Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer
File:                     7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer (raw, json)
Hash identifier:          xlrhWrUmoicdVshABWBer8zG9R6w6X0wILJPlp8cH6s=
Subject key identifier:   7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       624E6731B109B61F2D2B24F6E98CC4AA2A4376A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 13:55:14 +0000
Certificate not after:    Wed 04 Sep 2024 14:00:14 +0000
Subordinate resources:    AS: 270918
                          IP: 187.121.156.0/22
                          IP: 2804:737c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:67:31:b1:09:b6:1f:2d:2b:24:f6:e9:8c:c4:aa:2a:43:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 13:55:14 2023 GMT
            Not After : Sep  4 14:00:14 2024 GMT
        Subject: CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:07:71:2e:86:db:ba:d0:ad:f1:b8:4f:6a:
                    bf:38:be:87:cd:24:b6:6c:d8:16:d8:1d:1d:87:f4:
                    41:14:d4:a1:41:af:f4:61:5b:a3:18:32:7b:8c:49:
                    84:0e:b0:37:0e:d0:2c:69:d7:07:26:ee:2c:d8:4e:
                    ae:6a:d1:7c:1b:dd:e3:17:ec:05:a8:01:33:c3:a0:
                    25:31:f6:90:43:2b:03:a4:42:44:ac:f0:a2:55:af:
                    8c:e2:12:d9:6e:2a:ea:75:84:86:69:1b:90:3d:94:
                    54:bd:0d:a5:d9:16:61:8a:11:72:b3:b5:55:74:98:
                    83:6f:c9:fb:f5:69:45:20:8a:0e:d2:c5:88:7c:a7:
                    90:17:d0:4c:5d:c0:7f:c5:ec:d4:71:9c:9d:95:1d:
                    aa:11:fc:ae:a9:a5:3f:7f:74:62:55:5b:2b:da:fa:
                    4a:7a:98:c6:8c:dc:e4:5a:5d:46:a0:58:f8:51:fe:
                    eb:c3:6a:5b:ad:84:26:9d:b1:2d:54:15:00:00:d7:
                    00:ee:98:6c:35:85:c9:91:87:9a:3e:49:a7:dd:04:
                    7e:45:77:8f:64:65:9b:24:b0:10:aa:5f:df:2b:1c:
                    db:1d:06:2f:be:1d:c3:02:7c:7b:aa:35:4b:59:e5:
                    6a:3f:1c:68:4f:59:ba:57:d7:fb:4c:62:5e:a9:f9:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.156.0/22
                IPv6:
                  2804:737c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270918

    Signature Algorithm: sha256WithRSAEncryption
         9d:83:3f:b1:54:48:c6:c6:6d:26:7f:7c:f3:e3:81:ad:cd:87:
         33:46:c8:88:ee:3b:4c:55:fa:48:ad:dc:82:58:a0:25:f4:b8:
         e7:8c:51:cb:a4:06:eb:ef:3c:8d:1b:12:d1:1d:75:98:b7:f2:
         51:cd:bb:21:cf:6d:72:c5:33:79:d5:67:6f:51:af:5b:d8:e3:
         f6:53:08:65:7b:4c:61:4e:58:3b:19:2b:d4:bb:3e:f1:79:17:
         85:39:27:30:40:10:6f:84:1f:f7:87:87:40:a8:ff:e9:ad:e0:
         48:94:fd:47:99:34:53:b1:cd:23:0d:0d:e5:33:77:10:2a:b1:
         64:08:c4:d7:ae:57:56:78:83:1e:61:8f:00:dd:cb:b6:35:5e:
         88:7b:9c:95:ac:47:fb:0e:f0:c1:6a:bb:ab:68:f3:34:8f:96:
         1c:45:5e:b5:94:df:16:c5:6a:50:76:f6:69:ae:03:c8:50:bb:
         a4:0b:05:58:ed:ca:c4:ea:9d:8f:01:07:85:47:82:a6:31:ba:
         5c:a0:37:9b:64:52:52:4b:22:72:70:b7:e4:3e:30:14:6b:39:
         25:00:1b:6c:04:e8:87:28:26:6b:8b:ca:29:ec:a2:f0:11:2f:
         05:47:e8:02:57:5a:41:3b:1c:e7:bd:77:1b:e4:be:fa:1e:73:
         0b:7b:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----