Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer
File:                     D013D6CAFF551C6AF6F856674C682771D78090E1.cer (raw, json)
Hash identifier:          uapFsTGyDKQxEWEOU9L/W+pjifoP2ijFl8LMaabSTrI=
Subject key identifier:   D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C3E48D0F2A44B5115935ABD51EAA19AA40BD044
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 13:34:42 +0000
Certificate not after:    Sat 16 Nov 2024 13:39:42 +0000
Subordinate resources:    AS: 266146
                          IP: 160.20.68.0/22
                          IP: 2804:3b64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:48:d0:f2:a4:4b:51:15:93:5a:bd:51:ea:a1:9a:a4:0b:d0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 13:34:42 2023 GMT
            Not After : Nov 16 13:39:42 2024 GMT
        Subject: CN=D013D6CAFF551C6AF6F856674C682771D78090E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a7:c1:65:40:87:95:a1:65:f0:4a:80:69:5e:
                    98:69:d5:4f:8c:5d:60:77:d9:3e:8c:f1:99:fc:4d:
                    dd:a2:bc:2e:63:ef:f4:a0:55:5d:d2:d0:df:e8:67:
                    0d:9c:fe:e9:e9:d0:10:8f:07:a0:88:0a:fa:52:64:
                    71:a9:3a:92:28:15:09:f8:c6:99:0a:2b:99:dc:71:
                    55:81:94:3a:02:51:80:67:a7:06:ac:46:51:dc:bc:
                    b7:74:a1:f3:fd:5d:e7:4a:e7:32:24:ad:1d:35:5e:
                    d4:2e:7d:7e:c9:65:5b:68:e3:f4:af:a0:9d:07:58:
                    5e:a6:af:39:fa:45:51:64:f2:f2:a8:00:9e:d5:5b:
                    8b:b5:34:ec:5e:f3:a9:7d:41:23:82:e7:99:bd:f2:
                    af:0d:14:a5:d3:12:50:61:39:2c:08:d5:ce:ec:f5:
                    a1:81:f7:13:0d:8d:3e:d1:b5:10:b3:f7:50:54:19:
                    80:f4:a0:e7:ac:4c:69:8f:ef:b8:09:92:e5:13:76:
                    d8:f8:26:25:4b:73:02:fa:82:46:5c:f8:10:7a:86:
                    5c:f0:3d:49:d7:b7:d2:00:19:a3:8b:c7:73:f7:48:
                    bf:14:ba:5d:af:38:e1:de:d4:ec:19:32:ec:40:35:
                    f8:ff:04:4e:e0:8f:de:04:4c:03:1e:2d:ae:ea:6d:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.68.0/22
                IPv6:
                  2804:3b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266146

    Signature Algorithm: sha256WithRSAEncryption
         55:07:98:bc:9f:28:71:d6:56:d2:71:3e:a5:67:77:d2:e5:8c:
         f6:39:15:54:a1:7b:71:3f:f5:e8:e4:06:7a:9f:69:9d:57:fb:
         de:87:1b:de:26:24:96:5a:cb:7c:16:16:f4:35:97:ef:df:40:
         e2:cb:ea:92:91:13:03:cc:07:e8:6d:b1:b9:24:6c:f4:6e:50:
         a5:00:a2:c0:b2:3e:37:43:81:40:19:d2:e0:a6:76:76:97:fc:
         58:75:3a:b4:ee:cb:36:4c:a0:44:39:f5:4a:df:2d:c1:3d:fd:
         eb:40:9e:33:fe:6f:49:23:17:6e:7a:6b:7b:60:86:0d:99:28:
         69:b8:54:75:8a:96:70:da:74:f1:a2:2c:bd:9b:74:21:db:af:
         01:e6:7a:6c:70:d4:93:47:7a:dc:a0:ce:c2:91:d2:33:9f:11:
         e9:9f:0b:95:17:b2:b9:cc:9a:5b:39:71:7a:2e:af:a0:12:44:
         f9:3f:fb:93:b7:dc:09:14:dc:87:66:df:60:3b:6f:7e:e5:67:
         49:0c:ca:92:16:1f:ef:6b:68:d6:59:73:86:d0:71:e0:f1:68:
         bc:7a:ce:a3:c8:fc:50:b9:03:ff:e0:51:60:8c:61:b2:0b:c8:
         2f:91:7f:7c:a8:47:23:04:7f:72:41:f1:18:39:ee:db:5c:33:
         59:5e:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----