Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
File:                     C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer (raw, json)
Hash identifier:          e5536a3PXaRmJxNH2Mgicsi86oU2Wn16SQN9+fDsm04=
Subject key identifier:   C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F1C0CF151CF94B2F8933F409BA3BE4B7D0A8405
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 14:04:22 +0000
Certificate not after:    Wed 24 Jul 2024 14:09:22 +0000
Subordinate resources:    AS: 271273
                          IP: 45.229.132.0/22
                          IP: 2804:78e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:0c:f1:51:cf:94:b2:f8:93:3f:40:9b:a3:be:4b:7d:0a:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 14:04:22 2023 GMT
            Not After : Jul 24 14:09:22 2024 GMT
        Subject: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:63:47:cd:45:52:67:65:39:67:ef:e2:e5:
                    b5:d4:a0:8e:7a:6f:ac:a8:18:2e:0c:42:01:d3:6f:
                    00:d5:da:0e:31:f1:55:60:fd:d5:b6:45:3a:c5:18:
                    2d:fe:a3:44:e2:9c:45:ea:bb:41:30:c3:18:c7:50:
                    46:c7:c5:51:0d:dc:c8:69:b4:d6:4f:fa:b1:50:36:
                    91:b8:b0:f5:5a:b0:5d:78:d1:04:6f:96:64:9c:b8:
                    72:26:eb:5e:25:76:99:91:20:ac:99:52:a0:82:1f:
                    00:b3:da:55:df:24:f1:4e:52:0e:3f:6d:9d:5e:60:
                    47:be:cc:7b:f3:da:41:9a:6c:15:61:5d:9d:42:e7:
                    5f:23:2f:4f:ae:c3:da:c6:e0:4a:20:67:b7:4e:e1:
                    5f:a1:0e:2f:6b:32:0c:fb:f3:c4:7f:e9:04:e5:91:
                    21:7a:eb:3b:ef:88:b5:7f:ed:ea:fe:3e:de:a8:2d:
                    28:51:7d:b1:12:6e:06:57:a5:68:36:64:14:0e:e5:
                    35:d9:9a:21:0c:9d:33:45:00:75:43:72:d2:f2:bc:
                    7c:69:79:66:7e:65:0d:8d:21:cf:b6:18:36:f2:60:
                    0c:d3:8f:28:48:77:da:a9:d2:eb:4a:1b:52:2e:ef:
                    2a:d1:46:70:b3:c0:9d:ee:98:2b:c4:2d:e1:8f:16:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.132.0/22
                IPv6:
                  2804:78e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271273

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:88:8a:dc:54:20:a4:56:10:1e:9e:9d:65:0a:d3:99:b8:
         a9:5c:bc:52:ab:c1:d0:5e:ee:82:9b:e4:64:c5:30:9e:1e:7a:
         45:27:9a:da:c1:3a:27:9e:14:00:09:ff:94:1a:ca:61:21:bd:
         1b:42:ab:44:6a:b9:1c:0f:b3:73:39:e3:d8:19:c2:c0:07:06:
         7f:34:af:dd:24:a7:ac:23:9b:eb:c3:f3:89:7d:c3:d9:7a:fd:
         19:36:9b:c6:4d:4e:e3:ad:e8:83:f7:1d:94:8f:07:6f:f2:a2:
         72:f4:25:9b:c8:48:d2:21:a6:18:17:dd:2b:72:01:7d:c8:42:
         b0:1d:61:26:d8:70:c0:24:68:24:bc:f3:07:10:ba:10:25:fb:
         8d:93:bf:91:06:f4:bc:f1:db:05:ed:7b:5f:61:44:74:72:0a:
         22:42:c0:76:fd:67:fa:8c:45:34:c5:f9:a6:0b:09:74:9b:cf:
         6f:f3:5d:bc:28:e5:62:ad:83:c4:b7:42:f2:1d:6a:3a:aa:7e:
         9c:c7:b9:64:5b:5c:5c:3a:53:71:78:12:b2:af:66:48:2a:aa:
         ce:72:ca:d9:ec:8d:fa:c4:ee:d8:4d:f3:1c:a9:67:4b:4e:ac:
         82:7a:5f:76:23:eb:a5:96:e2:2e:a6:10:ee:bc:21:3e:f9:47:
         ed:ad:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----