Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8175DAF08C0A9463EDC88130DFF121667DF9703C.cer
File:                     8175DAF08C0A9463EDC88130DFF121667DF9703C.cer (raw, json)
Hash identifier:          yYb5Nze4uyeM+01UYrQRuzMahRD+uueE+DsPyKyePv4=
Subject key identifier:   81:75:DA:F0:8C:0A:94:63:ED:C8:81:30:DF:F1:21:66:7D:F9:70:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74BF3566DC83202CD81A56AEED287DE23E434173
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/8175DAF08C0A9463EDC88130DFF121667DF9703C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 16:53:02 +0000
Certificate not after:    Wed 02 Oct 2024 16:58:02 +0000
Subordinate resources:    AS: 268909
                          IP: 45.175.200.0/22
                          IP: 2804:5c70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bf:35:66:dc:83:20:2c:d8:1a:56:ae:ed:28:7d:e2:3e:43:41:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 16:53:02 2023 GMT
            Not After : Oct  2 16:58:02 2024 GMT
        Subject: CN=8175DAF08C0A9463EDC88130DFF121667DF9703C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:fb:c7:29:ed:ba:06:29:b8:80:4b:60:eb:
                    d8:9a:49:a6:6b:b9:39:51:54:60:bf:e1:1f:ab:df:
                    20:e0:31:db:ca:bc:92:4b:be:d3:1c:d9:76:bb:5e:
                    b9:03:48:1d:69:22:f4:1b:b3:50:84:f6:1b:aa:4e:
                    a9:b9:af:c6:43:b7:88:cc:53:a1:21:a8:25:d5:f8:
                    c7:b2:bf:bc:64:a9:ed:5d:d8:d3:04:27:e9:8b:fb:
                    04:6f:05:5d:c6:fd:ec:e0:61:55:3d:95:32:e4:ca:
                    f6:dc:57:50:e3:2d:9f:5b:d8:1e:a0:39:a4:f6:c0:
                    d9:28:1c:34:91:03:4f:49:24:e5:a2:87:80:85:6c:
                    3b:de:9e:ed:a3:27:cb:23:b5:84:22:ba:49:16:48:
                    b4:88:52:51:c1:d1:36:69:4f:52:9e:b8:3c:75:3a:
                    1d:63:05:88:58:bd:98:c0:5a:f9:b4:69:90:f9:98:
                    ba:bb:fc:ac:39:9e:f5:8b:23:61:a1:fe:f8:b9:5c:
                    0b:1d:f9:52:2c:d2:b7:52:b0:d4:90:27:e4:b6:ca:
                    06:2a:8a:ae:23:7d:d7:2c:4d:b5:fc:f4:a5:ba:b9:
                    26:58:f8:15:b9:3a:3e:70:23:cb:62:e2:bc:ab:b6:
                    88:74:24:1c:2f:3a:1b:f5:39:49:08:cf:f2:b8:03:
                    96:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:75:DA:F0:8C:0A:94:63:ED:C8:81:30:DF:F1:21:66:7D:F9:70:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/0/8175DAF08C0A9463EDC88130DFF121667DF9703C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.200.0/22
                IPv6:
                  2804:5c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268909

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:b7:d4:94:9f:01:49:40:a7:0c:25:19:b8:5c:b7:d5:06:
         6f:d4:ad:ec:d3:b2:ed:71:a1:dd:4c:d0:42:2c:96:34:7b:2d:
         ac:c8:b4:76:f8:78:53:f6:94:aa:53:27:dd:44:12:b8:e5:7e:
         2c:e3:1d:70:06:4a:44:8f:a0:81:a0:9f:51:60:ca:04:57:02:
         0a:85:7c:45:3e:12:d1:c6:a2:53:58:f5:55:81:c0:16:03:cb:
         f7:fa:97:67:f4:97:01:37:e2:36:16:d1:53:90:f0:04:f9:62:
         5f:cb:71:17:97:e9:ea:cf:64:be:5f:5f:ae:51:4f:7a:6c:7d:
         58:f2:d9:0b:26:b7:6a:f7:1a:57:25:ac:b1:da:fc:f9:c7:82:
         dc:55:32:e6:54:13:ad:b3:02:03:a5:b0:48:39:03:d5:92:bd:
         42:66:d6:32:4c:4b:e2:1e:39:fe:43:35:15:31:f7:39:4b:89:
         f3:7c:bf:53:bb:d0:b3:45:df:80:01:bc:d9:35:b3:9d:b7:66:
         a7:fc:b6:31:4a:73:53:b3:a2:6c:3a:95:d4:12:dd:ec:6a:51:
         d9:aa:60:54:da:db:63:0a:79:64:64:12:7e:eb:39:00:d3:ee:
         ed:49:37:3d:64:69:12:4a:67:85:4b:58:20:22:2f:c8:01:65:
         52:87:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----