Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBC415E956186D9CC61972979D5AC7B197F563BB.cer
File:                     CBC415E956186D9CC61972979D5AC7B197F563BB.cer (raw, json)
Hash identifier:          fxK0Z8yVZfBRqoKb5BSfcsLRDBTNdIVROl8soLYIgU4=
Subject key identifier:   CB:C4:15:E9:56:18:6D:9C:C6:19:72:97:9D:5A:C7:B1:97:F5:63:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       196B8434F4FB72AED38246DF7273D5F185238EA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/CBC415E956186D9CC61972979D5AC7B197F563BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 10 Jun 2023 21:27:52 +0000
Certificate not after:    Sat 08 Jun 2024 21:32:52 +0000
Subordinate resources:    AS: 52743
                          IP: 177.85.164.0/22
                          IP: 2804:65f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6b:84:34:f4:fb:72:ae:d3:82:46:df:72:73:d5:f1:85:23:8e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 10 21:27:52 2023 GMT
            Not After : Jun  8 21:32:52 2024 GMT
        Subject: CN=CBC415E956186D9CC61972979D5AC7B197F563BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:93:c5:2f:62:f8:0f:1d:d4:4e:a2:66:4a:
                    b0:a1:71:45:a2:56:df:cd:c9:d0:74:37:c0:3d:f8:
                    b4:c5:a3:d6:81:78:3b:d7:02:a3:61:d9:ea:83:ab:
                    2d:ec:cf:e1:8d:a6:ef:69:55:c6:7a:fa:80:ea:da:
                    42:b9:83:47:a0:64:a1:0f:74:1a:04:28:e2:8f:4c:
                    d8:ee:f6:ef:3b:05:05:88:c9:dc:39:32:67:f4:80:
                    73:64:d2:6c:37:ef:ba:30:6b:fe:33:3e:44:62:39:
                    69:13:15:d9:f9:fe:80:75:f2:18:0b:ca:14:91:48:
                    35:a4:bb:cf:27:ba:3a:7f:14:01:23:0c:3d:88:dd:
                    8b:ed:a0:1a:4f:71:32:e6:b8:ac:a0:f5:4c:e3:37:
                    d1:9c:77:f7:23:b7:ed:4c:39:9a:3a:0e:6f:21:05:
                    9c:a6:31:a5:6f:30:b1:6f:86:3b:2d:e8:03:60:12:
                    07:49:f3:f5:d8:15:cb:ca:60:cd:5d:3c:94:8d:e8:
                    8d:a6:30:6c:af:7f:f0:84:dc:4e:a9:94:fa:82:84:
                    7c:f3:64:8d:96:99:fa:63:0b:69:54:c4:4d:5d:25:
                    fb:f6:87:4b:0a:36:7a:49:58:9f:7c:00:3f:7a:2e:
                    77:da:3d:19:b2:66:e6:90:0c:82:42:3e:e8:74:97:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:C4:15:E9:56:18:6D:9C:C6:19:72:97:9D:5A:C7:B1:97:F5:63:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/CBC415E956186D9CC61972979D5AC7B197F563BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22
                IPv6:
                  2804:65f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52743

    Signature Algorithm: sha256WithRSAEncryption
         41:03:a0:52:03:98:5e:6a:5f:37:43:3d:f6:b2:8e:9f:4c:b5:
         d3:04:01:c9:93:3d:65:7f:c8:c8:c5:43:29:87:16:27:f4:8f:
         fc:a0:e5:3f:9b:be:9a:c2:6b:83:96:5a:a9:1c:5c:ec:62:9a:
         82:5b:15:c2:d2:cd:98:22:1f:f8:96:fb:65:b6:4f:21:06:65:
         a0:af:b6:41:19:17:d2:dc:8c:ba:69:ec:87:bf:f7:a6:ed:9f:
         53:5d:65:4a:40:63:4c:03:ea:c2:71:3a:93:ee:83:b8:59:e0:
         a9:0d:79:b7:82:5d:be:ce:5a:fb:52:20:23:88:51:c4:87:07:
         7d:db:50:c4:1c:8c:fa:92:9b:94:99:65:54:62:50:f7:26:51:
         6e:33:56:67:97:f0:63:1d:8b:d1:56:8c:24:14:b1:52:0f:6a:
         06:8f:b0:6a:bc:5e:a1:f6:b3:c1:a3:22:40:a7:6d:e9:57:43:
         ae:df:9e:d1:e3:6d:03:d2:7f:57:b0:a3:c7:0e:e9:4f:59:e5:
         6c:3a:97:6d:ce:77:72:5b:44:e0:75:cc:f4:ca:60:b7:bb:fb:
         24:6b:b7:8e:37:f4:f6:78:da:3d:e6:5b:6f:5b:dc:db:2f:ab:
         df:83:33:a0:d5:fd:0a:7a:e3:26:49:dc:ec:25:97:69:63:ee:
         43:bc:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----