Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D1D7338FFCF6B2D164877A21E58325A05D678D9.cer
File:                     2D1D7338FFCF6B2D164877A21E58325A05D678D9.cer (raw, json)
Hash identifier:          m4QvkbN+mIzyYfUzXYaZm1Ay3W/kWVpXq4F5Q+p7iWg=
Subject key identifier:   2D:1D:73:38:FF:CF:6B:2D:16:48:77:A2:1E:58:32:5A:05:D6:78:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       579EA168C1B73A86E01171FB64A0D455E13DAE8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/2D1D7338FFCF6B2D164877A21E58325A05D678D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 23:02:08 +0000
Certificate not after:    Wed 20 Nov 2024 23:07:08 +0000
Subordinate resources:    AS: 263537
                          IP: 191.5.112.0/20
                          IP: 2804:1384::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9e:a1:68:c1:b7:3a:86:e0:11:71:fb:64:a0:d4:55:e1:3d:ae:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 23:02:08 2023 GMT
            Not After : Nov 20 23:07:08 2024 GMT
        Subject: CN=2D1D7338FFCF6B2D164877A21E58325A05D678D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:c1:95:68:f5:f4:d0:ea:45:c5:80:88:26:
                    91:4d:3a:e5:ea:18:c4:e9:d2:94:68:ec:18:4c:84:
                    56:55:e2:52:81:3e:ee:ec:99:d2:b7:c0:3b:b5:ff:
                    e7:53:d1:4a:e1:b9:23:40:32:27:09:eb:32:1a:43:
                    4b:77:64:73:c9:c5:be:2a:1a:cb:1a:ac:09:ae:8e:
                    75:4a:94:ca:41:b6:f6:b1:da:21:86:43:03:06:da:
                    23:24:66:53:0b:cf:5a:e1:45:4f:fc:75:ca:a2:2f:
                    4a:bb:73:f9:87:de:4c:3a:83:8d:88:57:a1:3e:5f:
                    8e:14:d6:8c:ff:fe:23:81:93:df:cd:c0:fb:36:58:
                    2c:e7:25:21:70:4c:e2:d5:2c:d4:b2:1f:2f:b5:ff:
                    91:f3:d3:4f:a8:72:50:0a:0b:82:f6:b0:ee:c0:21:
                    24:0c:28:4f:00:ba:92:d6:b6:69:fe:c4:34:f8:11:
                    dd:ec:df:45:6a:01:90:49:0d:e6:01:a3:36:be:ad:
                    8f:08:59:5b:42:e9:83:97:3c:66:08:d9:f0:e7:67:
                    87:c4:4e:40:28:ee:c7:e5:c7:bd:61:f6:cb:66:b4:
                    f2:d6:b2:37:db:c5:14:2e:93:b0:1f:ff:63:07:06:
                    1e:62:86:2e:87:1a:e4:2b:ed:be:3c:71:8d:80:b7:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:1D:73:38:FF:CF:6B:2D:16:48:77:A2:1E:58:32:5A:05:D6:78:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EguBMCoVP2Eoruwsmdu8fPGcRBTqYDutj2rFLMCAx8AQ/0/2D1D7338FFCF6B2D164877A21E58325A05D678D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.112.0/20
                IPv6:
                  2804:1384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263537

    Signature Algorithm: sha256WithRSAEncryption
         87:23:20:42:1e:e7:6c:50:17:e4:99:29:f8:fb:85:2a:3e:21:
         3c:4a:b3:49:ba:d9:ec:a6:77:3f:37:e9:93:1d:38:13:b7:fb:
         ae:4d:dd:c1:5d:b9:77:9b:35:6e:4e:d7:cd:50:98:3f:28:da:
         e8:b2:aa:7b:7e:2b:ca:e1:97:b8:6d:c2:72:81:7d:e4:48:1b:
         b9:86:fd:66:5a:0c:cc:83:68:e0:c6:07:aa:84:94:20:75:bf:
         bf:65:56:64:09:3a:40:4d:a1:b4:83:16:6d:21:bc:cd:2c:e7:
         e8:8e:e2:a8:65:c0:ea:f8:b3:19:8b:5b:fa:65:18:1d:03:71:
         0d:95:75:ce:14:0f:f2:57:5a:72:97:83:f1:a0:09:d6:d3:fb:
         5c:b6:a8:4e:e1:c9:42:c2:96:b8:7b:21:ec:c8:24:62:75:a3:
         73:f5:e5:b2:f7:80:9d:85:94:b1:2b:1d:7c:4d:59:6f:41:db:
         5a:ee:ec:2b:3b:42:af:e2:8f:45:3b:18:1b:70:54:49:0e:40:
         10:1a:09:4c:eb:26:20:03:15:98:90:b0:62:58:ad:2f:b1:a2:
         d9:79:df:7a:a0:d7:17:0d:f1:cc:2d:bf:ef:98:f0:8b:f1:cd:
         c3:78:28:89:8e:da:96:72:00:29:e8:75:97:ea:d6:3d:cb:8a:
         34:da:e5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----