Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.cer
File:                     798DB7B7794E3C243A83DCF5019E600D453E6AFC.cer (raw, json)
Hash identifier:          yqxF//88iVcL7ZYwLYQ+LFraBBShUMQJgeqy6BLCsnc=
Subject key identifier:   79:8D:B7:B7:79:4E:3C:24:3A:83:DC:F5:01:9E:60:0D:45:3E:6A:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5039F3F19DBE8F339EA1D806A24F2A4DE2284D93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 20:11:48 +0000
Certificate not after:    Mon 01 Jul 2024 20:16:48 +0000
Subordinate resources:    AS: 263255
                          IP: 190.180.148.0/22
                          IP: 2804:17dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:39:f3:f1:9d:be:8f:33:9e:a1:d8:06:a2:4f:2a:4d:e2:28:4d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  3 20:11:48 2023 GMT
            Not After : Jul  1 20:16:48 2024 GMT
        Subject: CN=798DB7B7794E3C243A83DCF5019E600D453E6AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:2f:58:3a:6e:c6:60:d6:40:76:85:97:b9:
                    51:60:2b:f4:bd:ed:d0:c4:98:ee:18:cd:6c:f2:c1:
                    7b:28:f1:59:17:a1:f2:b6:ad:a0:c4:c6:74:57:3a:
                    cf:ec:99:ea:5d:a6:01:44:f1:61:c0:fa:51:e4:3c:
                    c5:ec:b1:83:3e:ca:01:61:b4:2a:65:94:dc:97:e5:
                    7f:6a:35:91:31:71:bf:c0:f8:04:c1:87:83:77:5c:
                    6c:ee:66:39:f4:bf:fa:28:f6:e4:a3:ec:d4:09:1a:
                    e1:da:c6:6a:9d:26:95:99:cd:84:c4:af:55:94:05:
                    ad:3a:ec:54:7e:9c:f4:ca:12:08:a4:f6:76:74:14:
                    42:a5:25:2e:77:9f:e4:36:a9:a7:29:75:17:4d:e0:
                    5e:11:fd:45:3b:ad:a7:79:74:09:13:cd:f2:8c:5a:
                    6f:6e:d5:a8:91:01:e1:bf:94:f2:8e:6e:6f:f4:75:
                    98:4c:44:dd:c4:0a:6c:06:0e:44:91:69:a4:26:20:
                    69:76:b4:dd:18:21:6c:16:64:4e:7f:f3:fa:d0:5b:
                    64:4a:b5:a2:18:9f:17:cb:24:03:60:88:42:ee:2b:
                    4f:b4:6a:18:0f:64:8d:06:a1:10:41:44:89:9d:4c:
                    2b:0c:fd:9f:d0:5a:4d:08:1c:44:ca:39:df:99:69:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:8D:B7:B7:79:4E:3C:24:3A:83:DC:F5:01:9E:60:0D:45:3E:6A:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/0/798DB7B7794E3C243A83DCF5019E600D453E6AFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.148.0/22
                IPv6:
                  2804:17dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263255

    Signature Algorithm: sha256WithRSAEncryption
         13:0b:60:59:60:f9:ee:df:78:9e:32:0e:25:07:94:e9:c1:ac:
         4e:51:54:6c:42:12:a4:a3:f7:e6:bb:fa:f1:a5:2f:1a:4e:00:
         42:fb:cd:ac:35:6f:00:f0:b7:17:b9:55:1f:7c:ca:67:70:d1:
         61:12:e1:05:3c:f3:e5:e5:a2:1d:7e:fe:07:27:88:09:1b:c9:
         3f:c7:5f:f2:11:e6:17:2e:b3:8e:df:09:42:8f:e9:f1:33:f0:
         44:52:62:a9:b5:eb:30:14:07:56:e0:f0:d0:7f:e8:a6:18:86:
         c0:fc:d0:b3:c6:aa:af:22:d5:e3:36:97:ef:5a:3d:64:bf:f5:
         a1:c3:92:f4:aa:86:7f:09:1b:e7:f5:62:28:c2:bc:b7:a0:f4:
         3d:22:e1:0b:62:c6:b5:7d:1c:0b:0f:5f:11:97:c1:e2:af:ec:
         37:b5:18:2e:1e:4a:00:d6:b1:9c:6e:4b:94:ca:53:df:7d:d1:
         69:37:0c:5c:c2:4b:74:e0:ec:b5:52:2c:f5:a0:00:13:62:a4:
         98:1b:9e:fa:67:b6:7a:45:70:03:a8:fc:8c:74:c9:dc:86:80:
         0d:9a:42:b6:ee:93:76:af:c8:10:97:e6:26:26:a5:4c:e2:4c:
         62:8c:6e:08:83:cf:00:9c:de:ca:2f:30:ef:c1:9c:41:7c:3b:
         85:f4:27:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----