Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.cer
File:                     CAFC2131DEEA7214580D3F889B0C551E993D4B39.cer (raw, json)
Hash identifier:          wPMZBS5AaQOg+2qnfjYusTLL7Q/ASKpM7LAf/MZys9w=
Subject key identifier:   CA:FC:21:31:DE:EA:72:14:58:0D:3F:88:9B:0C:55:1E:99:3D:4B:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D44592B04DED189B4DB904C3C273681B6070F43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 14:33:56 +0000
Certificate not after:    Wed 05 Jun 2024 14:38:56 +0000
Subordinate resources:    AS: 265978
                          IP: 164.163.248.0/22
                          IP: 2804:40bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:44:59:2b:04:de:d1:89:b4:db:90:4c:3c:27:36:81:b6:07:0f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 14:33:56 2023 GMT
            Not After : Jun  5 14:38:56 2024 GMT
        Subject: CN=CAFC2131DEEA7214580D3F889B0C551E993D4B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:00:77:bd:a0:7b:f1:b0:49:e2:1c:e4:7c:
                    f9:3b:ec:7c:a4:d6:93:6a:7a:a9:91:f6:79:e9:cc:
                    1a:09:0b:21:72:8b:83:c8:33:a9:f0:27:a9:c3:38:
                    1f:2c:f6:46:24:0f:f2:cb:e3:d5:e5:d2:00:41:73:
                    24:4b:2a:15:77:dd:3e:9d:f7:93:e1:e2:1f:4d:01:
                    29:dd:6f:91:26:7b:dd:11:1b:ae:1f:17:27:ab:0e:
                    96:8b:82:b6:f8:6f:22:68:aa:dc:e6:f3:fc:a2:f1:
                    cc:6e:c2:53:c1:96:a0:8b:ca:43:85:58:25:2d:44:
                    b9:49:8a:71:55:cf:a3:20:e8:9d:6c:3e:fb:a0:0b:
                    8d:e8:c4:4d:d2:74:74:cc:2e:11:d2:eb:7a:4a:d3:
                    ba:0f:1c:18:83:76:cc:00:61:3e:df:b8:9e:6a:b9:
                    ae:83:9b:bb:d0:5a:9d:c0:04:dc:eb:b3:a8:69:77:
                    d9:4d:b9:8c:86:b0:85:89:48:07:f0:70:0d:12:94:
                    dd:3f:a4:36:9a:a5:8a:0c:5c:94:39:24:d2:be:27:
                    09:68:25:0c:49:7a:d3:f6:40:3b:e0:7f:ce:e5:18:
                    1a:bf:2f:9a:c1:4e:17:21:3e:46:12:b5:0e:0c:23:
                    28:63:7f:94:80:32:80:9f:bf:55:f8:e9:45:63:f5:
                    4a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:FC:21:31:DE:EA:72:14:58:0D:3F:88:9B:0C:55:1E:99:3D:4B:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/0/CAFC2131DEEA7214580D3F889B0C551E993D4B39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.248.0/22
                IPv6:
                  2804:40bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265978

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:94:f9:ab:3e:b9:88:c1:50:11:69:89:b1:17:4e:8a:b7:
         e5:90:68:3e:84:64:de:4d:5e:77:d2:50:67:95:34:fc:d3:ba:
         ce:a7:55:b7:fd:55:7b:42:37:b7:79:0e:9b:d7:b1:84:66:f9:
         62:a3:9f:ee:8d:4b:23:e3:e8:a5:d9:8d:bd:94:8d:95:97:8f:
         01:b2:80:83:a8:11:3c:b5:f4:a4:ea:da:b5:25:ee:bf:7c:6a:
         b3:46:c9:de:e4:dc:ef:50:e5:99:a4:be:f1:9f:00:a5:38:a5:
         4d:07:6b:bc:32:fa:fe:cf:f3:e5:e7:5d:f7:74:46:a6:b0:9a:
         5b:2a:9d:54:d6:16:a6:bb:63:69:8c:71:ae:ba:01:96:0d:3f:
         cc:91:38:9c:8e:12:29:09:4a:7c:41:b7:b3:c9:45:28:a8:a4:
         27:ca:d3:f9:fc:c3:ff:1a:fb:3c:38:f8:7f:ba:eb:03:8b:4f:
         54:ad:24:88:96:f3:1f:8f:8b:72:35:fb:bf:b3:a4:af:5b:10:
         b6:7d:59:75:0d:6c:05:e4:3b:c5:4e:cf:90:1f:72:d7:f7:47:
         9e:28:a2:da:93:16:4e:fc:3c:11:03:98:a0:64:41:8a:81:fc:
         2c:c6:ba:30:71:52:9b:c9:4c:ec:ef:8e:b0:35:aa:cc:a0:8a:
         fd:59:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----