Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5613190A3860B3A245555894BD03A4B14C135BD4.cer
File:                     5613190A3860B3A245555894BD03A4B14C135BD4.cer (raw, json)
Hash identifier:          viTfhfruuvflvh5Ek5vCG3xsLbbLUfcPwj2c1GG6FYo=
Subject key identifier:   56:13:19:0A:38:60:B3:A2:45:55:58:94:BD:03:A4:B1:4C:13:5B:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F1F1E646EF7AB908DDEDA864F9A5DB2A5F419C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/5613190A3860B3A245555894BD03A4B14C135BD4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:42 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:42 +0000
Subordinate resources:    AS: 272169
                          IP: 2804:82fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1f:1e:64:6e:f7:ab:90:8d:de:da:86:4f:9a:5d:b2:a5:f4:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:42 2023 GMT
            Not After : Nov  5 03:58:42 2024 GMT
        Subject: CN=5613190A3860B3A245555894BD03A4B14C135BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:a4:ad:f8:b8:6f:6b:b3:fc:41:37:b1:65:
                    5a:86:60:70:c0:dd:cb:a2:08:dd:3d:a9:eb:f8:2f:
                    ef:20:80:51:0c:42:69:6c:84:c2:86:26:85:0f:71:
                    4c:8b:a5:79:dc:cd:2f:ce:5c:d8:dc:7c:a0:22:82:
                    09:07:fc:80:61:83:ed:94:ef:52:9c:49:c6:f8:61:
                    84:d0:83:dd:94:84:e1:4e:83:e1:0d:5e:4e:06:79:
                    8a:c4:73:c9:40:dd:ed:bf:f1:50:a1:a8:38:13:38:
                    94:9e:e1:5e:6f:4c:4e:11:34:86:41:06:5f:20:0f:
                    20:75:c9:10:ad:6e:72:77:9c:c5:77:ea:7c:50:d0:
                    ea:57:71:b6:38:8b:ae:4e:18:0b:36:da:3e:51:eb:
                    1a:e5:53:9d:48:be:27:bb:b3:88:c5:4a:41:7c:c7:
                    83:06:a7:b8:89:9b:f4:f9:5a:a4:12:db:1c:03:fd:
                    08:5c:c7:f2:e0:ad:5d:bc:16:16:49:79:cf:6b:4d:
                    36:49:3b:2b:c3:5d:a9:61:d4:55:45:28:a3:5c:cb:
                    8f:da:c8:40:20:e5:8c:85:77:a7:09:4e:91:5f:90:
                    b8:fa:07:d7:7d:a9:3a:23:03:6b:e1:f0:b0:19:cc:
                    29:ad:e9:e0:50:40:2e:dd:10:05:b3:1e:93:09:fe:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:13:19:0A:38:60:B3:A2:45:55:58:94:BD:03:A4:B1:4C:13:5B:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/5613190A3860B3A245555894BD03A4B14C135BD4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272169

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:f9:2b:c4:b9:d8:74:62:65:c2:2e:3a:95:1e:80:b6:80:
         7c:e9:3a:fa:7c:6c:b4:52:57:a7:86:cb:c5:7b:b5:4f:2d:ee:
         1c:fc:b1:dc:56:4d:ee:37:e8:99:45:3a:66:17:e7:89:1d:22:
         d3:50:18:aa:83:6b:3d:96:fc:51:51:93:e0:6a:fb:11:5e:9d:
         79:b4:e4:6c:d9:b9:77:2d:e7:0d:e8:4c:8e:b4:b8:c0:35:76:
         cf:a2:58:b1:22:0b:f9:8f:39:82:ab:0b:a9:a7:92:42:cf:58:
         9c:38:4d:e8:69:39:0f:07:2a:3b:f2:84:8d:73:01:e7:51:8c:
         8f:ce:cc:da:25:5e:55:33:21:04:44:37:43:ac:e9:a8:57:05:
         22:2d:74:b8:96:b8:f7:95:07:8b:88:72:0f:b8:86:7c:cd:77:
         07:2d:7f:81:49:79:5c:1d:8c:5d:7c:08:ee:1c:40:ff:96:a2:
         15:cc:fc:ed:fa:f3:10:28:b9:52:f7:a0:4d:cd:d5:ed:26:bc:
         70:e4:c8:78:58:95:fe:36:aa:b9:b3:3b:74:54:89:cc:03:f4:
         c5:70:86:02:62:39:2b:a4:47:86:9c:c2:a0:fb:b7:1d:e2:d3:
         fd:1b:bb:55:3c:cf:68:84:6e:1a:63:69:80:e4:66:30:18:cf:
         f2:0d:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----