Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer
File:                     5CFD4BD8357F505D6CB1A47E9C153D57129592B6.cer (raw, json)
Hash identifier:          u3uZofEuHVzuOaT8LPHLewXs47kmPNq5hnFsjfmRid4=
Subject key identifier:   5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EF487CBE49EF47CEB09325D8F04968313628A85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 05 Aug 2023 20:56:00 +0000
Certificate not after:    Sat 03 Aug 2024 21:01:00 +0000
Subordinate resources:    AS: 269524
                          IP: 45.187.32.0/22
                          IP: 2804:65f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f4:87:cb:e4:9e:f4:7c:eb:09:32:5d:8f:04:96:83:13:62:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  5 20:56:00 2023 GMT
            Not After : Aug  3 21:01:00 2024 GMT
        Subject: CN=5CFD4BD8357F505D6CB1A47E9C153D57129592B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:7e:85:ce:c0:8d:8e:d1:de:b9:68:c1:5e:
                    10:43:53:72:28:4a:c3:dc:2d:75:17:77:fd:a9:a2:
                    c1:bd:51:f8:83:39:c7:fc:84:b6:ac:b7:04:3a:fc:
                    17:7d:d8:e3:2f:cd:e3:2a:54:8f:52:bb:e1:98:cf:
                    e3:50:c4:23:d6:80:92:ea:7b:99:eb:98:fc:54:20:
                    c5:dd:ef:9b:b9:bb:a1:32:b3:23:89:72:53:62:4a:
                    0b:e9:68:c3:00:97:20:64:57:aa:5a:2f:96:a4:81:
                    f7:a6:dd:91:64:46:79:bd:5d:23:8d:39:9b:90:67:
                    58:d2:7f:b1:1e:ce:66:d5:09:fe:7e:4c:81:34:41:
                    8e:ae:c1:8c:87:d6:b4:10:d3:da:96:90:c6:e2:d7:
                    19:cf:d3:e8:58:8c:53:7d:bc:d8:44:f0:76:bf:1a:
                    6e:23:fe:b6:54:17:8c:b6:5f:17:31:b6:e9:13:87:
                    d5:de:f6:a3:c0:7c:71:22:85:a6:e7:44:59:57:95:
                    aa:bc:a3:38:78:73:8a:56:9c:f7:a6:89:a5:a2:8c:
                    c1:49:8e:0a:a9:24:35:2c:14:58:80:bf:32:9d:93:
                    8d:a8:1e:9b:0b:4d:ef:53:7c:75:14:ca:7b:09:65:
                    f6:92:4b:dd:e3:76:35:52:bd:83:ec:03:82:46:2c:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:FD:4B:D8:35:7F:50:5D:6C:B1:A4:7E:9C:15:3D:57:12:95:92:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/5CFD4BD8357F505D6CB1A47E9C153D57129592B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22
                IPv6:
                  2804:65f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269524

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:af:5e:14:5b:18:2e:e8:04:27:a9:3d:45:e3:3d:d4:f7:
         82:42:85:d0:fe:11:b8:78:f4:de:76:25:d4:28:bb:41:42:2f:
         fa:3f:9e:82:6d:17:fd:a2:4d:0f:bf:9c:c7:89:19:d9:b5:92:
         8e:d5:a3:d7:65:c4:bb:d6:6d:55:a0:eb:7a:a1:0e:8f:9e:06:
         ed:9b:f2:d9:16:98:5d:32:83:d5:92:f4:6e:c6:e9:c4:10:7d:
         61:ca:7b:8e:a1:bf:ee:2e:c1:7e:09:40:5f:f0:bb:01:64:fc:
         ac:2c:45:0e:5d:2e:29:05:9f:cf:55:37:68:4d:9b:7a:7e:5d:
         81:7c:7c:6f:a2:60:3a:39:ff:09:c6:33:1f:ed:52:ff:1f:fc:
         90:6d:29:c5:d4:55:d5:df:43:8a:d3:b4:80:e9:e9:6e:f5:c2:
         bc:f3:23:4b:c2:06:77:32:67:eb:9e:9b:47:5c:ab:fa:b7:d9:
         60:5b:19:4e:72:bc:79:95:bf:bd:1e:a8:93:94:b4:2e:15:e5:
         a1:f1:bb:c4:9e:bd:62:0d:f9:a3:68:00:74:15:0b:62:1f:01:
         6d:e3:98:63:2a:bc:71:d2:18:fc:1f:05:c3:d9:94:41:17:68:
         37:7a:e7:c5:8b:65:73:82:f6:1f:f0:00:a7:a5:53:f5:9f:2f:
         fb:c5:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----