Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A883F8303219971D2CE7FAB342373AF3913D545F.cer
File:                     A883F8303219971D2CE7FAB342373AF3913D545F.cer (raw, json)
Hash identifier:          W3hTCPi0bndiNGQmRv56a37Cnm+04jejrOysLNpKo/w=
Subject key identifier:   A8:83:F8:30:32:19:97:1D:2C:E7:FA:B3:42:37:3A:F3:91:3D:54:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       57FBBA8A4B294B47B45DD54C6DB4C91676298D3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/A883F8303219971D2CE7FAB342373AF3913D545F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jul 2023 16:19:13 +0000
Certificate not after:    Wed 17 Jul 2024 16:24:13 +0000
Subordinate resources:    AS: 263265
                          IP: 179.107.8.0/21
                          IP: 2804:1610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fb:ba:8a:4b:29:4b:47:b4:5d:d5:4c:6d:b4:c9:16:76:29:8d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 19 16:19:13 2023 GMT
            Not After : Jul 17 16:24:13 2024 GMT
        Subject: CN=A883F8303219971D2CE7FAB342373AF3913D545F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:bd:34:f6:76:f5:1e:f3:0d:4b:a4:42:87:
                    23:61:0c:6e:c5:2e:f6:07:4f:52:ae:cf:bf:db:f9:
                    0a:97:7f:80:0b:21:d6:fb:f7:5e:44:bb:b3:a0:48:
                    d2:18:a4:ab:dd:90:f1:cd:15:79:31:1b:17:32:9a:
                    8d:5a:d0:5a:23:32:29:b1:d7:0c:d2:ba:8a:c0:c1:
                    f1:cf:32:ea:0a:54:96:65:fa:60:75:7d:18:86:86:
                    39:f3:de:1e:40:bf:9d:e9:0d:9d:7f:21:fb:d0:f8:
                    cc:02:7e:46:d9:6e:e5:e7:cc:d9:fc:d7:6e:ed:97:
                    ba:84:39:ab:03:36:53:54:4b:06:a0:f6:a3:d8:2a:
                    51:b7:89:16:3d:6a:6b:b1:26:a9:5d:59:7b:23:77:
                    c6:32:6e:f7:be:e4:c8:32:ad:dd:be:fd:22:3b:7a:
                    3e:a7:6e:75:27:93:7e:00:18:aa:07:32:b2:6f:7c:
                    b4:02:1a:ac:ad:e9:a1:78:6c:cf:49:ca:fd:14:38:
                    c4:fe:db:de:11:8c:80:49:d3:5a:e0:a0:fe:ec:74:
                    f0:75:8e:e1:5d:0c:f1:38:67:ae:9f:c3:d7:9e:1e:
                    ec:19:f5:89:3d:5f:63:b1:6e:cd:0b:4e:fb:13:6b:
                    00:ab:dd:13:6a:d7:94:b7:8c:46:61:49:17:40:9e:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:83:F8:30:32:19:97:1D:2C:E7:FA:B3:42:37:3A:F3:91:3D:54:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/0/A883F8303219971D2CE7FAB342373AF3913D545F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.8.0/21
                IPv6:
                  2804:1610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263265

    Signature Algorithm: sha256WithRSAEncryption
         09:e4:a3:77:18:7a:91:ae:b4:67:3b:ae:94:03:35:6f:19:e3:
         b4:e6:7e:9e:78:b4:13:79:8f:e9:f4:54:a4:82:2e:76:8c:1c:
         98:4e:8e:af:49:08:cf:68:8a:52:14:4c:d2:e6:b8:56:3f:00:
         0c:4f:56:21:ba:58:68:72:e8:66:09:e1:3b:a1:54:58:59:16:
         91:36:b4:5e:7a:c4:02:3e:da:1e:21:c2:1c:b8:0e:60:74:bd:
         f7:2f:ef:f7:63:aa:7c:ed:25:e3:7b:6e:9f:7c:7f:4a:53:0a:
         29:14:42:57:9c:6a:16:2d:c4:ee:33:95:66:d2:ff:0b:e0:f8:
         45:30:ff:0c:93:9c:6f:4b:01:c0:1c:17:ab:d1:5b:bb:66:e2:
         4e:bb:70:f4:3c:d4:52:c3:a0:8a:5a:f5:d2:01:6e:98:67:f8:
         c4:88:41:ad:30:25:6a:cc:4f:20:e1:6a:79:f1:06:4c:73:aa:
         94:ff:22:f7:0b:47:1a:b2:a5:b4:74:49:86:9d:73:76:8b:d9:
         7b:0e:85:5e:c6:90:b1:77:04:48:e7:63:5c:60:80:8a:cd:87:
         6c:a6:8b:61:83:e2:99:9a:e8:9a:11:2f:c9:9a:e4:e9:dc:aa:
         e0:90:76:53:5b:21:ff:f2:e7:2f:66:79:88:3a:f4:c6:c1:15:
         f4:b8:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----