Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer
File:                     2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.cer (raw, json)
Hash identifier:          Ub/fed3A22k07gLwwA8wl1jUZvlDUN5mrzg9t0kcX/M=
Subject key identifier:   2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EE48F285DA1B3DDBD1A22EA15F48CD0C4C22AD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:25 +0000
Certificate not after:    Tue 21 May 2024 09:25:25 +0000
Subordinate resources:    AS: 266297
                          IP: 170.79.204.0/22
                          IP: 2804:35a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:8f:28:5d:a1:b3:dd:bd:1a:22:ea:15:f4:8c:d0:c4:c2:2a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:25 2023 GMT
            Not After : May 21 09:25:25 2024 GMT
        Subject: CN=2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:7d:ae:0e:c3:b1:31:29:cc:55:ad:52:20:
                    94:c0:9d:0b:a2:1b:8e:e7:d4:cc:62:1d:8e:72:43:
                    4f:f0:c1:e4:69:3b:f7:0e:35:7a:18:d6:ef:cc:6c:
                    e2:5c:7b:fc:c1:39:09:22:fb:cb:e6:bd:93:97:35:
                    5a:f9:52:ff:09:9e:82:90:66:dd:49:9e:3e:44:39:
                    cf:48:74:72:3b:f4:fa:09:6b:cc:de:db:44:28:2c:
                    5a:a2:3b:1c:d1:71:1b:f4:11:7f:70:96:18:a3:e0:
                    49:09:67:fb:de:64:fc:8d:5f:66:21:71:e0:4b:16:
                    24:1c:ca:86:ef:90:27:59:05:bc:17:ba:16:05:87:
                    35:78:4a:fb:f3:f8:0d:0e:15:56:32:8b:98:a2:6f:
                    56:08:25:24:ad:0a:9d:e4:13:25:0e:4d:01:a6:08:
                    94:41:11:53:e8:ba:ad:6b:01:97:2b:ca:c9:ae:8d:
                    2a:32:30:67:34:e8:cf:11:56:48:74:8a:1e:28:b6:
                    37:09:13:23:01:50:de:e7:78:98:d6:fb:41:98:c1:
                    35:bc:2b:fb:7d:8c:3c:2c:ad:62:ba:d5:ff:dc:3e:
                    f2:68:60:d6:50:0c:f5:32:cb:44:9c:f1:05:5a:e7:
                    44:cd:2a:ee:74:1e:f4:87:37:81:45:96:06:1b:2f:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:D5:F5:DB:33:76:C3:32:0E:EF:AA:FF:EF:3A:34:EE:F3:F1:E9:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XPT6igjoPuFGSck2ac3EB4wwnjA8UqHZiTTvDF4EmiY/0/2BD5F5DB3376C3320EEFAAFFEF3A34EEF3F1E933.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.204.0/22
                IPv6:
                  2804:35a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266297

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:a1:e5:a6:4e:00:b2:ce:78:95:f2:e9:f2:b2:c3:21:fd:
         6f:1c:4e:6d:9a:b2:23:d9:5c:ce:1b:c0:09:93:6f:cd:3e:58:
         3e:a0:2e:ae:6a:1c:07:d7:a4:71:71:37:a3:6c:b8:ed:a7:93:
         0c:27:b5:3f:c2:ef:8e:f3:b8:55:81:64:9f:fa:31:ff:b1:14:
         95:a3:b3:16:44:d3:8c:d1:99:b4:68:2a:fe:87:7a:c3:72:ea:
         60:3f:6a:ae:e9:39:15:d6:00:9a:3c:bc:42:f6:2b:6f:ec:77:
         c4:14:ab:e6:3f:45:75:d5:5a:a7:11:18:31:01:18:5a:19:04:
         02:f3:5d:36:97:b4:93:10:0f:18:b0:b2:cc:bd:fb:6a:7c:5f:
         38:71:d7:9b:db:1b:1d:58:86:1c:27:78:26:a1:47:d8:6c:d1:
         6f:c6:e5:57:c5:3a:8a:3d:4e:49:89:25:4f:5e:b2:8c:10:d3:
         2f:79:c8:64:d4:c1:ef:8c:dc:1d:da:33:32:f7:c6:15:fc:bc:
         2c:7e:b0:40:6e:47:f7:ea:d0:c2:4d:e5:ed:2e:24:e9:e8:72:
         93:11:4a:b3:70:6a:8f:04:53:9b:03:95:dd:22:7d:f5:f2:2a:
         33:ae:84:66:63:49:04:2f:98:20:07:ec:8c:04:4e:52:f9:d8:
         7e:92:b3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----