Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer
File:                     AF919E5DD91249FEC8AC8474B557DF7E72490802.cer (raw, json)
Hash identifier:          lK3gADTVhZl5ybJ+yfcHLhfpVEV7Bq6bShWlnfCZEa0=
Subject key identifier:   AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       112704CA6E32845E53CE183FB694360D21E661F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 01:05:11 +0000
Certificate not after:    Mon 01 Jul 2024 01:10:11 +0000
Subordinate resources:    AS: 268791
                          IP: 45.172.64.0/22
                          IP: 2804:5ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:27:04:ca:6e:32:84:5e:53:ce:18:3f:b6:94:36:0d:21:e6:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  3 01:05:11 2023 GMT
            Not After : Jul  1 01:10:11 2024 GMT
        Subject: CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:fa:88:8a:c5:cd:46:75:ae:2a:bc:17:7d:
                    f3:03:f8:27:b0:4d:8e:80:fe:68:1c:4b:67:0b:49:
                    d1:8f:74:83:ce:28:ca:66:ee:4d:b1:e3:5a:fc:33:
                    13:4c:31:ef:12:e5:5a:db:d4:76:ad:4c:7b:7d:04:
                    55:5c:cb:a4:b3:5f:a2:fc:97:86:a9:e1:7f:ee:4f:
                    a7:1e:1c:e8:54:71:7f:61:3e:71:8d:91:6a:07:1a:
                    4d:8d:fe:33:b3:63:dd:6c:ac:40:09:33:0e:b7:2c:
                    33:8d:1a:65:e3:46:ca:45:28:50:0d:c8:85:76:bd:
                    7f:d4:38:2f:26:58:f0:8f:27:d4:7f:15:1d:0a:89:
                    5c:fe:2e:a4:b7:37:d8:e0:79:52:72:6b:60:55:ec:
                    81:58:d5:75:1d:62:f4:2c:00:32:95:c1:1e:a4:be:
                    1b:9a:5f:42:41:1c:c4:2e:38:af:89:ae:ed:0c:7f:
                    93:a1:e4:17:11:b6:ce:ea:24:3e:37:fb:a0:8b:f0:
                    cb:01:41:c4:31:65:d1:09:5b:6c:e7:a3:2a:77:62:
                    be:f6:6c:b5:b2:0c:c3:b0:2a:d4:41:96:b6:32:7a:
                    34:c3:36:1e:81:c3:1a:c6:0c:69:c5:a0:bf:67:c5:
                    c0:55:54:58:e5:75:5f:3f:5d:40:6e:ee:33:b1:0b:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.64.0/22
                IPv6:
                  2804:5ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268791

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:0d:f8:2a:36:4f:7f:b0:fb:63:a3:c9:a8:f2:e0:9e:97:
         7a:45:0f:c4:e2:b4:39:72:3a:c5:0e:bc:0f:5f:07:07:57:12:
         ba:0f:53:94:30:ad:9c:50:d3:a8:76:21:7c:e6:d6:3e:6f:f8:
         84:e5:ad:17:5c:9d:1d:2b:a0:30:20:f5:73:ab:73:6a:1e:8c:
         cf:68:7b:5d:bb:ca:94:a2:91:f8:17:01:09:5f:ec:ed:b1:f0:
         ab:36:8f:cb:79:4a:2f:6a:38:14:4a:60:c6:ea:1a:57:af:6f:
         fc:75:47:46:d3:97:00:fc:51:22:34:4f:68:ee:90:db:20:69:
         8f:c5:87:38:6a:17:fc:2c:0f:82:a3:84:1b:48:65:43:35:f3:
         0a:4f:61:1f:5f:bb:1c:16:42:70:43:6f:1c:1e:3e:cf:cd:01:
         f5:e1:21:e2:d4:85:31:14:f1:e1:13:c7:c0:a3:48:e0:55:5e:
         5a:00:06:fd:db:d4:a7:bf:83:1e:cc:b6:61:e2:c0:0e:70:0f:
         15:d2:73:64:af:c1:e4:5f:a7:35:40:6a:a7:4c:0a:6c:4c:35:
         45:7a:3e:78:19:45:d1:dc:9e:24:42:0f:80:36:49:2a:d4:58:
         a2:9c:a9:a5:0a:ae:46:63:3a:a8:05:21:61:f9:ae:81:fd:49:
         1f:1a:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----