Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
File:                     5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer (raw, json)
Hash identifier:          wRl18IsXXPyH/SV9ekecHtiKAcOcxESmz+/VjdB4NAI=
Subject key identifier:   5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36F139E6D41464E6C0500D42A5F020868EA5A7D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:57 +0000
Certificate not after:    Tue 21 May 2024 09:25:57 +0000
Subordinate resources:    AS: 264308
                          IP: 138.122.20.0/22
                          IP: 2804:25e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f1:39:e6:d4:14:64:e6:c0:50:0d:42:a5:f0:20:86:8e:a5:a7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:57 2023 GMT
            Not After : May 21 09:25:57 2024 GMT
        Subject: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:98:a0:eb:74:d3:b5:48:78:c9:5a:4f:25:
                    e2:3b:d0:3e:f6:1b:8e:42:fb:5b:60:2d:ca:45:57:
                    6d:78:99:5c:41:8e:5d:a2:1b:45:78:c0:67:ba:12:
                    8f:73:9b:9d:5f:c8:c5:28:b6:ff:34:40:07:8a:5b:
                    ce:ec:74:51:ff:ec:80:2a:23:0f:e3:39:f2:64:27:
                    4d:c1:cf:ba:ed:ee:05:7b:7b:80:a5:9d:07:e9:06:
                    7d:49:32:3a:f3:b9:12:46:30:76:fb:db:84:71:53:
                    a6:cc:c4:7d:a0:47:a7:79:92:4a:56:33:a4:26:d9:
                    88:ad:97:9f:ee:da:32:b1:7b:a8:d7:e0:59:48:0f:
                    14:8b:1a:18:81:36:07:a0:3e:8e:7b:6f:f1:57:31:
                    6d:89:57:2b:2b:45:92:fa:21:f8:11:16:ad:93:c2:
                    80:af:a6:88:9c:77:89:38:ad:7d:6f:a3:d1:71:92:
                    2a:54:4c:51:16:99:d6:95:c1:58:9e:43:ab:ba:54:
                    e8:46:8d:1c:fd:aa:d7:ee:7a:81:bf:b6:f2:65:9c:
                    d0:d9:f4:07:9b:18:96:7e:bb:78:ad:7e:23:56:a5:
                    b1:8b:3a:2a:f2:32:58:34:cf:d0:9d:29:9f:d1:b5:
                    85:38:7e:59:17:fc:6b:4b:9c:b4:7f:ae:06:7e:f5:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.20.0/22
                IPv6:
                  2804:25e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264308

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:62:28:f9:e8:b8:e0:88:d2:66:53:49:97:e6:eb:c7:ce:
         5a:d1:64:82:84:6a:d1:11:b7:6e:23:26:5c:dd:ef:62:ac:8c:
         dc:99:8b:89:19:37:b0:5b:4a:95:37:11:1d:80:c0:32:be:6a:
         66:16:b7:d1:7e:16:59:4b:4b:91:c4:af:f5:f6:3b:98:1f:19:
         68:ad:c2:dd:67:b3:6a:a5:56:0f:ee:c2:84:ce:02:41:7f:ab:
         5e:af:be:50:94:2c:43:21:65:93:32:03:6b:cf:8b:4f:15:00:
         9c:40:15:55:de:db:4b:97:07:06:c0:49:59:b1:b5:98:f8:85:
         90:b5:15:81:6b:7a:83:da:e3:fe:1f:cd:b3:b6:e8:34:ae:bf:
         57:71:3b:2e:c9:fe:10:28:c6:17:f4:e1:23:b3:c8:52:93:45:
         a6:23:7a:91:50:8a:e3:77:ee:a3:d0:3f:67:f0:39:05:d5:6a:
         65:fa:51:03:62:3b:71:e2:e4:e8:95:12:79:8e:ed:54:2a:fd:
         91:95:8b:58:5b:87:59:64:28:eb:e9:8f:d5:7b:d9:66:2b:c0:
         be:8d:23:71:17:ab:17:32:c9:6a:2b:17:72:a1:7f:5f:c5:02:
         11:31:83:d5:fd:6c:0d:fa:3c:76:a8:e2:02:04:f6:05:67:5b:
         5d:af:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----