59:2b:d9:19:df:2b:ee:80:9e:c2:cb:7c:21:87:17:8f:
         bb:5a:cb:a3:b6:9a:3d:39:3e:00:e4:83:5e:d2:4b:83:c1:11:
         49:48:54:45:1e:fd:71:03:24:2b:9d:88:11:26:7e:56:14:48:
         13:a7:fb:ad:09:fb:83:f2:fe:9c:fc:ea:a7:09:1c:f6:ce:16:
         cd:20:9f:26:8f:3e:30:43:67:f0:7a:00:a7:73:59:e8:a7:e6:
         da:6d:a8:82:d2:9e:e2:15:bc:4a:06:d7:83:59:6f:5e:70:53:
         b2:02:08:59:c8:7e:da:b7:ea:0a:4f:93:26:b7:fc:3e:62:a6:
         07:5f:05:6b:32:e5:a6:cf:46:28:e7:1f:25:30:43:03:37:77:
         a2:eb:9f:c9:62:ec:58:de:af:39:12:f6:b4:0d:26:1a:f4:ef:
         46:9b:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----