Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer
File:                     81B32A0DFD35A761A0E4773BF209978F18CBA8F9.cer (raw, json)
Hash identifier:          LypZx7UGh/41xsy4p88gKwrpW+9F3G50f+E4dRjywCM=
Subject key identifier:   81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DE48D76D3DA599FA5F56BB37BAA5B03252131CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 18:38:23 +0000
Certificate not after:    Wed 14 Aug 2024 18:43:23 +0000
Subordinate resources:    AS: 267270
                          IP: 45.232.156.0/22
                          IP: 2804:4ae4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:8d:76:d3:da:59:9f:a5:f5:6b:b3:7b:aa:5b:03:25:21:31:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 18:38:23 2023 GMT
            Not After : Aug 14 18:43:23 2024 GMT
        Subject: CN=81B32A0DFD35A761A0E4773BF209978F18CBA8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:fe:0a:ab:6d:c1:fc:48:97:0a:2d:e8:c8:
                    97:52:38:20:00:22:21:26:88:1e:5e:eb:0f:71:aa:
                    29:a0:9a:29:2a:36:d2:de:9c:64:be:7a:2a:dd:38:
                    69:4e:e9:2b:e6:1f:3b:b1:f5:43:17:3b:46:7c:cf:
                    9a:3f:4e:d9:c1:38:72:c7:e3:0e:fa:d6:13:30:1a:
                    5b:e9:88:0e:2c:d4:c2:bb:d6:01:82:af:55:bf:fe:
                    c6:77:bd:aa:aa:63:60:de:d7:6e:0c:ca:6b:1e:34:
                    e5:01:46:c6:e0:2c:54:14:9d:91:61:a0:6d:2f:1f:
                    76:43:70:46:7e:32:a2:12:75:d7:8f:50:2e:1a:24:
                    a4:bb:4f:38:c7:9e:59:99:c9:50:01:9e:2a:cb:58:
                    a0:ca:ab:21:a7:e7:fc:33:62:d3:19:58:b0:74:d2:
                    49:e5:6b:82:12:f0:9e:45:ba:a2:84:58:9c:e4:37:
                    2b:d8:50:f2:d4:fd:01:62:5b:af:1e:e6:fd:98:59:
                    5d:56:bd:ce:fd:58:4c:f9:47:96:d0:3e:83:83:55:
                    9a:f8:92:e7:e5:5d:f4:68:ae:82:5a:0e:8c:6b:47:
                    57:eb:89:93:e4:85:23:e5:0a:4d:47:22:63:0b:7c:
                    cd:1b:51:e1:a4:e3:00:1f:99:cc:cf:86:4d:45:f9:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:B3:2A:0D:FD:35:A7:61:A0:E4:77:3B:F2:09:97:8F:18:CB:A8:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/81B32A0DFD35A761A0E4773BF209978F18CBA8F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22
                IPv6:
                  2804:4ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267270

    Signature Algorithm: sha256WithRSAEncryption
         a7:59:d0:32:6b:85:c4:05:d4:4f:e1:5c:46:aa:ff:4a:d9:23:
         63:d9:3d:12:27:83:1d:8c:6f:df:21:1a:60:27:6f:57:d9:0a:
         e1:0f:b7:36:e5:44:ca:18:68:9e:1f:19:c7:b3:0d:db:25:ca:
         76:9f:41:68:ef:40:f4:80:18:cb:18:3d:67:fa:1c:b1:df:bf:
         4a:58:81:9b:94:69:f7:27:d5:9e:5d:f5:bb:a5:8e:85:49:21:
         af:c5:53:c4:31:7c:c5:e1:f4:73:50:6a:88:04:4f:ea:de:c0:
         1d:6f:6f:16:0f:8a:a1:06:bb:64:dd:0b:e0:b2:19:18:75:dc:
         11:ee:49:2b:ad:2c:d7:c3:10:6f:66:f4:3e:99:d6:e7:3f:f9:
         1c:c0:19:df:6c:0f:a0:56:f0:eb:73:d2:de:f0:4a:fe:bc:8b:
         42:5b:6b:18:d0:1c:36:d4:cd:a8:b2:89:e9:f5:fa:59:1d:e6:
         e7:6f:55:af:ad:4a:e5:3d:1c:bc:f0:84:93:2f:58:39:c4:24:
         af:bc:0f:7d:84:20:1e:9a:01:0b:d0:3a:9a:96:01:93:2d:19:
         eb:6b:5b:91:a5:b8:ed:31:ba:3f:cd:64:1f:18:65:a9:bf:e4:
         ac:66:73:c3:f8:1c:d7:ac:ad:74:18:cb:64:27:ac:64:fa:b2:
         fd:40:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----