Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2EDDA86030532DE49CB7043239B46E667884503B.cer
File:                     2EDDA86030532DE49CB7043239B46E667884503B.cer (raw, json)
Hash identifier:          2stVIZvOTa6lOB0kB5lHQJpeDM715IEf9SzpCh6KFmw=
Subject key identifier:   2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6806D9202D21616D912C3C42261EC8A4ADB0CB54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/2EDDA86030532DE49CB7043239B46E667884503B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 18:06:17 +0000
Certificate not after:    Thu 15 Aug 2024 18:11:17 +0000
Subordinate resources:    AS: 52551
                          IP: 177.130.112.0/20
                          IP: 2804:cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:06:d9:20:2d:21:61:6d:91:2c:3c:42:26:1e:c8:a4:ad:b0:cb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 18:06:17 2023 GMT
            Not After : Aug 15 18:11:17 2024 GMT
        Subject: CN=2EDDA86030532DE49CB7043239B46E667884503B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:17:93:a2:72:96:58:41:32:bf:c6:a1:4e:
                    c5:bd:bd:32:ce:a8:1e:61:f0:7e:de:fc:bb:0d:78:
                    3c:10:ce:5b:e4:a0:52:eb:34:ac:ce:25:b7:34:db:
                    2e:e3:2e:44:83:f6:e3:c8:a5:0a:89:b0:b0:6e:90:
                    ba:04:e5:78:5f:b1:a0:18:2a:c3:a0:f9:80:be:e3:
                    e5:02:e8:7f:4a:66:4b:d0:e8:68:84:e2:e6:67:50:
                    95:13:bb:fa:fb:1d:33:59:be:c5:1b:b1:1a:6e:ae:
                    10:12:dc:8e:4f:6f:bc:74:f3:07:0b:73:3b:3e:b5:
                    b4:5f:4e:d2:c0:43:4a:c7:89:86:f4:c8:02:42:ec:
                    1e:a3:63:18:03:42:aa:46:67:69:39:8d:89:4f:e2:
                    53:7b:ee:7a:a6:21:40:fe:d8:53:3a:6c:03:12:21:
                    37:37:20:59:d9:47:92:66:d3:28:cf:fe:22:30:14:
                    f6:f1:90:57:db:69:49:c0:4a:11:a8:57:e7:94:2e:
                    71:12:67:a5:9c:8f:23:a6:25:76:51:e7:bf:77:bd:
                    c9:12:54:60:89:58:9b:66:2b:c1:df:3f:35:82:d5:
                    12:8b:63:e3:d0:b4:72:f5:5b:99:11:92:e1:09:6d:
                    fd:ba:16:a2:ad:7e:1f:a1:c6:82:d7:e2:e4:20:3b:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:DD:A8:60:30:53:2D:E4:9C:B7:04:32:39:B4:6E:66:78:84:50:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/1/2EDDA86030532DE49CB7043239B46E667884503B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.112.0/20
                IPv6:
                  2804:cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52551

    Signature Algorithm: sha256WithRSAEncryption
         24:98:df:7d:89:cf:cc:96:3d:95:3d:a4:27:be:c4:a0:4c:79:
         66:b6:c4:5e:e7:ee:29:0d:66:1f:c7:25:ee:58:57:2c:ec:b9:
         00:e8:3e:00:d6:cc:a8:18:a8:20:57:34:26:14:0b:d9:fa:fb:
         1e:2d:37:01:77:b0:43:97:b3:d2:06:d7:32:1b:05:65:21:6e:
         79:f0:37:ea:98:8a:f2:70:db:e5:0b:30:9b:c4:e5:45:9e:ad:
         6c:69:54:78:11:0d:78:d4:ba:75:8b:b2:9b:36:31:a1:fe:dd:
         c2:56:43:81:32:ba:0c:f9:bc:1f:8b:23:9d:72:39:fc:92:68:
         c6:ea:6e:ea:93:e4:68:2d:f0:d5:c7:2e:9a:7a:7a:a9:de:55:
         26:21:35:b2:43:3c:cc:b3:67:09:65:62:91:76:76:90:01:96:
         fc:12:d5:a1:8e:4b:dd:61:05:c7:75:1a:42:16:f7:78:5b:5f:
         a0:69:4a:45:4f:41:a1:5f:77:6c:92:eb:0d:f2:f9:1e:3c:86:
         14:a8:cf:3c:e5:11:a8:73:06:fc:ac:19:8e:d9:4b:c2:d6:57:
         f9:64:24:a1:13:aa:ba:c5:04:21:eb:0b:d8:d9:75:21:9f:64:
         00:72:fc:1c:f2:f1:d6:ea:26:71:cb:af:46:a7:d4:8c:59:1d:
         98:4b:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----