Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.cer
File:                     D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.cer (raw, json)
Hash identifier:          sVmsl5QNa+rfu4id91aQkehqaudYij6ViH3yU5sGXSU=
Subject key identifier:   D0:B0:FF:C7:92:74:C4:84:9B:11:6D:8C:33:1A:C1:A9:D5:B3:3E:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5DF6833C2DCFB5FB8AE528EBB59AF1FCF8F162C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:50 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:50 +0000
Subordinate resources:    AS: 267368
                          IP: 45.234.152.0/22
                          IP: 2804:4c64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f6:83:3c:2d:cf:b5:fb:8a:e5:28:eb:b5:9a:f1:fc:f8:f1:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:50 2023 GMT
            Not After : Nov  5 03:58:50 2024 GMT
        Subject: CN=D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:93:75:82:6a:36:e5:6d:e2:bc:85:92:74:
                    1f:40:c1:9c:f1:3e:f1:60:71:92:1c:18:36:79:cc:
                    b5:6e:82:75:d1:6e:1b:b4:7b:67:b8:7f:37:89:e6:
                    3d:b8:83:22:ec:c5:90:4a:53:bd:8c:5c:a4:57:6c:
                    9c:5c:08:23:93:ac:6a:1a:82:6c:fe:9a:ab:45:16:
                    4b:b2:cb:85:35:b1:37:46:c4:06:f7:19:8b:48:1d:
                    7d:e7:a2:ae:e2:55:6b:8b:0f:e4:73:75:94:db:ef:
                    be:72:f2:83:96:60:0f:7a:24:67:09:96:52:46:5f:
                    ba:68:ca:86:f7:dd:af:48:d3:2e:61:66:ec:98:08:
                    30:28:4c:39:73:7a:0f:d3:cf:37:3b:15:58:ef:99:
                    07:ae:8c:84:66:08:b4:3a:26:65:00:32:b5:d0:6f:
                    4a:57:4f:22:97:57:8f:b9:c8:02:dd:0b:74:25:6d:
                    65:e1:c9:ee:13:7b:ad:95:bc:f7:7c:e2:da:44:f3:
                    11:1f:7a:c1:64:13:48:e0:94:43:4c:c7:4c:f0:8c:
                    a9:fd:85:e0:8b:57:ff:53:09:fa:64:d7:28:87:ec:
                    f8:64:4f:a0:b2:f2:fb:2e:5a:dc:87:ef:8a:32:d7:
                    81:95:0e:6e:15:b1:23:96:e6:6b:19:a9:e3:e7:59:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:B0:FF:C7:92:74:C4:84:9B:11:6D:8C:33:1A:C1:A9:D5:B3:3E:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.152.0/22
                IPv6:
                  2804:4c64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267368

    Signature Algorithm: sha256WithRSAEncryption
         09:5b:27:49:b7:c7:79:50:ee:ed:a0:1d:d2:37:19:57:2e:97:
         80:8d:e8:2f:bf:49:0d:4b:d0:6d:71:6b:e2:aa:6e:22:db:27:
         47:20:00:ae:8c:79:ad:41:ff:eb:e9:fc:1c:1d:a1:08:c9:87:
         ba:b6:60:1e:a3:cc:64:60:27:07:c5:ca:38:89:ce:14:9e:a5:
         78:cc:11:c6:98:1a:78:1f:63:65:89:55:a9:1f:5d:60:49:84:
         1d:54:af:fc:b7:0d:c2:68:f9:82:f0:28:69:9d:51:19:e5:87:
         5e:50:89:9a:b5:f1:0f:65:04:ab:96:b8:9e:ff:dd:d9:ff:a7:
         9b:91:fd:83:d1:ca:d3:e4:25:1e:32:23:0c:3e:ca:e5:1d:20:
         6c:2a:e0:52:d0:a2:d5:8e:32:1a:59:11:1f:ff:03:4d:8f:d7:
         1f:db:a9:43:a7:8e:d6:fb:00:02:42:77:66:3d:0f:35:8b:1f:
         c9:b0:93:ae:da:fb:42:ff:74:71:c6:1a:b6:d1:97:7b:5c:1f:
         c3:9e:0b:23:33:91:f8:5e:fc:ef:a0:af:0d:7d:51:75:60:65:
         81:de:c7:a0:86:da:2e:5b:b7:85:cb:92:d0:a3:fa:73:97:e5:
         df:05:3b:07:e7:9b:50:1c:42:9d:ea:3a:b2:42:cb:0d:17:52:
         28:c8:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----