Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
File:                     63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer (raw, json)
Hash identifier:          fxjVt0UDEx5ze0Y9IyaDfGh/HibN4bvYBhMiiXZP32s=
Subject key identifier:   63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AAF318FE456EB4A518E4DC08E9F148904EC3681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 18:15:09 +0000
Certificate not after:    Fri 15 Nov 2024 18:20:09 +0000
Subordinate resources:    AS: 52635
                          IP: 177.125.20.0/22
                          IP: 2804:d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:af:31:8f:e4:56:eb:4a:51:8e:4d:c0:8e:9f:14:89:04:ec:36:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 18:15:09 2023 GMT
            Not After : Nov 15 18:20:09 2024 GMT
        Subject: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:4d:d2:83:93:b2:84:f8:ca:87:b5:70:29:
                    12:5b:04:92:8a:89:13:51:16:06:d1:e5:c8:1b:12:
                    25:64:c8:9e:16:67:88:cc:e9:c8:35:6c:7c:87:0c:
                    13:a5:d0:e6:ca:b2:79:96:79:ba:40:2f:f6:5c:a9:
                    20:cf:5f:98:d7:b4:c1:cb:a4:1c:30:3b:71:f2:e7:
                    1a:bd:bb:f4:b5:18:72:3a:fc:dc:01:87:68:dd:57:
                    84:64:8b:53:83:da:00:82:3b:16:69:1d:e5:c3:0a:
                    b7:72:ea:86:6b:a1:ef:6f:bf:b6:f6:27:ad:e6:d5:
                    bc:74:74:ec:54:b5:4a:c3:5c:48:b3:9f:53:01:95:
                    55:b7:a6:10:21:ea:81:66:06:b0:5d:ec:8d:1e:30:
                    e0:51:5f:25:dc:07:45:65:03:b9:32:11:9f:3f:32:
                    c6:1a:ee:f7:26:49:ea:e3:e1:73:1c:69:b1:84:ff:
                    b6:3a:f1:76:4e:02:8c:57:eb:24:5d:37:2e:70:38:
                    c5:a3:d6:6a:41:6b:9d:65:11:d5:72:d2:a8:9b:2a:
                    c8:66:92:74:a9:15:39:2b:18:55:80:2a:2d:9b:15:
                    f1:c9:88:98:45:7b:6b:c3:fc:0b:85:d2:db:d0:0b:
                    d9:b7:f4:4b:6d:f2:f6:3e:02:18:fb:44:1d:ee:b3:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22
                IPv6:
                  2804:d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52635

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:8a:bf:60:45:b7:d7:2d:a4:0c:09:20:8c:0f:ae:28:b3:
         28:f9:44:53:c3:35:c3:4d:0a:d3:ef:d1:67:db:5f:fd:35:f6:
         92:ed:35:f8:bd:9f:c4:67:d5:42:ec:97:b6:f6:b3:3e:be:74:
         3b:1c:7f:3f:f6:56:79:e6:58:4a:85:86:13:da:cc:e5:e4:7d:
         7b:ec:07:0b:f0:ad:51:cc:6a:b1:82:5c:ea:c2:f7:f1:02:28:
         25:94:8d:8a:54:6d:09:08:6c:01:80:61:b0:2f:3a:b1:45:fc:
         91:39:55:a9:5c:21:a6:5d:51:a9:6a:f8:e8:c2:b9:34:12:3d:
         2b:ac:64:95:e8:35:ab:f8:13:3e:1e:25:d6:ae:09:85:35:fc:
         00:a1:78:8b:97:36:8e:60:61:e2:68:6f:a8:3a:3f:4a:0e:8d:
         e6:3b:85:58:8d:cb:da:21:86:e9:f2:8f:81:7e:00:cb:80:49:
         01:6b:ce:4a:b2:5b:86:39:1b:38:60:0b:1a:ac:b8:68:0a:f1:
         0c:b8:34:31:2a:84:ca:48:6f:40:89:5f:e8:b6:96:db:ee:37:
         c5:95:0f:d5:c9:01:ec:95:31:cf:55:d8:fb:36:d0:26:1d:af:
         97:de:9c:f6:ad:a3:1b:5e:62:b7:f3:d6:48:e5:6d:bd:d7:31:
         da:f5:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----