Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer
File:                     D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.cer (raw, json)
Hash identifier:          cjN0Zal7D6p6p0RSdNB5RaUOk1EbPWSw15Xwk0nEbLU=
Subject key identifier:   D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0841D12081BDC8B372BD15987A38D02C280E6F4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 16:40:06 +0000
Certificate not after:    Fri 21 Jul 2023 16:45:06 +0000
Subordinate resources:    AS: 269089
                          IP: 45.179.144.0/22
                          IP: 2804:5f48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:41:d1:20:81:bd:c8:b3:72:bd:15:98:7a:38:d0:2c:28:0e:6f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 16:40:06 2022 GMT
            Not After : Jul 21 16:45:06 2023 GMT
        Subject: CN=D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:af:e4:ba:60:73:6b:38:2d:a2:43:3c:71:
                    2f:31:68:f3:e4:22:11:46:57:51:9f:6b:79:a6:53:
                    b7:35:5a:28:11:a3:89:2c:40:a1:f1:ec:b5:d4:0c:
                    8b:d1:5b:84:7f:f8:52:a0:0f:01:11:b0:86:6a:6d:
                    5d:1e:36:b4:19:f4:27:03:95:08:60:d6:3d:17:58:
                    f7:37:12:f6:ab:ef:b5:75:52:9a:99:a3:05:83:c1:
                    08:4d:3c:d2:8a:53:5e:ed:e1:95:58:80:2c:ed:59:
                    56:90:e6:d7:86:ba:54:20:c4:df:37:1c:8c:6e:d6:
                    54:17:56:ed:56:d5:2a:55:68:76:87:6f:84:62:cf:
                    83:f9:ee:d1:15:0f:ec:5a:47:8d:2b:a7:50:98:2e:
                    28:1f:7e:4a:a3:33:97:26:ea:9f:6f:7f:c2:eb:2d:
                    4e:cc:3d:5b:79:64:0e:53:2f:52:50:0b:ce:c6:db:
                    bb:26:d0:28:00:21:5a:09:1e:c3:12:97:62:75:d6:
                    0e:31:c0:72:bc:f6:f9:23:a3:5b:b6:6f:54:55:cf:
                    d3:d3:15:5b:42:b8:8d:37:f9:c5:21:44:6e:ce:6a:
                    51:eb:1f:57:3b:8c:ef:55:35:21:cf:9e:ae:7a:41:
                    9c:e0:a1:24:fd:fe:69:d3:93:7b:77:08:b9:14:2d:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:EA:EE:9D:24:13:7D:1A:D1:B1:1F:FC:B4:3D:72:B6:A8:03:71:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Lb4ZQncqCbpRp9N4XYZhxrgPSpAnJwBff8Q3cVe69bV/0/D0EAEE9D24137D1AD1B11FFCB43D72B6A80371EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.144.0/22
                IPv6:
                  2804:5f48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269089

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:a6:f7:88:84:58:b4:5a:21:c3:99:af:7f:12:09:ac:68:
         ed:22:b8:fd:59:94:fd:29:87:9c:96:a2:0b:36:2d:9d:25:85:
         67:40:3a:f5:9d:9e:e1:b8:d6:81:77:f8:7d:1f:1d:18:a4:14:
         5b:f7:4e:c7:2e:85:df:72:f7:72:a8:c4:6d:98:61:8a:3e:60:
         93:29:98:3a:11:23:3b:80:68:76:64:6a:6f:19:8f:fe:4d:c2:
         fd:35:e9:3d:19:b6:29:6b:fc:42:ab:09:0d:08:e3:da:a9:37:
         3c:f5:6c:57:49:51:8b:0c:1b:84:ca:36:71:8b:cd:21:1a:fc:
         95:f6:04:62:87:0e:bc:75:4e:ac:29:73:66:6b:9d:7d:f7:b2:
         19:f3:e5:f0:37:8d:70:48:21:f1:ac:2a:46:88:02:85:ab:37:
         7b:16:2d:fa:7c:e4:e2:91:83:74:e6:20:82:53:5a:02:b0:88:
         2a:83:13:6e:d6:66:8e:b4:86:44:4c:a2:fd:40:20:31:a6:17:
         83:56:db:44:a5:47:c1:bf:b0:7c:34:35:fb:e8:87:34:8a:16:
         e7:03:6e:7c:8b:39:27:c2:77:c3:4a:81:33:b4:e8:7d:4e:e6:
         d7:d0:ea:a4:7f:f3:7d:b5:bd:9d:6c:13:b9:e9:c8:1a:ba:fd:
         ca:bf:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----