Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer
File:                     5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.cer (raw, json)
Hash identifier:          Qjqe0g2MF8fNIkrI5V0r0pOMwO2mw0B59EKx0uJdQtc=
Subject key identifier:   5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E6078F4B6D0B4B30D75B3717A2B32AF8FEA3FA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Nov 2023 18:01:30 +0000
Certificate not after:    Sun 03 Nov 2024 18:06:30 +0000
Subordinate resources:    AS: 272228
                          IP: 189.126.128.0/22
                          IP: 2804:83e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:78:f4:b6:d0:b4:b3:0d:75:b3:71:7a:2b:32:af:8f:ea:3f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  5 18:01:30 2023 GMT
            Not After : Nov  3 18:06:30 2024 GMT
        Subject: CN=5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:32:b3:0e:82:21:6a:20:c7:62:08:ba:5c:
                    4b:ce:ba:79:c4:23:c5:39:ea:88:3a:c5:f5:82:40:
                    b6:01:cb:59:2b:33:b3:c6:b7:1d:5d:24:65:d4:f2:
                    eb:7b:bb:22:3f:2a:4a:71:db:e9:6e:30:81:f0:15:
                    45:ea:58:e8:4c:4f:83:59:11:35:7a:3d:44:f5:ff:
                    b4:9d:e5:5c:50:99:f0:e3:f2:85:8d:50:fb:1e:ea:
                    22:f8:12:f5:eb:aa:18:2a:a7:d7:75:b0:a5:40:ae:
                    a2:86:71:1f:7a:6f:a9:0c:2b:8d:ed:1a:46:41:9e:
                    07:32:02:2d:e1:33:6f:6a:63:39:60:22:a6:d9:cd:
                    b7:bf:13:f3:f9:53:99:75:56:50:55:bc:28:71:63:
                    08:a7:76:6d:6a:04:02:30:1a:a2:25:32:67:b8:bf:
                    1c:8d:48:8a:b2:96:3c:f3:33:c5:3f:b6:f1:15:b4:
                    5d:2a:5e:27:82:7a:1e:63:da:49:40:de:11:7a:95:
                    bb:4f:1f:f9:3c:1d:c8:c7:6e:4a:ef:88:d6:5b:36:
                    d6:44:53:64:1a:c4:ba:27:45:ee:93:0a:f2:9c:8a:
                    3f:77:53:e2:5d:03:45:2e:da:d9:68:9c:8d:79:59:
                    83:85:59:06:00:40:13:6f:71:8a:16:19:83:9c:1f:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:EE:3B:7A:E1:F1:86:72:B6:F5:0C:8A:B5:91:AA:75:DB:B4:F0:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/5DEE3B7AE1F18672B6F50C8AB591AA75DBB4F060.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/22
                IPv6:
                  2804:83e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272228

    Signature Algorithm: sha256WithRSAEncryption
         2d:7d:13:7c:bf:42:b6:d2:c4:97:0a:bc:bc:ab:fe:06:68:04:
         dd:c7:42:cb:7a:26:25:ec:83:fd:34:c9:27:67:2a:e9:5b:84:
         22:3b:e7:af:40:a8:68:2a:29:d6:15:ca:49:10:d9:c3:02:b4:
         d8:2d:21:a7:7f:11:95:56:8d:5e:89:7e:a8:90:de:09:4e:29:
         42:fc:b7:0b:73:eb:d9:0e:9c:8a:07:33:f4:41:72:66:a1:85:
         96:e2:e9:69:2e:95:2d:90:a3:50:ce:12:83:28:a1:a4:6a:c3:
         c1:40:9b:9a:26:6a:94:16:b1:b4:ef:c3:65:e7:6a:12:44:1d:
         9a:2c:40:af:3f:fa:b2:a1:69:65:68:9c:c1:5e:a9:aa:dc:39:
         78:4f:6f:d6:68:89:3f:65:eb:fd:3c:0f:9e:e5:16:f5:fa:a7:
         54:81:93:33:53:61:5c:90:1e:ae:5d:d5:60:2d:23:e0:c9:5a:
         1e:a5:ef:a4:8c:c3:c5:b4:c7:e8:c8:49:d5:48:bd:b0:67:9b:
         01:2e:0f:7c:87:36:c2:0f:00:73:b2:e9:8c:38:d7:30:f4:a2:
         6c:dd:11:38:aa:e4:f5:07:b9:91:d6:c0:2f:15:ad:fb:82:a9:
         e4:ba:ac:47:60:7e:2e:de:d6:88:aa:9c:97:a3:be:25:9d:24:
         17:c8:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----