Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer
File:                     318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.cer (raw, json)
Hash identifier:          Xzsd0jF6omdL3d81FxQpvwhbFhtoV4dX3ygeOkBXdek=
Subject key identifier:   31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       378F8E293E445EBB25935523E4AC8CCFED571956
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 07:47:49 +0000
Certificate not after:    Mon 24 Jun 2024 07:52:49 +0000
Subordinate resources:    AS: 263342
                          IP: 191.36.224.0/22
                          IP: 2804:14a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8f:8e:29:3e:44:5e:bb:25:93:55:23:e4:ac:8c:cf:ed:57:19:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 07:47:49 2023 GMT
            Not After : Jun 24 07:52:49 2024 GMT
        Subject: CN=318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:cf:03:86:d3:4c:75:3f:92:75:65:6d:0e:
                    e5:2a:d5:58:9d:24:ff:0b:9c:fb:bc:64:64:e8:fc:
                    57:97:52:1f:70:a7:2a:84:f2:a2:a5:78:d5:23:78:
                    d3:7d:00:5a:5d:b4:fe:73:88:17:f1:4a:18:cd:47:
                    90:98:b5:42:88:0a:9b:c3:5f:f8:d4:86:3d:4d:6a:
                    87:a4:ae:d9:fb:49:84:31:ff:d0:8b:7a:74:9e:13:
                    c7:45:a2:47:56:a4:d9:f8:e6:bc:9b:27:41:37:30:
                    53:76:9b:7e:62:cf:56:54:36:fd:d6:a1:a7:2f:8b:
                    8d:3e:f1:12:b0:3c:bb:4a:ed:0d:d8:c6:16:fb:48:
                    76:99:f0:12:00:8b:3b:a4:0c:fc:d9:2b:cd:bb:2f:
                    25:a6:0f:67:27:54:14:92:96:49:c7:26:75:79:45:
                    c3:96:23:7e:42:a8:ae:7b:97:12:d5:6c:6e:e2:f9:
                    94:f6:d3:9f:47:88:14:1b:dd:96:00:f5:37:9a:7c:
                    d0:ec:d6:34:aa:57:4f:e0:f5:45:08:72:56:e2:66:
                    2f:69:6c:57:75:38:76:a6:d4:a4:48:c2:49:03:2d:
                    c4:0f:6f:19:57:16:92:8e:37:64:43:ec:08:a8:05:
                    9c:ae:76:f6:4d:0c:2e:8e:8f:f2:16:a6:9f:b6:6d:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:8D:12:C0:C3:BC:AB:7F:A9:52:93:BD:6E:D3:A5:8C:BA:34:D6:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/0/318D12C0C3BCAB7FA95293BD6ED3A58CBA34D64A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.224.0/22
                IPv6:
                  2804:14a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263342

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:ac:42:9b:dd:35:c8:a3:4b:4b:dd:b5:0b:64:90:50:c9:
         ca:9b:8f:09:6b:9f:5e:b2:f6:2d:f7:da:14:5e:58:e0:de:32:
         fc:04:77:bf:9e:d9:f1:7c:bc:22:c5:cd:45:74:d0:3a:92:7c:
         9c:48:1f:74:c8:58:bf:56:21:3a:3d:90:c3:59:e1:28:5c:9b:
         4f:29:00:47:47:5d:ba:c9:6e:49:2c:ba:37:35:e2:76:f1:34:
         0d:42:01:5c:83:dc:31:c0:9e:f8:5b:6f:40:ba:7d:2c:05:8a:
         86:f6:17:cf:69:e6:61:a7:d1:65:04:68:7c:93:2f:01:6b:db:
         90:cd:b3:3d:68:67:77:ac:38:2c:02:2c:37:c0:eb:71:2b:a5:
         71:0f:a0:e5:18:97:95:5b:83:27:88:60:5d:b4:a0:cc:d1:bd:
         88:84:a0:53:1a:ec:c9:6c:f4:10:d2:3d:8f:59:90:16:01:d8:
         fb:13:d3:e1:85:73:db:22:92:4c:ea:17:c8:5c:83:a1:37:0e:
         6e:8f:8b:5d:4f:72:98:56:4c:79:89:41:11:c3:8e:80:31:30:
         f6:33:c5:ec:80:4b:82:81:c1:c8:ba:75:51:6d:f6:60:01:5f:
         93:c9:f3:bc:ef:57:9b:bd:ec:5c:7f:f6:83:d7:de:56:99:ed:
         d4:8c:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----