Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7E574451D3714DA42FBF43E37134F0C88715263A.cer
File:                     7E574451D3714DA42FBF43E37134F0C88715263A.cer (raw, json)
Hash identifier:          f/dFdY7ELr15vWaUmEhrDN4orH4pCNRKEBVUiH64atc=
Subject key identifier:   7E:57:44:51:D3:71:4D:A4:2F:BF:43:E3:71:34:F0:C8:87:15:26:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       146041B4A50F627086364477AF00346235CB9B59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7E574451D3714DA42FBF43E37134F0C88715263A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:07:12 +0000
Certificate not after:    Tue 03 Sep 2024 14:12:12 +0000
Subordinate resources:    AS: 270426
                          IP: 190.111.140.0/22
                          IP: 2804:6bcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:60:41:b4:a5:0f:62:70:86:36:44:77:af:00:34:62:35:cb:9b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 14:07:12 2023 GMT
            Not After : Sep  3 14:12:12 2024 GMT
        Subject: CN=7E574451D3714DA42FBF43E37134F0C88715263A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:91:fa:05:aa:74:b9:47:d9:56:d0:8b:39:
                    ae:b7:a0:94:a0:03:22:6e:36:a7:8d:6b:b8:85:00:
                    b4:f8:98:be:b7:f5:9f:4b:e8:b0:a6:4c:ed:a7:f8:
                    f0:40:4d:46:ec:3c:95:1f:74:06:40:31:5d:3a:de:
                    48:3a:1f:13:2b:aa:93:73:cd:02:09:02:42:33:db:
                    6d:91:6d:54:47:7a:68:f0:e2:6b:fb:84:dd:41:b4:
                    3a:9a:2f:92:55:b0:10:fb:1b:bb:8d:ba:c4:d6:5e:
                    51:c8:36:ab:b6:37:3c:a5:db:39:b5:f7:c8:f9:07:
                    b3:ab:f7:d3:d1:b4:c2:8c:e6:bf:b7:78:48:32:62:
                    54:76:f9:cf:99:d0:d6:7d:d3:7e:1a:2a:20:de:21:
                    73:11:12:4e:b2:39:97:a6:b4:3b:4c:11:5c:80:47:
                    b1:f9:f1:da:9a:cf:1f:07:e5:9f:69:45:8d:52:70:
                    95:63:00:cc:a7:af:97:92:40:93:5e:14:98:87:e2:
                    a3:fb:b2:4e:6d:ad:d4:17:7a:10:25:6d:e5:c9:a6:
                    4e:77:1e:d1:2b:8b:4c:0f:64:f9:b6:83:c1:37:95:
                    1b:f2:c7:fe:53:53:15:e4:c9:b3:2e:18:a9:7b:31:
                    44:da:2c:02:38:a6:f6:be:f2:2d:c8:03:3a:41:bc:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:57:44:51:D3:71:4D:A4:2F:BF:43:E3:71:34:F0:C8:87:15:26:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MKYRwfggPSM6xL7UGTyvVrfW7cGC3T7m7A5GGkJTwiC/0/7E574451D3714DA42FBF43E37134F0C88715263A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.140.0/22
                IPv6:
                  2804:6bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270426

    Signature Algorithm: sha256WithRSAEncryption
         37:81:36:00:28:64:d6:7d:04:8d:67:56:1a:10:8d:74:64:cc:
         98:68:67:86:5d:cb:4a:a7:04:91:97:2d:87:a8:2c:64:40:b3:
         45:6e:8d:f3:f4:8c:24:1e:50:ef:e6:58:47:99:2f:98:e3:c4:
         03:2f:b7:62:e8:82:77:43:1a:44:8e:08:9b:05:fb:b1:27:25:
         96:7b:bf:0f:c9:34:f1:b8:f0:98:03:2f:56:43:fa:a3:44:98:
         b5:df:9f:f2:04:8e:e7:31:24:39:c2:83:52:99:0a:ef:20:a8:
         52:07:ee:7f:07:ea:e7:31:9e:6f:09:bd:26:62:e8:ca:7f:71:
         5b:94:93:e3:d0:ac:51:81:6f:2c:76:9a:90:6b:b0:f9:3d:b0:
         32:d3:2f:83:8e:de:f2:f2:28:fe:11:7c:f7:ea:ec:f9:51:36:
         b2:95:18:f5:e5:98:5a:37:29:2d:f3:5f:6c:d5:ef:40:b8:2f:
         e4:af:fb:60:10:e0:c3:39:63:3c:7f:96:df:d2:77:c3:1a:b4:
         2b:22:2a:af:eb:4d:21:7c:28:14:34:9f:af:da:63:01:de:fe:
         69:f2:7f:62:d1:fb:c7:03:ee:fd:fc:f8:19:c5:32:9a:20:5e:
         89:b4:81:68:4d:08:79:9b:55:5f:1b:52:0f:28:92:af:58:c0:
         8c:b3:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----