Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer
File:                     2FBE13F1826AF12492EA0793337A3CD8B27334F8.cer (raw, json)
Hash identifier:          L7OlSBZGOlTSWywGYWlYwdTmvfiMSpRAJQI5aTP+lck=
Subject key identifier:   2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6467F4DD733118A910E8A7D8E8D7C749EF309AC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 11:50:14 +0000
Certificate not after:    Thu 30 May 2024 11:55:14 +0000
Subordinate resources:    AS: 61767
                          IP: 200.77.180.0/22
                          IP: 2804:18fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:67:f4:dd:73:31:18:a9:10:e8:a7:d8:e8:d7:c7:49:ef:30:9a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 11:50:14 2023 GMT
            Not After : May 30 11:55:14 2024 GMT
        Subject: CN=2FBE13F1826AF12492EA0793337A3CD8B27334F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:0b:b0:2f:e8:c0:60:cc:03:26:e0:de:fb:
                    2a:42:a2:80:cf:b6:ad:e5:b8:50:8a:c3:04:31:66:
                    67:7f:89:a1:56:a6:82:34:07:37:df:f3:7d:df:40:
                    ce:ed:57:ce:1a:02:fe:a4:e0:f1:9f:8f:e5:e1:57:
                    f6:4d:fb:c4:e3:e7:a1:60:11:d7:2c:d6:35:86:d5:
                    f6:5f:30:0c:57:35:56:7a:a8:e4:02:d1:34:61:8f:
                    7a:0e:9f:fb:47:87:ab:b2:8a:74:a4:ca:15:15:82:
                    3f:f1:29:f0:1b:48:bb:92:f4:9d:ce:c5:ce:6f:9d:
                    61:70:4b:88:47:8a:a0:95:c8:26:88:c2:65:11:0f:
                    11:92:ef:0a:75:3f:f3:30:f7:e9:25:f6:8d:fc:2f:
                    88:b9:22:b1:c8:73:3b:8a:3f:b0:76:52:e4:d9:aa:
                    be:63:44:ba:e4:72:cd:06:50:ce:41:30:51:1b:93:
                    37:a2:d3:d3:5a:ac:06:05:3b:80:81:a9:55:37:1b:
                    bc:ff:75:2d:d6:35:5b:31:42:87:15:9e:bb:ee:09:
                    2a:72:24:60:44:3c:1b:85:40:79:a2:e5:e7:7c:8d:
                    76:df:89:0d:e5:97:be:12:8d:d9:71:ca:65:7e:56:
                    54:0e:92:7d:0b:0f:77:97:cf:83:c0:8d:22:fc:43:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:BE:13:F1:82:6A:F1:24:92:EA:07:93:33:7A:3C:D8:B2:73:34:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/2FBE13F1826AF12492EA0793337A3CD8B27334F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.180.0/22
                IPv6:
                  2804:18fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61767

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:2f:34:fd:3a:0d:96:86:9b:72:ef:83:f6:e1:9b:c0:1e:
         18:f2:37:d1:5a:d7:d4:8f:ac:09:2d:1e:32:e8:1c:4b:dc:6a:
         d4:64:02:8a:85:d9:91:cd:b2:63:61:6d:2b:53:2a:6f:b6:b5:
         f9:ec:1f:2b:c0:0f:dd:a3:24:01:68:91:bf:db:5d:ce:dd:4b:
         5a:a8:af:50:09:af:42:f1:b1:91:10:34:8a:06:0b:3a:ad:77:
         a2:ef:0a:ae:9e:a3:c4:f9:4f:04:d7:d1:6a:b0:fc:b8:b9:e8:
         56:5d:d8:88:1a:c2:de:b9:b9:d2:65:04:6c:e7:c8:12:57:b5:
         b7:6b:b5:29:4a:a7:a4:8c:72:4d:e9:7e:d7:08:04:34:58:b1:
         a9:96:69:23:27:5a:4b:3c:47:a4:0f:71:9f:5f:be:8c:94:49:
         6c:21:b5:b6:63:54:64:78:87:b4:d7:51:5e:6b:51:21:b0:7b:
         84:1f:bf:89:0e:a9:42:92:09:4e:5d:36:02:61:5c:67:45:7f:
         79:6f:a7:fe:61:ec:09:90:df:ae:b3:96:cd:66:9f:8e:87:b2:
         cd:1f:fb:24:bf:e6:59:25:3f:d6:cd:3f:67:d4:cb:c7:2b:99:
         ef:6d:0b:31:87:f5:7c:a0:0f:00:b4:0c:eb:4c:d1:ce:86:8d:
         f7:a0:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----