Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25CF17C687A6082A587E8672CFDF29DABE487548.cer
File:                     25CF17C687A6082A587E8672CFDF29DABE487548.cer (raw, json)
Hash identifier:          OcW7mzGFJJ+KgKzNKKNcuFXFqP9wej8koLvh/fCHrQw=
Subject key identifier:   25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72E0397B8D04A3B064B2E554B1B9BB9407F6155E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.mft
caRepository:             rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:54:11 +0000
Certificate not after:    Sat 10 Aug 2024 02:59:11 +0000
Subordinate resources:    AS: 265377
                          IP: 168.194.12.0/22
                          IP: 2804:3324::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:39:7b:8d:04:a3:b0:64:b2:e5:54:b1:b9:bb:94:07:f6:15:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:54:11 2023 GMT
            Not After : Aug 10 02:59:11 2024 GMT
        Subject: CN=25CF17C687A6082A587E8672CFDF29DABE487548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:ef:96:ec:1d:88:77:45:9b:53:b0:6c:36:
                    d4:30:1e:9c:b8:ca:94:6e:42:3b:66:5e:7e:d7:c7:
                    da:99:01:1f:c5:7f:c5:f9:4d:f7:21:d0:42:4d:21:
                    c4:95:67:52:2c:9c:5b:52:19:d8:5d:6f:86:c4:5f:
                    72:d3:c6:42:f9:86:7d:6c:71:81:a0:1b:ef:1c:66:
                    39:8f:4d:b0:64:9f:f7:a6:d9:fd:31:69:6c:f8:01:
                    ed:51:88:b7:77:ef:93:dd:1f:1f:6d:46:0b:7c:d8:
                    94:24:c6:be:a4:52:03:25:2a:08:ff:4a:fd:f3:8d:
                    6a:a1:a1:48:2e:75:50:a9:6a:4a:7d:74:7e:5d:fe:
                    54:a0:54:2a:0f:7c:9e:2e:41:14:ce:08:ac:b7:57:
                    28:d1:34:a7:f7:d7:bf:81:87:6e:db:48:19:76:11:
                    a1:73:71:42:6b:80:da:71:46:26:51:26:83:84:ea:
                    6e:ac:a4:ee:a5:bc:dc:67:f7:06:07:b7:27:5e:09:
                    24:bd:0a:2e:01:9f:01:5f:a5:2a:3e:6b:b3:69:9a:
                    b3:10:54:85:19:b6:57:c0:d1:82:1e:40:8e:6b:b8:
                    57:e4:90:c9:c2:b3:7a:8f:bc:76:85:dd:73:9d:5d:
                    8e:76:4f:f0:ba:76:1d:b6:56:c6:f8:da:24:85:23:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:CF:17:C6:87:A6:08:2A:58:7E:86:72:CF:DF:29:DA:BE:48:75:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/0/25CF17C687A6082A587E8672CFDF29DABE487548.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.12.0/22
                IPv6:
                  2804:3324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265377

    Signature Algorithm: sha256WithRSAEncryption
         76:23:16:a4:b9:ad:cc:a3:81:d0:27:29:71:61:a1:7e:b2:23:
         d7:f3:b7:69:c0:92:e4:86:ee:69:9f:dd:c6:ea:d8:c1:22:70:
         20:c9:c4:ba:5f:02:de:46:00:64:d8:87:a2:49:0c:35:c0:73:
         9e:fc:83:2c:a6:85:d7:15:0e:cf:b0:ae:1b:3b:a0:ad:02:e3:
         a2:e4:b1:f3:92:29:d1:f4:1a:d5:d8:33:e3:8e:fa:85:90:fd:
         b4:32:0a:74:17:ed:e7:4c:5d:23:f4:47:ad:92:7e:f8:f3:d5:
         cb:b1:fe:da:dd:0d:86:6e:3e:12:f0:a2:a4:46:b9:e9:d2:07:
         77:39:0d:a2:26:03:47:31:ec:e4:cc:a1:7f:2a:57:c0:9f:2e:
         a1:7d:ab:8b:0d:bd:57:b8:46:27:02:7b:c3:99:c3:22:15:de:
         6b:14:b9:18:8f:14:6a:50:31:0b:ab:d3:e2:28:d9:7c:a6:e1:
         67:42:14:de:0d:e7:22:3d:c0:4e:68:28:b2:1e:da:f3:8a:00:
         04:26:8e:77:4b:cc:77:69:dd:c7:b9:18:a4:55:dd:f6:00:2a:
         bb:b8:75:af:9a:27:ab:9c:21:0a:57:2f:47:2c:a0:f1:e0:5c:
         11:bd:eb:2a:61:99:bd:aa:b2:91:6b:40:e2:f1:0b:11:85:0a:
         23:83:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----