Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer
File:                     B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.cer (raw, json)
Hash identifier:          7tStsb+JSrfvaW3JU44XkVFhdcOT8HA24lATC6m4upk=
Subject key identifier:   B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1238A6D9683B8C39EF565AF6C70C78E07BFB8C44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 17:34:26 +0000
Certificate not after:    Fri 15 Dec 2023 17:39:26 +0000
Subordinate resources:    AS: 268529
                          IP: 45.162.48.0/22
                          IP: 2804:529c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:a6:d9:68:3b:8c:39:ef:56:5a:f6:c7:0c:78:e0:7b:fb:8c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 17:34:26 2022 GMT
            Not After : Dec 15 17:39:26 2023 GMT
        Subject: CN=B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:e3:75:7a:90:94:f7:42:8e:ac:74:84:bd:
                    21:4b:ff:8e:2a:02:4b:f1:f0:fe:de:67:53:fc:9e:
                    51:78:23:50:25:20:a5:48:44:0b:9b:8e:6b:ff:04:
                    1c:e7:5a:09:0d:2e:c2:52:5d:ba:4f:37:ea:42:4f:
                    39:75:2a:a6:49:03:92:be:ff:75:3d:1e:ce:ec:30:
                    4f:3f:a3:1d:ce:08:41:41:31:cb:4d:35:de:64:9f:
                    09:f7:79:31:0c:91:b8:a3:0b:75:99:17:5e:43:08:
                    8c:4c:76:64:13:cf:22:41:aa:ed:98:ca:8e:3e:ba:
                    0f:d4:02:11:80:fd:f1:13:41:fc:4f:0b:ec:a2:4c:
                    3b:4a:53:e4:08:f4:6d:48:c9:b8:ec:9a:a9:dd:9b:
                    46:42:82:cb:20:fd:be:54:d1:23:09:7c:82:a7:ee:
                    f6:58:e6:61:3e:46:1b:de:a3:69:b7:27:c5:d2:9a:
                    8f:a0:54:2c:e7:36:75:1f:54:b1:27:55:54:7f:cc:
                    eb:a7:be:08:c4:15:09:56:8c:cc:ab:72:fe:e5:c9:
                    4e:9e:d8:c5:d0:8d:bb:fc:ca:2f:92:ad:1e:8f:0a:
                    a8:92:67:17:4f:fb:22:71:7c:45:18:b4:96:a2:86:
                    8a:d3:a3:42:d2:53:28:68:b8:49:4e:41:e9:b6:e1:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:DE:D0:BB:11:A7:9F:1A:40:E8:D4:D5:A7:BF:83:BC:EF:BE:4F:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B8DED0BB11A79F1A40E8D4D5A7BF83BCEFBE4F91.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.48.0/22
                IPv6:
                  2804:529c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268529

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:44:d5:a8:64:da:43:6e:22:7b:5d:23:e9:ee:59:87:1e:
         9f:f0:cd:08:be:c4:76:e3:1a:49:2e:89:ee:c3:2a:61:e4:be:
         ea:4e:2e:65:f3:a3:7c:56:46:3b:79:df:dd:ed:08:3f:42:ba:
         6d:2a:0e:d2:dd:04:df:1c:e3:cf:6c:a0:d7:6f:fc:af:7b:8f:
         a4:5d:2f:3d:24:78:62:f6:5f:ac:6f:a8:b3:16:da:ef:5d:9b:
         79:b4:4c:bb:ee:64:35:60:e3:f1:97:21:d5:30:55:db:d7:33:
         63:9f:ff:96:58:ab:a2:67:41:2b:25:ce:e3:34:c8:0f:7f:a8:
         6d:27:af:28:6a:e9:f2:9d:9f:20:ca:bb:89:54:77:3e:53:4d:
         d6:06:7c:fd:d5:e7:a7:84:3d:fd:b2:b1:89:a9:e8:ae:a7:95:
         4e:80:90:58:66:ab:a7:50:2b:0d:d5:a2:f6:4e:ff:9c:e1:a6:
         d9:fd:c5:86:e1:d9:c7:54:20:5a:f2:f6:2a:55:ba:74:b9:ea:
         47:75:52:c0:b1:04:37:fe:37:1f:13:8a:11:0d:8d:81:8e:e5:
         55:0b:99:a8:65:82:8b:df:3b:46:9e:87:43:c1:af:b0:01:e5:
         0b:55:5c:13:fc:83:39:da:76:e1:96:93:b2:21:37:8e:63:b7:
         22:0c:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----