Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer
File:                     C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.cer (raw, json)
Hash identifier:          GWN3Yztehj8QXEse5DYh8fJhXsmo38zL4RQoVQ5VA1c=
Subject key identifier:   C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EEC191E06E53FA61EDCD418714C9B4F538A1C9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 20:00:11 +0000
Certificate not after:    Tue 23 Jul 2024 20:05:11 +0000
Subordinate resources:    AS: 263131
                          IP: 177.128.140.0/22
                          IP: 2804:1738::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ec:19:1e:06:e5:3f:a6:1e:dc:d4:18:71:4c:9b:4f:53:8a:1c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 20:00:11 2023 GMT
            Not After : Jul 23 20:05:11 2024 GMT
        Subject: CN=C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:40:88:81:1e:0d:45:5b:5c:32:66:79:5e:
                    4e:68:88:b3:a6:17:66:69:9e:58:a8:8a:ad:7f:81:
                    bb:9f:1d:b5:1f:9f:19:e6:78:99:ac:5a:d2:cd:2b:
                    18:b2:bf:74:77:fc:76:74:e6:03:88:4c:eb:59:a3:
                    cd:f8:aa:06:21:e0:27:5d:1b:16:6f:72:69:5d:87:
                    a8:5e:4f:fe:ec:e0:1a:45:51:bd:e2:9f:fe:1a:0b:
                    49:b8:07:ba:c7:ed:dd:a8:ec:37:70:fc:08:fa:92:
                    3c:3d:d8:4d:a0:f3:f4:3e:0d:77:96:eb:76:15:6d:
                    a0:d7:fa:f1:fb:ee:70:67:79:e5:d6:00:7b:a9:2a:
                    12:96:0e:db:83:93:9d:21:73:3e:c3:a2:58:d7:fc:
                    7b:46:d1:bb:4f:d0:3d:c2:c3:cb:fd:9e:a9:d9:8c:
                    d5:71:db:99:10:be:c3:e9:45:d8:bf:df:0e:a4:de:
                    2c:84:55:43:6c:73:97:65:86:c0:bd:e7:d2:37:90:
                    01:50:f3:5b:19:1f:28:7c:86:3e:e3:9d:c3:8e:44:
                    07:e2:ce:56:92:a6:e9:86:ae:1d:87:fd:5b:f4:72:
                    f4:31:0e:63:8d:3c:0a:1c:7f:4c:18:01:b1:bd:74:
                    bd:11:c2:41:21:6f:6f:74:d5:83:e4:8c:27:c9:2b:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:1E:7B:A6:EB:CA:7F:BC:62:59:C9:6B:99:1D:32:95:C8:46:B7:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Zc1khj4cMeUVCWbGVojY1UnppfecwpeXtBcqas7eF1B/0/C01E7BA6EBCA7FBC6259C96B991D3295C846B7B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.140.0/22
                IPv6:
                  2804:1738::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263131

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:42:8f:89:c2:9a:fa:f4:01:e3:ac:2f:f4:13:01:0d:a6:
         eb:b5:40:1a:b3:66:87:7a:1f:07:c8:e0:f2:15:3a:e9:fe:82:
         bf:6f:8a:a5:65:e6:f4:63:8a:0e:88:7a:99:71:0b:08:29:ca:
         1d:a8:3e:c5:28:23:ac:01:5e:58:21:4d:78:6f:8c:40:c3:f8:
         91:1d:c7:30:de:1e:7f:01:9f:1d:81:b4:89:0e:bd:45:ef:85:
         b5:a5:f0:90:be:23:50:b9:f6:d2:1d:43:b3:4d:04:6c:fb:5d:
         e5:62:b7:c6:ad:69:ff:67:34:bc:3e:0f:60:43:bb:dd:c0:1f:
         61:e1:72:3a:3e:b2:e8:9f:29:63:c0:f3:11:d6:06:3c:b8:10:
         d0:5a:8b:be:64:2c:4f:16:4f:2b:75:3b:58:d6:ca:9a:84:f2:
         f2:70:a3:d3:14:df:39:9e:53:60:ab:71:18:fb:de:d2:a9:29:
         4b:4f:54:29:4d:e3:50:8d:b0:77:23:32:61:a3:fd:1c:38:3f:
         2f:7c:2d:a2:14:6a:da:10:70:c2:69:2d:fa:bb:28:24:76:e3:
         31:8e:73:ac:aa:f4:82:d4:07:22:0a:a7:0e:83:b0:ea:93:97:
         44:d5:4c:89:7c:b6:43:75:73:aa:d7:1c:03:ee:65:d9:6c:dc:
         61:89:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----