Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE2BCDA4880E1244AB563CE049F66CBB79B4FF32.cer
File:                     CE2BCDA4880E1244AB563CE049F66CBB79B4FF32.cer (raw, json)
Hash identifier:          2+n2SC4RJvT1RDqvi2sTVXMk6LU2DGr7U7AHdFxXACA=
Subject key identifier:   CE:2B:CD:A4:88:0E:12:44:AB:56:3C:E0:49:F6:6C:BB:79:B4:FF:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01641FB0A7A019FE8364DB54B3EEF3D1B5639614
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/CE2BCDA4880E1244AB563CE049F66CBB79B4FF32.mft
caRepository:             rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Sep 2022 12:25:12 +0000
Certificate not after:    Mon 04 Sep 2023 12:30:12 +0000
Subordinate resources:    AS: 262757
                          IP: 186.224.96.0/19
                          IP: 2804:1f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:64:1f:b0:a7:a0:19:fe:83:64:db:54:b3:ee:f3:d1:b5:63:96:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 12:25:12 2022 GMT
            Not After : Sep  4 12:30:12 2023 GMT
        Subject: CN=CE2BCDA4880E1244AB563CE049F66CBB79B4FF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:ad:fc:c8:66:d6:f9:e1:07:d0:4b:3b:49:
                    ff:79:20:ff:39:81:85:0d:f6:84:24:62:2e:01:28:
                    6d:0f:83:fa:35:85:5b:10:f6:0c:24:ee:a0:aa:e6:
                    12:ca:b5:0d:60:92:23:61:ae:35:75:89:53:ed:9b:
                    e0:41:e9:42:b6:98:ce:5b:c5:a8:c3:c3:d3:06:02:
                    9d:ae:0b:b3:1c:9b:8c:62:ce:4b:37:38:c0:b7:dc:
                    f2:a5:1d:86:c8:ca:43:7c:1e:af:81:24:16:47:b1:
                    40:04:01:fc:af:cd:8f:16:97:9c:26:aa:bc:96:89:
                    51:75:45:48:5b:7e:ba:d9:d6:bc:fa:6f:28:72:1e:
                    ee:e4:de:61:19:3e:cf:3d:3c:cf:17:84:f3:c0:11:
                    ee:2c:37:5f:7d:f2:7e:85:8d:1a:42:5c:20:f0:09:
                    e8:06:e2:cf:5c:53:9d:fe:b5:ff:85:e0:86:6b:a1:
                    43:03:c0:7a:0c:11:4f:70:91:c9:29:34:9d:03:bf:
                    53:7e:13:b3:22:35:cd:07:51:14:9f:8f:62:e1:8c:
                    78:a8:b9:f8:c9:aa:48:97:bf:6b:e6:86:a8:e5:ba:
                    db:56:73:3b:96:d8:63:63:00:82:a0:21:1b:05:d5:
                    2a:f7:06:a3:55:fd:65:5f:ca:07:7b:3b:c9:de:11:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:2B:CD:A4:88:0E:12:44:AB:56:3C:E0:49:F6:6C:BB:79:B4:FF:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/CE2BCDA4880E1244AB563CE049F66CBB79B4FF32.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/19
                IPv6:
                  2804:1f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262757

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:16:20:24:8f:af:cb:68:e6:b6:5a:9c:0e:7c:7f:ac:4a:
         4c:7b:f1:48:06:d0:d8:b3:d1:0c:e8:77:c2:2e:ac:5e:7c:01:
         5d:28:3a:4f:31:ca:be:6f:8a:07:75:7d:60:eb:9a:f0:e1:4a:
         48:ab:1c:e0:ae:ea:9e:84:2b:60:48:fe:a2:72:ea:32:ea:95:
         73:39:70:5f:d2:72:a1:8c:9d:54:e7:8a:cd:78:ff:6b:89:68:
         48:ca:5c:b9:ee:db:78:44:e5:18:66:bf:b9:15:a3:19:f4:70:
         2c:5d:ca:a8:f6:58:22:3b:7d:5b:16:a6:40:07:90:85:2e:06:
         84:c5:0d:9e:6e:38:b4:22:4c:e1:26:cd:3b:d4:f5:62:d0:e9:
         d8:70:b4:68:bf:81:7d:c6:1b:01:6d:3d:fc:9e:25:a3:71:23:
         1a:d6:27:22:bb:b2:0f:fe:10:f9:f3:c1:c1:0a:43:17:ca:be:
         c0:42:b7:b7:57:21:d7:e4:b3:f7:62:a4:3f:5b:75:9f:fd:6b:
         eb:66:50:82:e4:8f:30:bd:d5:f9:79:18:db:d9:2c:e7:7f:4a:
         e5:6b:c3:e4:4b:28:5d:f7:cf:21:49:03:fe:39:bf:5b:b8:4a:
         09:d5:8b:ff:32:48:1d:8e:b3:9a:23:82:52:21:f1:c3:44:8f:
         19:b7:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----