Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B997567320B71B82AA20799F07ED9148A2F0EDED.cer
File:                     B997567320B71B82AA20799F07ED9148A2F0EDED.cer (raw, json)
Hash identifier:          mZeIhYSbol78fP4sPzaj5Ky/+Qfp+2DZDFaCupjWGQs=
Subject key identifier:   B9:97:56:73:20:B7:1B:82:AA:20:79:9F:07:ED:91:48:A2:F0:ED:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6268993A5FF415EAAD4A944F1F7C587554C108BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/B997567320B71B82AA20799F07ED9148A2F0EDED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 14:20:05 +0000
Certificate not after:    Thu 20 Jul 2023 14:25:05 +0000
Subordinate resources:    AS: 52589
                          IP: 177.87.44.0/22
                          IP: 2804:1ad8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:68:99:3a:5f:f4:15:ea:ad:4a:94:4f:1f:7c:58:75:54:c1:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 14:20:05 2022 GMT
            Not After : Jul 20 14:25:05 2023 GMT
        Subject: CN=B997567320B71B82AA20799F07ED9148A2F0EDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:18:bc:0e:67:b5:6a:0b:73:1b:10:03:c4:
                    69:b4:e2:94:64:96:b3:41:b8:5f:b8:f6:c3:5a:b9:
                    1b:78:43:2b:b0:e0:76:e4:87:b5:db:08:20:a0:c0:
                    5f:be:d9:76:c7:37:ad:de:f7:0e:75:f2:2b:4c:48:
                    87:16:05:01:ae:dc:58:0c:0f:e2:e4:97:d2:4a:c6:
                    36:ea:5c:7b:b8:c2:9e:f1:7c:f5:8d:68:d2:4e:16:
                    32:d7:db:d5:a3:c4:6a:de:bd:dc:1d:5d:87:70:cb:
                    17:eb:4e:6a:77:21:6a:81:91:71:a2:03:36:f0:98:
                    69:65:57:df:f6:6c:30:3b:cd:d3:63:8f:fd:54:70:
                    4b:2c:f7:e8:42:42:b3:33:eb:40:98:e6:e6:bc:f7:
                    fd:b9:3c:df:51:d5:53:1c:07:29:1e:31:99:35:e5:
                    4d:3a:bc:13:9f:ff:1f:62:0a:ee:d0:e9:03:16:ac:
                    79:fa:05:61:c5:b9:ae:59:d1:e0:66:1d:42:1e:8c:
                    3c:22:02:a3:68:b2:45:ed:68:e1:5a:2f:f2:46:38:
                    79:1a:3d:5b:c7:5c:f4:6c:3c:94:30:aa:d8:c9:b7:
                    57:43:28:77:55:37:2d:73:e2:2b:3a:40:ae:bd:26:
                    cd:1a:be:cf:d2:a8:ec:26:55:e2:57:2b:3f:0d:13:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:97:56:73:20:B7:1B:82:AA:20:79:9F:07:ED:91:48:A2:F0:ED:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/0/B997567320B71B82AA20799F07ED9148A2F0EDED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22
                IPv6:
                  2804:1ad8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52589

    Signature Algorithm: sha256WithRSAEncryption
         b0:85:c7:33:15:20:bd:de:4e:a3:24:84:f3:c9:fb:4a:bc:84:
         72:22:07:ea:63:9a:24:62:7c:b5:17:97:8a:de:e2:69:f5:17:
         d8:78:47:f7:ca:0e:76:a6:4b:4b:50:32:bf:b3:d6:22:85:17:
         22:b0:25:a5:88:96:53:b6:8f:a2:2c:2c:07:77:37:ea:c3:c1:
         89:01:8f:af:a6:86:54:36:c8:86:94:30:a2:96:8f:e9:2a:2b:
         e1:15:fd:f3:1b:6f:7b:1a:9d:2b:ce:f1:8b:e3:31:70:00:0a:
         65:d0:a4:1e:fe:fd:3e:e6:35:c0:1b:55:89:f4:a2:71:0d:c8:
         12:80:85:21:60:37:ed:7d:c6:30:42:3f:3a:72:03:3b:21:2b:
         ec:e8:3c:40:b4:fa:30:4b:30:25:23:12:2d:15:85:06:65:42:
         b3:85:0e:90:f8:5e:9f:df:46:7c:30:94:55:14:4c:fb:99:b2:
         56:b1:04:f3:c6:5a:82:51:55:5c:66:61:83:c1:2f:f4:3c:54:
         71:d3:49:a7:9c:df:56:94:b7:4a:a8:28:87:35:8e:c7:7d:c3:
         98:19:ea:7f:c0:48:55:cb:14:84:e9:6b:15:22:a8:25:68:ac:
         cd:7d:79:cb:04:ff:3c:9d:31:4a:c9:e5:a1:ae:9e:e1:86:ab:
         34:00:3a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----