Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer
File:                     B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.cer (raw, json)
Hash identifier:          m3PQT/4B4Bq9Xp8Wsn7/1K392NaWjfP1NcURncyLJTk=
Subject key identifier:   B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D69F895C7F3F3537DD16FFBA2BCC0E98B2A35D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Jul 2023 17:58:14 +0000
Certificate not after:    Sat 06 Jul 2024 18:03:14 +0000
Subordinate resources:    AS: 268153
                          IP: 45.170.72.0/22
                          IP: 2804:58d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:f8:95:c7:f3:f3:53:7d:d1:6f:fb:a2:bc:c0:e9:8b:2a:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  8 17:58:14 2023 GMT
            Not After : Jul  6 18:03:14 2024 GMT
        Subject: CN=B71A74374C5B1B65B9457E02C3D72B8FD6E504D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:ab:82:ea:50:36:c1:2e:4f:a4:ef:99:b2:
                    2c:d6:00:b7:9f:62:c2:e8:26:42:b8:9b:12:9f:2d:
                    8b:22:7e:fa:01:92:9d:c3:65:16:38:b4:e6:60:be:
                    e9:ef:89:25:9f:86:9e:5a:6b:f6:69:65:dd:de:60:
                    60:8a:d1:93:c9:a8:cd:99:41:6b:e6:87:c7:c8:98:
                    b6:e5:80:6b:c8:c8:98:e3:fa:95:44:77:3f:82:5c:
                    41:9b:48:cf:bb:ef:78:a2:b1:3e:78:97:87:20:9d:
                    de:94:66:a3:df:2c:b3:63:42:b6:db:d1:ea:08:5e:
                    84:26:a3:a9:9d:49:2e:d8:ac:a9:45:e5:84:26:ef:
                    11:83:82:6d:3c:5c:1a:8b:6e:70:c3:7b:c2:9f:55:
                    ba:1b:c8:86:2f:0a:af:76:2c:17:49:66:ec:2a:5d:
                    7d:b9:ee:a7:b3:b1:cb:92:ee:08:68:9e:0f:2a:c2:
                    6a:47:46:df:35:ff:51:b9:3f:8f:3d:90:d1:49:fd:
                    2b:4d:71:df:25:cd:fa:64:3d:d3:e7:3b:58:12:5f:
                    0a:6c:93:c2:16:e0:c5:61:ad:ab:25:36:86:6b:a9:
                    a9:5f:ae:54:d4:c7:1d:33:41:02:a9:c1:3e:f1:a3:
                    ce:20:ec:09:e3:3a:27:e7:72:8c:de:fe:d6:03:41:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:1A:74:37:4C:5B:1B:65:B9:45:7E:02:C3:D7:2B:8F:D6:E5:04:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/B71A74374C5B1B65B9457E02C3D72B8FD6E504D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.72.0/22
                IPv6:
                  2804:58d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268153

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:e6:50:79:d2:c2:12:08:7b:f5:e4:6c:6e:e4:74:64:73:
         ea:a1:ed:90:8e:cc:ff:9b:b7:b5:56:e5:6f:e7:53:e1:2e:49:
         c6:82:34:c4:78:6e:2e:5a:0d:18:f4:4a:33:d4:76:d4:2d:ca:
         4a:45:2f:cf:7a:94:0f:9c:0f:e5:9f:04:c3:e2:09:a8:b5:16:
         b9:41:bc:84:cc:5b:ae:35:a9:dd:a4:55:8e:61:4c:bd:89:73:
         77:d9:0f:b5:98:c3:fe:ce:67:0a:b3:25:29:0d:6c:3e:b9:a6:
         91:43:b0:64:6b:88:8b:56:d8:e9:3e:47:8e:e5:c1:f9:06:87:
         e9:52:f0:2a:0e:ac:0f:cd:6e:bb:6e:31:c9:b1:23:bb:42:fd:
         d3:09:ff:14:35:40:b0:33:f8:69:1a:3b:de:cd:d2:5b:b8:12:
         43:bd:56:70:79:cc:9d:08:bd:28:9d:69:04:5b:2c:0b:81:4e:
         65:a0:50:15:a3:77:42:8c:f3:2a:eb:6d:08:f0:a2:d6:1f:80:
         a2:89:f2:60:e1:fb:db:91:30:3f:85:d2:de:f5:b7:0d:42:39:
         3b:5b:c6:9f:e8:19:41:c4:be:23:a9:2c:a1:b2:93:fc:73:5e:
         c0:f2:3d:16:25:44:6d:3f:db:76:d5:8c:ce:16:b1:01:cd:c0:
         48:3a:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----