Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer
File:                     C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.cer (raw, json)
Hash identifier:          ENW7V8pTCT2l5EtkYscYd8dddPe7dZAY8rtvKCmX7lA=
Subject key identifier:   C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       716D666E7A2064D903922D3AC2ABDE96D3ADCD4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Nov 2022 13:01:48 +0000
Certificate not after:    Wed 08 Nov 2023 13:06:48 +0000
Subordinate resources:    AS: 271214
                          IP: 179.51.188.0/22
                          IP: 2804:7800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6d:66:6e:7a:20:64:d9:03:92:2d:3a:c2:ab:de:96:d3:ad:cd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 13:01:48 2022 GMT
            Not After : Nov  8 13:06:48 2023 GMT
        Subject: CN=C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:08:c4:f6:b7:57:0d:74:4b:bc:b0:47:75:
                    36:aa:4f:98:b7:c9:9e:70:f2:7f:a9:ff:d9:bb:f3:
                    e6:fb:bf:1c:79:63:89:90:86:bf:e5:e1:30:92:b2:
                    25:1c:2e:6d:b5:39:86:5c:cd:20:62:b7:c8:70:53:
                    19:16:1c:1d:9a:ea:01:6d:3f:51:cf:01:d2:d3:e5:
                    6d:38:cf:43:13:c8:f3:bd:f0:f1:70:77:e4:85:ab:
                    ec:bd:43:91:ba:1f:eb:6b:d7:fe:a8:01:c1:8c:8b:
                    fd:69:85:e3:e4:bb:13:18:54:a8:26:d1:d1:21:8f:
                    b1:6e:de:b9:e5:d1:a8:54:44:78:13:02:76:61:eb:
                    ab:e6:a8:73:d6:f7:67:47:50:20:a7:03:56:33:27:
                    9a:46:cf:c3:ac:18:56:26:48:fd:cf:c0:b3:6d:4e:
                    5a:1d:55:35:19:24:44:76:67:2f:d8:ac:79:2f:73:
                    74:d0:05:d6:58:a2:25:c1:9f:7e:39:7c:9b:d9:ca:
                    50:5b:db:23:45:62:6a:7c:30:e1:39:30:95:da:c6:
                    a6:b2:8c:90:2f:7f:b9:90:0a:e8:44:ba:2d:3c:08:
                    af:7d:a4:3e:36:a1:f6:3e:1e:60:6a:c8:86:20:74:
                    8f:51:17:50:b7:fc:2a:c6:2a:75:72:9f:b7:c7:d9:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:89:A7:A9:38:C8:09:69:CD:8A:A4:2F:6D:CD:AA:BD:9E:5C:EB:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/589yA5PVP2ZX7F1doCodSBsPRvP18nd6uHXNJGE3WARc/0/C389A7A938C80969CD8AA42F6DCDAABD9E5CEBDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.188.0/22
                IPv6:
                  2804:7800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271214

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:af:6d:51:b3:9a:2b:22:fd:6c:bc:80:cd:1a:20:70:aa:
         d0:49:c6:92:14:4f:f8:3a:61:dd:88:5c:4f:8e:06:b4:49:9c:
         54:33:4e:a6:2c:b6:fe:db:34:6b:b0:58:65:57:5b:59:46:19:
         d7:ff:4f:ca:cd:44:d1:56:b1:c4:4a:07:dc:54:c8:e9:8d:d4:
         d1:4a:b5:e9:e0:f1:03:b3:29:c1:fe:d2:4b:ff:35:29:96:f8:
         a2:31:f6:dc:b2:c5:76:61:80:05:a6:b8:7b:4e:6e:14:d8:cc:
         b5:1f:be:0c:67:ea:b1:f0:80:47:e4:a5:99:36:d8:23:ab:84:
         d6:8f:ed:ca:c9:55:9c:79:89:82:ca:f6:de:38:95:36:df:fa:
         9d:fd:8e:b8:aa:c2:97:88:c7:91:19:d5:5d:9c:6e:ae:f8:83:
         e0:d8:ef:c8:23:e3:0a:d0:17:3d:ec:b7:0f:f7:6a:57:29:0c:
         ee:6f:59:10:3b:85:73:49:43:cf:80:6f:d5:62:45:dd:e4:f6:
         0f:4f:f0:80:52:67:aa:4b:0f:3a:30:fc:3e:34:40:73:4a:41:
         69:ac:fa:0c:ed:76:ff:9d:71:7e:43:f0:b4:78:38:6a:51:ae:
         05:d7:fd:4f:ed:e7:3e:36:91:12:fa:61:81:e8:79:e8:e9:01:
         0e:6e:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----