Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CD6453C81BB892EE6E9230A6E16B7FF50C40194.cer
File:                     8CD6453C81BB892EE6E9230A6E16B7FF50C40194.cer (raw, json)
Hash identifier:          O0hrs4QCHKSSIkcEKd+KbUbMZuQUkhKQ0ciyagfWqq8=
Subject key identifier:   8C:D6:45:3C:81:BB:89:2E:E6:E9:23:0A:6E:16:B7:FF:50:C4:01:94
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53FC216E4992763BF98C261080C8C33CB8B4D232
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/8CD6453C81BB892EE6E9230A6E16B7FF50C40194.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 14:09:25 +0000
Certificate not after:    Fri 26 Jul 2024 14:14:25 +0000
Subordinate resources:    AS: 268440
                          IP: 45.161.20.0/22
                          IP: 2804:5140::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:21:6e:49:92:76:3b:f9:8c:26:10:80:c8:c3:3c:b8:b4:d2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 14:09:25 2023 GMT
            Not After : Jul 26 14:14:25 2024 GMT
        Subject: CN=8CD6453C81BB892EE6E9230A6E16B7FF50C40194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:75:2a:3a:ec:cf:b7:f2:71:2a:74:b6:aa:
                    09:68:3b:d0:61:fd:11:bc:9a:cc:8f:90:47:bd:67:
                    d7:6d:1b:11:a4:be:69:7c:87:b8:92:cb:53:46:eb:
                    e1:07:3e:20:a6:a5:e0:be:0a:d4:81:76:77:3c:6f:
                    a3:3a:92:18:b7:96:fc:6a:3e:7a:63:ea:61:1b:08:
                    3b:99:80:d7:74:21:62:d2:db:d7:d7:31:87:4d:8a:
                    10:e7:e6:47:33:16:72:d7:2f:ba:b6:b0:31:cb:26:
                    3d:e5:fd:55:fa:83:32:52:f7:15:a1:2d:44:9a:94:
                    24:2f:2c:c8:15:a8:67:44:b0:d6:2c:cc:1c:7c:39:
                    74:8d:50:f4:8f:0f:5b:6a:62:af:2b:1f:95:98:bd:
                    68:12:6a:0f:ce:22:95:cb:bb:71:2e:68:24:89:52:
                    eb:f2:a6:85:2e:12:45:60:27:d3:82:2e:2b:a4:18:
                    b3:cd:3f:f0:7b:26:09:ce:e7:35:38:25:20:7b:4b:
                    63:21:b4:b9:e6:62:56:56:55:55:d9:67:32:82:1c:
                    b1:03:68:f6:ff:54:2c:c6:88:35:46:e9:31:0d:31:
                    30:1d:fc:6a:28:aa:b9:85:7b:6c:e9:a2:7f:1d:60:
                    bd:de:3b:82:f8:1b:17:d1:6f:9f:8b:83:ea:55:b4:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:D6:45:3C:81:BB:89:2E:E6:E9:23:0A:6E:16:B7:FF:50:C4:01:94
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/1/8CD6453C81BB892EE6E9230A6E16B7FF50C40194.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22
                IPv6:
                  2804:5140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268440

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:3f:25:c1:1a:8c:fb:28:6d:2a:6c:f0:63:ea:25:80:ca:
         b4:f7:2e:85:78:6b:44:6c:17:42:f4:13:c4:b5:29:14:97:17:
         b4:c4:cc:40:db:c3:fd:a7:f7:78:15:a9:f2:7d:3d:99:b3:85:
         23:63:2a:26:24:b0:b4:b5:9f:04:0c:ab:4c:e7:09:e6:2d:1a:
         98:45:e9:d1:31:8e:0a:3d:44:a6:4f:b8:c3:ba:0d:4b:ac:75:
         66:44:4c:e3:9b:83:61:4e:e4:40:58:b5:11:fb:f0:d6:7d:8d:
         50:af:0c:eb:a2:e9:42:44:09:a8:81:7b:55:56:f7:b3:85:60:
         57:34:62:19:d3:e3:76:ca:f9:b3:01:5b:e7:9f:0a:f1:8e:31:
         32:74:71:e6:94:e0:c4:3a:36:21:fd:96:d0:d9:d0:95:d0:35:
         27:00:1d:81:b2:07:c0:de:d4:03:cd:75:a7:52:e5:3b:d5:50:
         af:a8:3d:81:0d:16:34:0a:4c:3f:f3:f2:1b:39:e4:67:d0:94:
         1f:9b:10:48:73:e0:b1:ef:29:ce:25:c1:16:50:0e:24:ae:ac:
         db:9d:8f:6f:91:f6:72:7f:f8:30:ed:d2:79:79:65:fd:61:79:
         56:46:19:8f:a7:99:31:c9:f4:27:7e:9e:ec:a1:d3:d0:27:fb:
         90:5d:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----