Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/332E0DA86130575BFAD949B0B294C77899BFD68B.cer
File:                     332E0DA86130575BFAD949B0B294C77899BFD68B.cer (raw, json)
Hash identifier:          wSqqFbgonaEZh4cJWPixiak8V5pkJ+N6SQQ7cCfBsAA=
Subject key identifier:   33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1396CDEF792DE03DC6943506C89C29FEA9AA7688
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/332E0DA86130575BFAD949B0B294C77899BFD68B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 19:56:33 +0000
Certificate not after:    Wed 20 Nov 2024 20:01:33 +0000
Subordinate resources:    AS: 264470
                          IP: 131.255.80.0/22
                          IP: 2804:2020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:cd:ef:79:2d:e0:3d:c6:94:35:06:c8:9c:29:fe:a9:aa:76:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 19:56:33 2023 GMT
            Not After : Nov 20 20:01:33 2024 GMT
        Subject: CN=332E0DA86130575BFAD949B0B294C77899BFD68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:24:02:c5:29:8d:9c:5d:ab:5c:6f:0b:a3:
                    06:5b:64:ec:ec:19:c4:c5:c7:b8:dc:6e:c5:43:fe:
                    16:04:5d:b6:50:5d:d9:70:97:6d:06:ba:31:c2:32:
                    a5:96:8e:a1:db:54:9e:0e:df:bb:e5:72:5a:7a:39:
                    4e:cc:51:ef:96:a2:54:aa:eb:7e:3b:3b:d3:40:3d:
                    a7:f8:a6:0c:b8:69:7e:d9:cf:57:16:fc:e8:a1:84:
                    8d:20:34:4f:dc:61:1f:f1:21:2c:c5:80:7d:c0:6b:
                    1a:c6:87:22:fd:0a:3d:26:a5:c9:5f:4d:7e:d3:27:
                    8c:e9:b6:9f:b6:b4:8a:84:93:10:14:2c:51:0f:3f:
                    dd:1e:b1:15:0d:52:08:2c:58:29:cc:35:d8:16:4b:
                    88:25:cb:97:ee:04:55:ca:bf:41:58:f5:df:24:85:
                    56:d2:b7:84:78:e7:2b:73:74:a0:c3:e0:3e:4d:e9:
                    ad:9c:1c:66:e4:de:12:56:c3:c5:c8:da:07:66:d2:
                    09:00:22:b3:37:e1:8d:91:f3:a9:a7:2f:68:9f:2e:
                    b9:39:5e:b5:17:0e:18:6a:6f:1d:fb:a5:6f:a1:a8:
                    29:75:a1:21:9b:82:87:a3:41:77:12:ba:dd:8a:3b:
                    a0:33:f3:84:44:c9:cc:bc:9a:1e:85:51:e3:f5:59:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:2E:0D:A8:61:30:57:5B:FA:D9:49:B0:B2:94:C7:78:99:BF:D6:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/0/332E0DA86130575BFAD949B0B294C77899BFD68B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.80.0/22
                IPv6:
                  2804:2020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264470

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:28:a1:7a:ef:55:d0:73:29:bf:03:6f:c9:b6:a8:5a:fe:
         2b:0e:62:bc:07:a5:1c:ac:f8:03:98:5d:6e:95:3e:0b:41:e8:
         15:6c:11:63:d2:87:a5:93:8a:f9:05:cc:0d:07:1d:74:6b:7f:
         4f:2f:b4:c2:53:f1:8d:4a:64:88:47:02:ad:6b:b1:82:0e:3a:
         84:8e:df:b4:74:15:82:6f:99:06:2c:1c:61:0e:d2:2b:a9:26:
         87:2a:d0:17:ad:ba:df:8d:57:e6:bc:60:a7:02:d2:16:3f:58:
         a1:28:ea:f7:65:62:91:8b:02:72:2d:89:42:36:6e:dc:bd:f2:
         2e:28:a7:5a:56:d2:d2:0d:37:07:5a:b7:05:43:70:30:d9:24:
         af:61:a3:e5:70:45:1c:cd:49:70:ff:8d:57:6c:9a:9a:14:b0:
         3c:30:97:b5:33:5e:e3:52:68:fc:9b:cd:f6:ac:fc:fd:cb:ef:
         56:64:b1:2e:46:96:3c:47:36:bf:87:79:01:9e:f5:c7:f2:f7:
         f1:f3:5b:03:7f:e0:31:f4:1c:0b:72:a1:c0:7d:8a:c8:35:23:
         2e:98:6a:16:84:4e:c0:db:07:08:e9:78:42:40:7e:71:dd:10:
         3c:21:31:84:f1:2f:0a:92:d8:2f:4f:83:4c:79:d1:5e:08:d5:
         7a:a0:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----