Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer
File:                     8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer (raw, json)
Hash identifier:          95saKJHSdBEeSPrRtNf/YGVVGHVblIGYtKEkV15MRxY=
Subject key identifier:   8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       650B28033CAA1CB27E02EE901F33BB5F35031600
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 04:17:19 +0000
Certificate not after:    Thu 31 Oct 2024 04:22:19 +0000
Subordinate resources:    AS: 270516
                          IP: 187.73.180.0/22
                          IP: 2804:6d28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:28:03:3c:aa:1c:b2:7e:02:ee:90:1f:33:bb:5f:35:03:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  2 04:17:19 2023 GMT
            Not After : Oct 31 04:22:19 2024 GMT
        Subject: CN=8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:ef:cb:db:3b:b2:2a:70:67:f9:1b:94:ae:
                    1c:83:97:61:25:eb:d8:45:19:6d:0b:0a:88:38:99:
                    47:d1:cd:46:85:64:cb:80:ca:73:39:2c:9b:d6:35:
                    74:7d:4b:53:30:b3:01:40:78:30:8b:46:65:82:31:
                    cb:bd:29:a0:4f:11:6d:6c:ff:f2:0d:2f:7b:71:bb:
                    a0:6f:e5:4f:18:71:3e:3e:6b:5d:8c:68:ef:da:6e:
                    4f:cf:6b:8e:37:36:ba:27:49:b1:6f:ff:68:81:f2:
                    b8:e2:58:25:21:46:1a:b1:dd:54:9c:6c:0e:19:32:
                    6b:89:cf:43:f4:ed:9d:78:ae:a5:0a:5d:20:33:ac:
                    35:f8:d2:5b:fa:d8:ec:6b:43:61:78:03:96:93:03:
                    a9:f9:0f:7a:b8:39:f1:9c:c0:aa:33:2e:0b:6a:b0:
                    25:87:4b:2f:4d:50:02:77:06:de:b5:89:b6:38:9c:
                    8d:fd:4f:42:28:6e:03:bc:7a:8a:62:09:d8:25:35:
                    42:44:58:4e:54:38:a7:d6:9d:c6:18:54:82:50:40:
                    6a:84:76:2b:fb:4b:a4:7b:50:3c:82:4e:69:dd:61:
                    6e:ce:32:86:ce:bd:46:d2:d1:fc:5d:30:31:30:3e:
                    60:dc:81:17:9f:57:42:46:2b:52:e5:13:be:2f:03:
                    c3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.180.0/22
                IPv6:
                  2804:6d28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270516

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:3b:67:8a:78:2a:16:ca:05:ba:4c:b3:62:86:d1:95:a9:
         09:5f:74:84:58:bd:a0:c3:b3:c5:b3:04:b6:44:35:87:fe:bb:
         c4:6e:8b:1e:ce:a0:a7:3f:a5:55:1b:c8:1f:ab:a6:a6:08:b3:
         6f:33:a5:95:21:81:53:cb:c1:83:65:cf:bf:13:50:6a:dd:cf:
         24:66:19:17:16:49:03:f6:8c:c7:24:2a:aa:61:5c:b2:98:76:
         f7:8b:b4:68:0c:e6:e0:f6:ce:e4:52:a5:a9:14:16:74:08:79:
         96:e8:37:9d:bf:00:b9:d2:d8:eb:0c:54:c1:82:8f:5a:4c:67:
         c8:f5:fe:66:75:e1:ed:97:f2:53:55:52:ff:33:0d:bf:98:c4:
         a3:d4:56:f7:b7:be:b0:fb:03:84:17:36:cf:ef:c2:fa:75:78:
         21:ac:2e:12:ac:95:8b:09:b2:f1:96:26:f7:33:97:f9:96:3a:
         63:80:2f:a6:df:4a:d4:f7:ea:5d:39:7d:79:43:20:97:5e:59:
         68:c3:27:13:72:bb:f1:ad:ba:34:bd:21:d7:ca:1a:76:2f:1b:
         74:71:d7:e0:70:e4:fa:fc:de:18:25:ab:9e:46:52:41:d7:04:
         fb:4d:de:a8:48:02:19:90:41:fa:d7:08:e4:6b:18:6c:a8:e6:
         e0:85:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----