Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/576C961E91896542374E0460E6B17BE21591E93E.cer
File:                     576C961E91896542374E0460E6B17BE21591E93E.cer (raw, json)
Hash identifier:          pqKdIjBvv/Ghncvx0zbP9INy5Wzjywv/sBKg2Up6O9M=
Subject key identifier:   57:6C:96:1E:91:89:65:42:37:4E:04:60:E6:B1:7B:E2:15:91:E9:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38A35F9C8C721FFF73B77F3AFAB993C2155E05F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/0/576C961E91896542374E0460E6B17BE21591E93E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 15:31:56 +0000
Certificate not after:    Wed 24 Jul 2024 15:36:56 +0000
Subordinate resources:    AS: 263153
                          IP: 177.93.152.0/21
                          IP: 2804:1788::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:5f:9c:8c:72:1f:ff:73:b7:7f:3a:fa:b9:93:c2:15:5e:05:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 15:31:56 2023 GMT
            Not After : Jul 24 15:36:56 2024 GMT
        Subject: CN=576C961E91896542374E0460E6B17BE21591E93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:6e:5e:51:2e:f3:f4:de:a0:11:64:da:38:
                    ea:52:b9:ef:6d:32:c2:51:f9:1b:56:77:3c:80:9a:
                    36:c4:0b:69:18:5c:a4:76:95:69:58:b1:c5:c1:4c:
                    8c:27:68:96:81:f9:b2:84:11:77:c4:de:59:5d:ae:
                    c9:2d:78:1c:9a:22:53:9c:27:f8:13:54:c0:91:64:
                    49:45:2c:e0:76:79:3d:0b:6d:fa:98:39:4d:09:65:
                    13:e8:18:32:37:b0:e0:10:b8:33:23:fe:bc:a2:86:
                    df:a3:5b:e1:b7:df:50:4c:0b:44:2b:71:48:47:d5:
                    d9:a0:ff:86:dd:27:42:13:40:d5:26:69:bc:27:21:
                    be:1b:f4:e9:df:cd:df:b3:c4:7f:83:f5:f3:54:ec:
                    75:1b:92:d4:9d:c8:d6:a3:bf:de:0d:03:b6:e5:18:
                    72:49:4a:c3:67:3a:40:54:a4:d7:33:6b:5a:97:c5:
                    1b:05:60:00:6c:75:4d:98:f4:73:4d:42:57:86:3c:
                    4b:00:fa:e4:0b:98:14:e8:97:1f:b2:48:b9:30:66:
                    cf:89:27:6d:77:fb:82:92:f1:09:e5:8c:ac:d5:19:
                    83:42:1d:1d:a6:6f:f2:5f:12:bf:41:1e:13:1f:cc:
                    c4:b4:29:07:ec:2c:ee:c4:b5:4a:0b:46:df:bf:3b:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:6C:96:1E:91:89:65:42:37:4E:04:60:E6:B1:7B:E2:15:91:E9:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GkFnSL731ymwoC9MnpidN5vtheaxNhRxD5Ko6diQQdK8/0/576C961E91896542374E0460E6B17BE21591E93E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.152.0/21
                IPv6:
                  2804:1788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263153

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:49:96:a1:67:10:a5:b4:66:51:9a:be:7a:ae:af:dc:9a:
         20:48:4f:76:37:7c:cf:25:21:fe:04:c4:80:67:8d:c5:f5:a7:
         94:1b:eb:93:3d:7a:f2:ca:09:20:72:bb:92:d8:05:7a:97:a6:
         e1:61:c5:3f:a6:7e:52:43:73:f4:bd:cb:0d:01:02:55:c2:10:
         8c:4d:83:73:c7:be:d0:f1:20:28:da:e6:37:49:21:fc:3c:af:
         d8:a3:d6:bb:0d:f9:e0:49:97:fc:44:fc:bd:91:05:b5:9d:7f:
         70:29:9a:01:0e:ea:c4:3e:f0:61:63:d2:87:9d:a1:7e:23:3d:
         c6:06:09:c7:be:d0:82:2a:5c:2c:03:7f:49:71:d1:16:22:76:
         a5:3d:14:43:05:3f:cb:b9:b0:f5:70:bb:f1:1b:cd:2b:91:9e:
         77:6c:a0:70:86:f1:b2:fb:61:31:7e:dd:7a:64:45:3b:09:4e:
         e7:93:f2:fa:72:e5:d8:80:4c:75:72:5d:c0:5a:23:66:26:35:
         ce:75:f8:56:a3:d6:9e:33:a7:18:6f:80:2c:03:68:f5:9c:2a:
         b5:31:96:b2:32:05:eb:c9:4f:fa:1e:79:9d:fa:58:ad:8c:b6:
         7b:eb:84:b8:cc:1f:e2:04:86:2b:99:ab:9a:38:c4:da:20:ea:
         5a:b8:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----