Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.cer
File:                     C53DAE0DDA163BF4DBECE527E48DBD3078818811.cer (raw, json)
Hash identifier:          GaZXAB7DWPYByJ5OCdn+iIjDJiqlggwcWScogXSgWpw=
Subject key identifier:   C5:3D:AE:0D:DA:16:3B:F4:DB:EC:E5:27:E4:8D:BD:30:78:81:88:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       784CCD5F67ACE463314DD1FA8F219CE73FA31A34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Sep 2022 22:32:54 +0000
Certificate not after:    Fri 15 Sep 2023 22:37:54 +0000
Subordinate resources:    AS: 272228
                          IP: 189.126.128.0/22
                          IP: 2804:83e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4c:cd:5f:67:ac:e4:63:31:4d:d1:fa:8f:21:9c:e7:3f:a3:1a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 16 22:32:54 2022 GMT
            Not After : Sep 15 22:37:54 2023 GMT
        Subject: CN=C53DAE0DDA163BF4DBECE527E48DBD3078818811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:a7:85:97:fa:85:f4:c8:0a:b1:6c:df:73:
                    0a:19:2b:e8:e4:bc:06:7e:d2:fa:13:7e:e5:48:89:
                    36:f2:e5:1b:45:2c:ff:4d:c4:03:b5:43:81:5b:e6:
                    3d:04:44:f4:0c:ef:cc:de:7f:3c:cb:60:dc:82:64:
                    06:df:54:c2:0e:d3:17:9e:2a:17:49:39:e8:e7:4e:
                    df:a2:8f:73:41:a0:7d:07:d9:3f:90:80:1c:d2:5d:
                    b5:a6:0e:2d:66:d6:4f:f5:f0:86:4f:7e:d4:c5:6f:
                    52:b7:90:a4:c9:f7:46:32:cb:4b:f7:d9:f6:b5:31:
                    18:76:c5:39:22:27:ec:98:0f:ce:2f:95:cc:43:cc:
                    64:68:46:63:e4:4b:8d:1d:c9:3b:3d:ba:48:7a:55:
                    53:07:28:92:79:02:aa:9c:9e:b6:8c:d7:06:df:28:
                    fc:b7:6d:f9:62:74:1a:a2:9e:65:cc:7c:43:e1:0c:
                    29:73:2b:29:f0:3f:7d:99:04:c9:a2:29:bd:8c:97:
                    5f:29:cc:3e:37:79:de:69:d1:ff:fb:b9:9a:56:fc:
                    dd:f8:94:65:a0:8a:f4:20:bf:ec:0f:f7:d9:99:83:
                    1b:6b:05:24:a9:4f:9a:80:17:1d:a1:ec:96:e0:c1:
                    85:c9:9c:3b:4e:c7:b8:59:22:cc:cb:7d:5b:da:0f:
                    37:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:3D:AE:0D:DA:16:3B:F4:DB:EC:E5:27:E4:8D:BD:30:78:81:88:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/C53DAE0DDA163BF4DBECE527E48DBD3078818811.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/22
                IPv6:
                  2804:83e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272228

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:70:d4:99:08:95:5f:08:48:f9:03:58:c7:fe:ee:cd:b2:
         48:f4:2b:45:65:0d:64:86:7a:42:ea:c7:02:02:30:65:e0:63:
         4e:d5:12:52:0c:7e:67:2b:a7:f2:58:c2:39:b3:47:0c:8a:11:
         a4:89:ac:74:fc:17:e9:65:59:58:36:35:f2:e6:90:98:a7:1b:
         d6:a7:52:86:75:e5:1f:89:ed:b6:1c:d1:43:46:bc:a7:73:83:
         24:1f:1d:3c:76:79:18:b0:59:20:bf:20:7f:07:ae:c2:6d:93:
         5a:34:bc:b9:c6:9e:b2:63:4e:62:47:47:c8:b3:5a:8c:4c:64:
         d1:97:8a:76:08:13:e6:05:2d:3d:c1:4a:f1:9b:20:ef:e0:99:
         96:56:36:0c:48:c4:1c:3e:f1:fa:c1:84:19:e3:1a:5b:eb:75:
         d3:55:09:cb:ff:d8:a6:dc:0b:12:b2:80:f9:9f:93:7f:13:61:
         70:d1:67:74:a4:f4:4b:fd:c6:a7:18:38:53:d5:55:87:16:db:
         d2:f9:1f:df:ec:4b:66:6a:d4:41:a6:0e:0c:d1:32:cf:70:6b:
         e7:1a:35:77:f4:d4:d4:0f:7c:81:82:6a:77:0e:fe:bb:7e:d8:
         55:29:84:f4:a5:87:74:7e:ee:ee:5a:77:b5:40:53:d2:d1:1a:
         db:70:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----