Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CFAF54635E30C399B1A891E6118299A83518A1E3.cer
File:                     CFAF54635E30C399B1A891E6118299A83518A1E3.cer (raw, json)
Hash identifier:          fQaVofyibR5FiF29+dMa5PXUwtE2rCpzl+UFx6sLFHY=
Subject key identifier:   CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F1521D45D910B4BCFAF5A7B03970B0DAC0BE2A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 13:17:20 +0000
Certificate not after:    Thu 25 Jul 2024 13:22:20 +0000
Subordinate resources:    AS: 270344
                          IP: 189.126.4.0/22
                          IP: 2804:6a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:21:d4:5d:91:0b:4b:cf:af:5a:7b:03:97:0b:0d:ac:0b:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 13:17:20 2023 GMT
            Not After : Jul 25 13:22:20 2024 GMT
        Subject: CN=CFAF54635E30C399B1A891E6118299A83518A1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:3c:c3:e4:08:c5:af:02:3e:03:75:bd:de:
                    02:9a:3a:84:e8:68:70:bf:98:4a:22:63:9b:ba:b6:
                    cf:3e:4d:7d:8e:e8:0e:57:be:ae:bc:36:6f:90:13:
                    ed:32:a9:6b:09:22:28:a2:9d:90:77:48:64:7f:d1:
                    1e:17:02:e6:53:3f:c5:22:85:56:fa:08:76:ee:bb:
                    51:0e:8a:56:40:3d:1e:b7:cc:25:bc:b1:ec:12:9f:
                    d4:78:10:d9:a5:3a:b2:0a:d7:44:bc:df:bd:0e:f1:
                    b8:99:82:9c:e4:df:be:01:ba:bb:1e:b1:52:78:8c:
                    f6:78:98:89:a6:1d:49:62:0c:6f:f0:b8:f5:86:e4:
                    47:c9:0a:73:3c:64:09:93:d5:5c:5e:f7:1a:66:17:
                    98:e1:de:b2:b9:06:35:8d:5c:e1:d1:5c:91:dd:88:
                    21:b8:82:06:5e:c2:1e:80:f6:33:27:fe:12:c8:4c:
                    eb:f6:40:35:a2:df:25:53:4b:d2:a1:73:51:90:75:
                    72:3f:ff:6b:eb:17:a3:ea:eb:f4:df:79:b5:4a:77:
                    e1:3e:89:18:bf:14:a0:01:17:2f:7d:b1:74:d8:cf:
                    1c:a5:85:c6:8c:29:b0:22:b3:f9:d0:df:55:3c:7f:
                    0e:74:b6:ee:80:8b:2f:99:94:f8:ef:39:08:ee:e2:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:AF:54:63:5E:30:C3:99:B1:A8:91:E6:11:82:99:A8:35:18:A1:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwKUxatMQmWYBbNC3eMw43iYK3jMv7Wp3beMepFFRZQJ/1/CFAF54635E30C399B1A891E6118299A83518A1E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.4.0/22
                IPv6:
                  2804:6a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270344

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:df:df:06:3b:18:be:a1:64:e6:9f:e2:8f:a5:94:02:0f:
         f3:b1:c7:c2:b5:31:6e:1d:03:17:35:70:26:ca:e6:7b:0c:a2:
         9c:c0:8e:cd:9f:d9:e9:c3:09:32:e3:9f:2e:fd:34:c7:53:c0:
         8d:a5:0a:36:a4:fb:39:59:d1:41:12:a1:0d:4d:68:2a:1e:b5:
         a1:57:db:8e:aa:18:3b:4a:49:af:85:6e:3c:81:bb:92:9a:9c:
         57:6d:83:a0:24:f4:ca:39:ab:3e:11:b4:5e:c3:a4:4b:2b:8f:
         df:68:4c:6a:83:58:93:d4:84:f3:e1:0c:ab:b7:54:3c:49:46:
         6d:e9:65:9a:75:2d:b6:5a:76:51:d5:bf:4d:65:ee:9e:44:22:
         f5:95:4c:14:9a:78:60:0d:b1:f4:8f:43:cc:79:aa:7f:aa:b7:
         71:8b:89:28:d4:37:c8:33:2b:37:3f:94:1b:84:56:21:d5:d8:
         c7:5d:82:c7:10:c0:46:f9:f6:96:ef:ec:0a:ad:ef:2c:a8:35:
         a7:70:8f:69:6c:63:0d:37:fc:64:d6:33:2c:86:b7:b9:61:11:
         3c:b4:89:7c:ac:17:39:34:40:ef:84:20:9d:e4:96:a8:31:f3:
         66:01:13:8a:0b:f0:42:97:e7:8e:3d:65:60:0f:f9:ca:60:3f:
         5c:e7:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----