Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer
File:                     5D3E9920CB3EA518E5033995FF7833D02B0BA31D.cer (raw, json)
Hash identifier:          DRypeGhksozd8sotGq11AmWxZnO2VivadzcF33R6/Ec=
Subject key identifier:   5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44752C3927D55A9BC4E221139A4A1F47B0834DA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:06:08 +0000
Certificate not after:    Thu 23 May 2024 23:11:08 +0000
Subordinate resources:    AS: 266410
                          IP: 170.80.80.0/22
                          IP: 2804:3768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:75:2c:39:27:d5:5a:9b:c4:e2:21:13:9a:4a:1f:47:b0:83:4d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:06:08 2023 GMT
            Not After : May 23 23:11:08 2024 GMT
        Subject: CN=5D3E9920CB3EA518E5033995FF7833D02B0BA31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2a:ca:f6:d4:c4:ad:68:57:fc:46:09:70:db:
                    d4:29:41:36:61:a9:9a:5e:94:81:66:9c:d3:17:e0:
                    5b:30:91:04:25:d4:f1:46:15:51:ef:88:8c:49:c4:
                    db:66:4a:11:96:62:30:7d:ac:50:17:b8:73:97:12:
                    0b:3b:0c:07:b8:2a:0b:99:ee:b8:6e:4f:5a:87:3d:
                    e3:94:89:95:44:c5:ce:0e:5d:cd:32:4f:26:e0:a8:
                    50:a9:b7:53:6e:02:9a:bf:d7:da:4b:73:ed:12:7c:
                    09:39:dc:7e:e4:5a:e6:d3:19:b7:b4:68:99:6e:93:
                    e9:c9:2f:ee:5d:a9:c0:44:6e:d9:96:60:47:e6:e7:
                    7b:84:88:09:e3:ce:d3:b3:a8:20:41:b5:bc:a1:a8:
                    d9:b8:57:ea:75:a0:6c:8d:5d:37:ba:19:97:46:9d:
                    bd:78:ad:ec:84:06:59:fb:4a:d7:fc:13:94:58:ab:
                    81:4a:c4:37:a6:af:ce:f8:1a:34:c4:16:8e:8b:e8:
                    05:21:bb:22:73:55:22:d0:11:45:21:a5:06:3f:6d:
                    54:0d:4b:fc:45:e4:70:71:ec:8e:c2:04:e7:df:f2:
                    45:be:85:20:29:fd:1f:e3:c5:35:8f:1f:61:fd:be:
                    fd:3f:49:91:a3:b3:91:85:f3:e5:e9:83:dc:d9:16:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:3E:99:20:CB:3E:A5:18:E5:03:39:95:FF:78:33:D0:2B:0B:A3:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/0/5D3E9920CB3EA518E5033995FF7833D02B0BA31D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.80.0/22
                IPv6:
                  2804:3768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266410

    Signature Algorithm: sha256WithRSAEncryption
         90:8b:6e:e0:c7:bc:70:fe:81:75:85:c1:d3:6e:d6:db:64:fb:
         92:03:5b:91:dd:2a:b9:70:83:97:52:c2:a6:67:06:47:3e:43:
         03:80:4f:9e:cd:87:e5:e4:b9:33:ee:17:d0:0e:b6:c0:36:de:
         2f:6b:2a:8c:e3:0e:69:8d:44:3f:c4:95:fb:38:7a:7e:99:d8:
         c6:64:ba:4d:fd:5a:d3:a3:2b:e4:21:b8:54:0d:a4:11:97:8e:
         7a:a8:be:6f:b5:e1:5a:d5:39:6a:4d:ea:9c:2c:cd:37:ce:2f:
         ca:fb:36:e7:bd:1a:9f:0a:34:21:5c:b8:84:62:54:48:0f:c5:
         01:85:1d:87:c0:82:cf:1c:8f:54:e4:a0:39:ab:40:d6:1e:b4:
         c7:2f:57:f5:ae:71:0a:3c:cb:24:cb:92:19:0f:3e:c4:45:59:
         0c:3e:dc:22:10:a2:25:e4:a9:78:d8:9d:b2:af:81:51:3a:c5:
         0b:4d:df:a5:63:77:23:e2:8f:b5:b9:81:9e:0e:cc:2c:ec:e7:
         f2:b9:72:29:0e:73:da:3b:03:13:47:6a:02:08:47:cb:ab:be:
         3c:59:dd:92:76:88:78:68:41:b8:4b:50:8d:36:af:37:a8:c7:
         48:b2:5c:7c:ce:48:5c:fd:cd:eb:75:63:b5:0b:73:28:a9:c8:
         76:94:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----