Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D08F0B30F4C2B130A6C31D30CCB9573A3E1337C9.cer
File:                     D08F0B30F4C2B130A6C31D30CCB9573A3E1337C9.cer (raw, json)
Hash identifier:          nXd5KLy7G9ZeAIGw3Klq265LJmXZuxBr/x7847yjMoc=
Subject key identifier:   D0:8F:0B:30:F4:C2:B1:30:A6:C3:1D:30:CC:B9:57:3A:3E:13:37:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F1D7A475EEA05F16ABE8034B163B79B50A467A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/D08F0B30F4C2B130A6C31D30CCB9573A3E1337C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Jul 2022 14:13:10 +0000
Certificate not after:    Wed 26 Jul 2023 14:18:10 +0000
Subordinate resources:    AS: 271500
                          IP: 181.233.176.0/22
                          IP: 2804:7c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1d:7a:47:5e:ea:05:f1:6a:be:80:34:b1:63:b7:9b:50:a4:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 14:13:10 2022 GMT
            Not After : Jul 26 14:18:10 2023 GMT
        Subject: CN=D08F0B30F4C2B130A6C31D30CCB9573A3E1337C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:29:11:ef:b1:50:41:43:e4:24:38:90:87:
                    8b:9f:c4:f3:a8:10:8b:21:65:e5:2b:d9:c9:90:fc:
                    12:b8:d3:d8:6c:fd:48:95:f3:45:d9:17:a8:fa:0a:
                    02:a6:c2:50:8a:df:70:5c:13:f7:56:f5:19:54:67:
                    18:78:fb:0e:4d:fb:b7:55:31:87:15:ce:6b:c2:d1:
                    4c:3e:cb:d5:6e:65:96:6a:1c:f8:e4:91:c5:3e:da:
                    fa:2c:07:9c:ee:91:d9:d6:17:6e:d1:23:92:aa:ec:
                    f3:f0:54:87:a3:fe:78:f6:f0:7c:92:f4:34:6f:60:
                    a6:91:1d:0f:5c:8d:ce:88:f0:b4:d7:82:9d:38:4f:
                    33:48:be:c2:3a:5e:a2:a4:17:90:ad:98:f1:7d:5a:
                    be:6b:65:c1:13:64:e4:31:41:2e:9b:b1:1e:2f:62:
                    0c:82:5a:bf:f2:e8:da:69:6c:e4:e4:b5:fc:a4:33:
                    39:6f:f3:a5:6f:76:94:56:a7:ef:eb:01:52:05:4f:
                    6f:01:ec:80:45:a8:40:5e:ec:5f:46:5e:d9:67:2e:
                    df:d0:5b:a1:6c:9c:9e:39:cc:7f:68:58:7c:68:de:
                    65:1a:43:59:fd:b4:cb:c1:b3:a4:be:db:ce:15:48:
                    c8:7d:0c:41:ca:14:e9:81:98:20:5f:f5:c6:02:8b:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:8F:0B:30:F4:C2:B1:30:A6:C3:1D:30:CC:B9:57:3A:3E:13:37:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/D08F0B30F4C2B130A6C31D30CCB9573A3E1337C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.176.0/22
                IPv6:
                  2804:7c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271500

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:85:74:71:0a:81:1c:ce:34:1c:40:e9:ee:a8:7b:11:ea:
         ab:ff:b6:36:c0:82:5b:97:a9:fd:86:ed:e2:91:c9:a3:c0:6f:
         af:88:12:e5:4b:e4:ac:eb:c8:cd:76:28:01:c3:41:52:de:df:
         cb:ae:19:25:77:be:63:ec:a6:6c:41:95:2f:86:51:8f:ca:69:
         7e:9c:b6:25:19:fe:7f:03:a9:9c:50:ca:40:58:16:84:46:4d:
         b3:cf:5e:d1:23:10:1e:8e:10:d5:86:e2:f6:e9:8b:c3:45:3e:
         64:2b:07:2b:b0:3b:05:c5:e2:2e:de:59:64:ea:76:0f:7b:81:
         30:8a:a3:c3:c5:8e:f2:54:37:43:f8:69:c1:8a:1b:5f:57:80:
         5d:eb:cf:7e:77:e3:97:a5:ad:e2:a2:51:f6:20:fa:34:67:31:
         b1:27:66:a6:66:ce:39:be:25:56:da:61:46:21:11:22:7c:2b:
         4b:0a:7b:8b:7f:f5:de:61:ad:bc:f2:f7:52:63:24:8f:2b:45:
         70:49:ca:ec:ab:0f:5b:66:95:89:2a:db:1a:5a:42:02:7a:62:
         e0:11:4b:f5:2e:b7:a0:4e:ab:63:39:43:e9:a5:2f:9b:b3:3a:
         b5:f9:4a:16:cd:b3:ea:ed:d5:44:0c:01:26:45:d2:70:f5:44:
         f6:8d:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----