Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer
File:                     33043F790D6A918A5EB28C4B3D04D8805609D0B7.cer (raw, json)
Hash identifier:          xHeYwAPUyOEJVCw8uT5XuOO8TZetdrzcAKXXtHAkBEM=
Subject key identifier:   33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79F9FDFEA074FB7AB993C05D29607E01D858DFD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Jun 2023 22:20:30 +0000
Certificate not after:    Sat 08 Jun 2024 22:25:30 +0000
Subordinate resources:    AS: 271134
                          IP: 167.249.88.0/22
                          IP: 2804:76c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f9:fd:fe:a0:74:fb:7a:b9:93:c0:5d:29:60:7e:01:d8:58:df:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 10 22:20:30 2023 GMT
            Not After : Jun  8 22:25:30 2024 GMT
        Subject: CN=33043F790D6A918A5EB28C4B3D04D8805609D0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:b2:36:b8:11:df:3e:e7:37:68:46:88:ce:
                    5b:6d:8f:d4:bf:dd:4d:86:ab:14:96:6b:de:17:b9:
                    9b:42:4c:77:8a:10:40:24:38:46:bc:4a:16:4e:88:
                    18:fb:d0:48:65:ec:6a:7f:51:3b:3e:48:7e:e1:9f:
                    19:c7:d8:36:1f:b6:f1:a0:34:14:7b:32:e7:ec:95:
                    d7:97:65:32:c0:6f:3c:36:4e:72:39:d2:fb:50:a1:
                    2a:64:7a:2b:86:a6:be:32:1a:4c:03:f0:ed:67:df:
                    4f:d3:ba:fb:f2:77:52:c2:54:61:c9:d0:23:c0:2f:
                    2e:5d:f3:53:55:27:0d:47:39:3b:63:21:3c:a7:a0:
                    de:ef:0c:c1:ea:80:c7:75:35:76:c3:a0:9c:ec:4e:
                    6c:ba:fc:51:61:b7:30:ca:e0:37:15:48:48:5f:e0:
                    e4:b2:27:4f:8f:19:99:02:1b:5a:91:be:3e:44:ef:
                    80:59:23:e7:e5:3a:43:a5:80:50:e8:c0:4b:5d:dc:
                    75:e9:9e:9f:34:22:b8:4d:26:eb:6c:b2:ef:d4:3b:
                    ee:3b:fa:d7:04:c4:4d:eb:a9:7f:df:c2:b9:1e:50:
                    7d:4e:f3:12:e0:34:05:6b:38:ba:36:70:7e:a5:a6:
                    6b:35:1d:1a:c7:8a:b6:06:9a:50:aa:1c:bb:eb:f7:
                    2a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:04:3F:79:0D:6A:91:8A:5E:B2:8C:4B:3D:04:D8:80:56:09:D0:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/33043F790D6A918A5EB28C4B3D04D8805609D0B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/22
                IPv6:
                  2804:76c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271134

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:59:1d:48:a5:20:56:86:84:00:bf:c5:8a:74:0a:5d:90:
         6c:7f:5c:b6:7f:5e:3c:d7:f1:34:f6:aa:50:f7:57:5f:b0:d6:
         b1:71:c4:cb:cc:93:34:87:de:ea:7b:f1:1f:8a:c3:5a:ba:ea:
         f5:95:dd:79:20:c0:27:e8:09:f9:eb:11:f9:31:c0:86:98:33:
         e6:1e:1a:f2:e1:77:74:03:61:1a:20:ff:b0:70:cb:e8:27:70:
         55:b8:df:cd:40:bc:62:43:76:a8:39:4b:98:7e:c7:aa:aa:30:
         86:8d:0a:a8:ce:6c:4f:19:0b:99:15:47:4e:8a:69:32:1a:a6:
         28:57:40:8e:40:58:81:9e:a4:05:48:41:cf:20:45:45:34:53:
         03:c5:c4:1d:95:ed:e1:c6:2f:1e:86:a1:a5:07:83:ee:76:80:
         a5:ff:00:3e:d2:fe:e6:6d:c2:36:17:3e:3b:11:1f:f2:4d:59:
         04:20:2e:75:8a:00:e9:81:66:42:55:15:0c:11:56:19:1d:d1:
         7c:91:4a:5d:ba:f2:92:f1:18:3e:51:4c:c3:c9:ac:73:65:d4:
         3a:9c:d7:b6:96:c0:80:8c:ff:35:e7:d8:2f:99:5d:5a:21:f5:
         59:6e:b1:af:4e:4e:2c:c9:22:32:21:c7:df:74:fe:8b:43:97:
         9b:be:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----