Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.cer
File:                     B181A11248DDCC042E5C8D4FBA61452301CB2829.cer (raw, json)
Hash identifier:          mjGn6Srj0YrCbakiy4m+cD4z60K7qXygPcMgdtvX/vI=
Subject key identifier:   B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0196003393CBBD8C28349A597B98F1B2974EFE8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:25:09 +0000
Certificate not after:    Mon 16 Sep 2024 17:30:09 +0000
Subordinate resources:    AS: 265429
                          IP: 168.195.80.0/22
                          IP: 2804:33fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:33:93:cb:bd:8c:28:34:9a:59:7b:98:f1:b2:97:4e:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:25:09 2023 GMT
            Not After : Sep 16 17:30:09 2024 GMT
        Subject: CN=B181A11248DDCC042E5C8D4FBA61452301CB2829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:44:53:2d:83:bf:84:06:1b:0f:71:94:18:
                    c1:43:3a:e4:5d:67:96:04:9a:5e:a2:39:10:e4:58:
                    52:1e:71:f0:30:f5:ac:5d:54:eb:79:f4:00:99:63:
                    e4:f3:4f:29:0a:52:89:06:f9:2f:d0:f8:70:1f:04:
                    a1:b0:fd:8d:2b:4a:84:77:e6:fe:e9:f9:89:0e:09:
                    82:1d:d6:1f:b1:75:ac:ba:56:46:bb:f6:25:8e:d5:
                    2a:6b:7f:0e:3d:58:3b:89:78:56:af:65:b1:af:89:
                    bc:1b:cb:c4:e1:5a:00:38:90:dc:93:f9:f5:52:f3:
                    dd:e5:bd:cb:17:81:22:ad:c2:84:32:11:1f:63:66:
                    c0:c2:07:ba:9d:4c:79:d8:48:b2:57:6b:26:3c:13:
                    1f:b5:3a:ec:74:61:62:c1:d9:65:5c:7b:c5:b5:c3:
                    e3:4c:d0:f5:69:d8:77:fa:d4:d2:c4:fb:c3:67:1b:
                    46:1d:03:29:4d:c8:9b:db:e3:ed:65:fc:a1:75:3f:
                    96:fc:b6:5c:d9:aa:98:24:ea:76:3c:ce:ef:02:b3:
                    21:a4:68:0c:b1:05:59:7a:99:b0:1d:b0:f5:4b:ea:
                    8a:1f:1f:bd:fd:be:67:bf:2c:a2:1e:f3:2b:76:a9:
                    35:29:20:a0:59:90:ae:5d:96:5b:01:fb:5f:e5:20:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:81:A1:12:48:DD:CC:04:2E:5C:8D:4F:BA:61:45:23:01:CB:28:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/0/B181A11248DDCC042E5C8D4FBA61452301CB2829.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.80.0/22
                IPv6:
                  2804:33fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265429

    Signature Algorithm: sha256WithRSAEncryption
         9d:ef:2b:ff:41:e4:75:43:1f:62:6e:b7:20:e2:d7:fd:af:04:
         a2:26:e0:18:d7:56:ac:f6:59:ec:93:d0:cb:9b:65:4a:ed:c6:
         49:ad:00:48:55:a9:59:e9:17:96:36:af:81:88:0a:f3:ba:6d:
         34:f2:57:8c:68:d3:70:59:a8:5b:08:47:a5:37:e0:b9:0c:fe:
         76:20:7e:64:5b:43:3a:97:e5:60:2e:f9:cf:35:eb:a3:b3:fe:
         a8:5f:ba:4c:14:26:fa:94:fa:63:f4:cb:d2:6e:79:f0:5d:c1:
         57:3f:86:7a:f6:4f:bd:c9:8b:3d:fc:c8:bf:59:1c:67:90:cf:
         1b:c2:9b:cd:d7:0a:2c:56:b0:69:a0:d0:37:b3:3c:8f:25:6f:
         95:04:f7:30:46:3a:f8:9d:b2:e7:6f:e4:3d:86:19:9b:93:d1:
         35:5c:6d:ef:a9:a5:ca:01:65:bf:69:b9:f0:3b:16:a7:88:55:
         7c:ae:64:9f:03:79:44:63:28:a2:bf:f3:63:1f:d4:df:e4:b0:
         c4:bc:35:30:cf:79:49:90:5e:bb:87:dd:16:f5:a2:2d:14:41:
         55:4f:38:ca:a6:68:9b:6e:76:7c:e3:69:01:be:f4:52:21:6b:
         88:f2:f1:4d:6e:53:fd:cb:11:43:db:94:fb:23:c7:2f:23:14:
         ee:ce:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----