Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.cer
File:                     503AEC31E5EEDC3FCEE756E9046076993A31D631.cer (raw, json)
Hash identifier:          U2yKDMaXGGOStZOe1dj16vuqs3UoxSLVgfBi6STed7I=
Subject key identifier:   50:3A:EC:31:E5:EE:DC:3F:CE:E7:56:E9:04:60:76:99:3A:31:D6:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B49C7380C0FA36A645CE2F1A697CFB5F5B767B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 05:44:28 +0000
Certificate not after:    Wed 22 May 2024 05:49:28 +0000
Subordinate resources:    AS: 270679
                          IP: 189.90.232.0/22
                          IP: 2804:6fb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:49:c7:38:0c:0f:a3:6a:64:5c:e2:f1:a6:97:cf:b5:f5:b7:67:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 05:44:28 2023 GMT
            Not After : May 22 05:49:28 2024 GMT
        Subject: CN=503AEC31E5EEDC3FCEE756E9046076993A31D631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:a9:47:f2:7a:1d:40:dd:94:0c:cd:ce:63:
                    d0:65:a3:1a:b5:be:6a:ff:48:68:4b:7b:f5:07:f5:
                    44:86:7f:b1:60:97:a0:1d:61:f0:d6:1b:17:09:6d:
                    67:17:d9:dc:27:6e:9e:7d:1b:4f:b5:04:0d:5b:15:
                    6a:43:78:b4:95:3a:b1:17:d6:e0:2f:81:0f:ce:d1:
                    9e:35:23:20:5b:e2:f4:6c:c7:9f:5a:eb:c7:b0:eb:
                    8e:ee:f2:5d:84:50:7c:61:f3:e0:ff:4e:53:cc:28:
                    7f:27:b1:9b:9d:97:88:a3:17:25:2c:71:f4:df:b5:
                    88:de:fa:6b:f1:46:5a:42:b3:76:7a:2a:73:cc:3d:
                    92:b8:0c:5d:f3:f2:6b:db:33:84:1c:59:0b:b5:c2:
                    aa:84:b3:8b:2e:1b:1e:49:56:3a:8b:8a:a8:14:eb:
                    01:59:f0:3f:8b:3b:a6:7f:f4:3c:63:39:46:b6:08:
                    69:56:c6:51:c2:15:1d:c5:6d:0a:d9:c7:2e:07:9f:
                    b2:47:80:e3:8b:e2:2b:b5:ae:58:10:1d:d8:32:3f:
                    4e:85:40:86:6c:c0:90:33:68:7e:fd:11:72:64:2c:
                    a7:02:14:a9:b2:1f:4c:6f:04:3e:76:14:a3:83:b8:
                    01:19:c1:92:77:d0:94:71:3a:03:43:38:69:49:0a:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:3A:EC:31:E5:EE:DC:3F:CE:E7:56:E9:04:60:76:99:3A:31:D6:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HUPrqf9ipQvx8mUvq16w155EDPHws9VypFbQV3g3bD7/0/503AEC31E5EEDC3FCEE756E9046076993A31D631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.232.0/22
                IPv6:
                  2804:6fb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270679

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:9b:53:e7:53:c7:3a:9b:b3:db:99:e0:37:9f:02:21:03:
         9b:d0:87:da:e2:93:98:bb:64:b8:9f:5d:9b:0d:56:76:b5:ad:
         4c:f1:42:b6:1e:7b:02:2c:68:9c:60:dd:08:5d:dc:6b:a2:a1:
         c4:96:cd:64:85:9a:a3:c4:73:07:94:4d:87:f3:ea:90:14:dc:
         1f:c9:84:92:bb:4f:b4:a8:f5:5b:2b:0a:bb:99:bf:f5:6b:0b:
         43:c7:71:9b:9f:bb:ed:bb:50:22:88:ba:9a:75:e1:99:d2:30:
         1c:4a:ce:69:fe:24:84:fc:d4:49:3f:d9:eb:ee:e3:62:d5:00:
         01:4e:14:25:91:4b:fb:52:e4:4e:28:d1:d7:37:10:bd:e3:68:
         69:47:8b:84:3c:47:ab:ee:31:5b:46:5f:72:77:97:cc:4e:6b:
         3c:a9:a5:19:27:2c:24:dc:1d:5c:49:30:37:7c:b1:13:42:a2:
         fd:d9:71:5b:59:d2:e5:10:83:4b:df:bb:71:25:6c:25:0a:e6:
         d5:69:89:64:ff:53:70:d6:75:94:d9:9a:5d:1b:96:cf:58:8d:
         3f:4d:7e:1b:b3:4e:7d:4c:83:8f:07:fe:99:ee:fc:aa:23:d2:
         c3:0e:e5:0c:d7:08:cf:13:3d:64:c1:3e:7f:f1:59:dc:c7:f1:
         53:2d:d3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----