Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer
File:                     C8395D8D16513ABA5BCE3876BC86946E464F3BC7.cer (raw, json)
Hash identifier:          V+/5QAgSqy3wj218M8K5gHVQzvYu24C2uQx60aRB+T0=
Subject key identifier:   C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C991D4E9F0D5B881A0D9D1CA1BDD73BE77A0517
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 01:17:28 +0000
Certificate not after:    Wed 10 Jul 2024 01:22:28 +0000
Subordinate resources:    AS: 271336
                          IP: 177.71.100.0/22
                          IP: 2804:79ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:99:1d:4e:9f:0d:5b:88:1a:0d:9d:1c:a1:bd:d7:3b:e7:7a:05:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 01:17:28 2023 GMT
            Not After : Jul 10 01:22:28 2024 GMT
        Subject: CN=C8395D8D16513ABA5BCE3876BC86946E464F3BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:32:a8:ff:41:e1:64:a5:54:f9:61:9b:0c:
                    64:37:c5:1c:c3:32:05:85:71:1a:e1:0d:66:95:0d:
                    31:53:13:1d:2b:d8:28:8f:85:0c:54:b7:bf:d5:7f:
                    25:3e:1c:d3:1c:d2:c8:17:9a:d4:91:80:e7:c2:64:
                    07:7a:e0:4a:3a:d9:83:9c:d8:26:33:85:28:4f:88:
                    01:f7:54:f3:44:c5:eb:ec:22:37:8e:df:94:5e:36:
                    0f:64:bf:d8:c7:82:63:c6:6e:40:42:8a:8b:72:4e:
                    b1:43:f4:a3:11:75:a7:e9:b5:c1:b5:9e:ce:0d:c3:
                    0e:97:95:a4:e8:44:48:16:ec:71:3a:cc:ab:02:b2:
                    04:03:4c:ac:87:19:e4:4c:24:96:4a:37:ec:66:7d:
                    3f:12:64:13:62:d2:11:b2:ec:87:8e:e8:bf:e7:a6:
                    00:37:03:da:fc:0b:28:9c:ae:a6:ba:b5:90:81:31:
                    c2:43:0d:4a:0a:e1:51:01:6a:e2:f1:d8:12:a7:13:
                    a0:ae:c0:0f:d7:60:ab:2e:29:7a:09:88:99:5d:64:
                    20:68:ff:72:c8:35:35:80:4d:cf:9d:23:11:99:44:
                    6e:70:15:42:79:89:58:3e:39:ab:ae:7c:ad:4c:52:
                    ad:cc:92:14:50:8c:02:59:40:49:02:00:53:2d:e7:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:39:5D:8D:16:51:3A:BA:5B:CE:38:76:BC:86:94:6E:46:4F:3B:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/0/C8395D8D16513ABA5BCE3876BC86946E464F3BC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.100.0/22
                IPv6:
                  2804:79ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271336

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:57:2f:da:91:37:3e:af:67:e2:9c:e2:21:7c:7a:63:9f:
         64:cb:1d:22:0b:d2:66:d7:9e:ca:86:4e:3a:98:8d:0c:8d:7d:
         d7:bb:57:a8:be:1f:2b:55:23:52:8b:37:aa:b0:92:68:93:3a:
         bd:e4:66:1e:12:87:c1:20:18:09:f2:0c:69:f6:0d:b8:fb:ec:
         bf:f1:2d:bc:56:61:bc:0d:cb:12:5a:bd:b5:e4:ae:21:31:d8:
         0b:10:62:86:00:a1:f6:90:e2:2a:c9:3f:c6:cf:65:1f:1b:dd:
         df:21:ab:79:13:3b:c9:3b:c3:9d:4e:a4:4c:e9:74:a7:f8:1f:
         be:86:34:f5:32:3e:65:dd:95:5e:bf:88:00:26:ae:71:78:5f:
         43:15:fd:13:d2:f9:2a:66:86:28:72:0a:a2:31:c4:3d:75:c1:
         b5:98:af:69:7f:0a:a0:8d:f8:d2:e6:fc:b2:47:2d:50:2c:aa:
         6a:33:35:24:67:91:69:8c:c6:3a:e7:45:86:73:f3:29:c0:8a:
         4a:49:a4:7d:bf:1d:d5:ee:ff:2a:c7:d6:e4:f9:17:27:21:66:
         a0:b2:48:8e:88:84:5a:60:40:50:76:29:13:94:7f:64:c5:dd:
         33:42:45:cf:4b:99:43:14:7c:26:cd:8b:28:52:ca:2a:f7:fb:
         45:36:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----