Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer
File:                     B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer (raw, json)
Hash identifier:          dFHlxgDCAQe8k4HzobnwO55RNjRZwBV7xi61xqcznvo=
Subject key identifier:   B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4ADEC6BFD8500E2B736975A4E0542A39A8F0D8AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Jun 2023 17:42:53 +0000
Certificate not after:    Mon 10 Jun 2024 17:47:53 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:c6:bf:d8:50:0e:2b:73:69:75:a4:e0:54:2a:39:a8:f0:d8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 12 17:42:53 2023 GMT
            Not After : Jun 10 17:47:53 2024 GMT
        Subject: CN=B56F61CABD36A7D97FF8B7B2918E005EB040CA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4b:23:97:c9:b0:5a:bd:8b:e2:64:4f:dd:ff:
                    ea:55:e7:46:19:f3:e3:af:3b:c8:36:05:63:00:86:
                    66:3b:80:94:af:20:37:05:af:33:c1:a5:ba:cb:c8:
                    67:97:e1:d6:42:dd:ec:f0:aa:ee:75:de:77:1d:70:
                    35:6c:47:ee:7b:03:e1:b2:1d:9e:49:ee:48:d9:3b:
                    a9:46:05:69:b4:ac:bd:ca:04:72:67:e2:57:50:d0:
                    0c:69:60:40:a4:5b:e9:35:62:4b:08:b7:44:81:16:
                    52:2f:5f:89:f7:37:49:4a:c6:ec:40:7c:af:86:53:
                    8a:78:3c:04:3e:2e:a4:69:5b:83:34:7f:bd:f6:d3:
                    5e:50:62:05:d3:1b:62:d5:4f:9e:f9:eb:d2:0b:85:
                    82:d2:9a:a4:69:1f:79:d0:21:50:81:70:d2:21:3d:
                    81:5c:96:7d:a4:2b:32:26:0a:e1:2c:52:da:20:3a:
                    34:98:f3:13:e3:41:28:b0:75:ce:a8:0f:3d:4f:9d:
                    4d:1d:57:2c:65:4c:8e:85:f9:6d:a6:1b:87:5c:53:
                    7c:1f:4d:81:d7:c5:17:de:28:e7:56:fd:a3:0b:64:
                    bd:95:42:8b:70:a5:6c:61:9d:47:93:af:5c:85:39:
                    d2:d5:c5:3a:8e:f7:fb:65:d4:24:07:f9:d8:bf:56:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         ad:41:db:9f:53:b3:26:69:34:54:1d:69:48:88:93:fd:b7:2e:
         3b:d2:83:2e:f4:64:a2:41:24:47:a2:1c:fe:40:7f:09:f1:68:
         f9:ab:d2:b9:f3:7e:57:fe:39:f1:87:1f:56:3d:00:7f:eb:25:
         cc:f6:5d:05:76:72:a3:f5:ae:a2:dc:97:3d:52:fb:2e:e9:56:
         fe:58:36:22:2e:cf:93:17:38:8d:4f:21:5c:d1:f5:2e:16:c0:
         b9:43:b1:25:50:56:9d:3b:e3:af:51:5b:f5:84:04:f1:8b:3a:
         07:7e:3b:03:02:b9:ba:ee:4a:d0:56:36:6d:04:e9:a7:f3:3c:
         f8:0c:50:6e:13:68:8f:df:6e:d1:a6:12:16:e9:a8:d1:f9:17:
         e7:a7:46:74:b3:53:34:1b:4d:0a:45:70:1f:5e:6f:f2:f2:f8:
         f0:83:ec:85:99:df:7e:d2:cd:98:fa:23:84:25:aa:69:85:f5:
         26:cd:d6:cd:27:a5:b7:48:c8:b9:1b:2d:20:31:f0:ad:19:9e:
         0f:10:62:aa:3b:50:05:78:58:f1:3f:6b:78:0e:a0:23:1e:5e:
         e2:72:18:e2:a8:0d:61:cf:17:f1:78:11:43:c3:62:bc:e5:ed:
         75:a2:3d:d4:31:c0:2e:59:bb:34:a8:f9:68:51:57:36:56:44:
         de:94:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----