Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D15E637C4643405A8125A9C18AADE3D8A3546B8A.cer
File:                     D15E637C4643405A8125A9C18AADE3D8A3546B8A.cer (raw, json)
Hash identifier:          sDCK2L/bDI4WojtWXNysPrTxSOKHv4xc30pOgO9QZAY=
Subject key identifier:   D1:5E:63:7C:46:43:40:5A:81:25:A9:C1:8A:AD:E3:D8:A3:54:6B:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FF6BDF367C0EEA2F332DA7D96C004C4BD68632D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D15E637C4643405A8125A9C18AADE3D8A3546B8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 15:31:12 +0000
Certificate not after:    Tue 24 Dec 2024 15:36:12 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f6:bd:f3:67:c0:ee:a2:f3:32:da:7d:96:c0:04:c4:bd:68:63:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 15:31:12 2023 GMT
            Not After : Dec 24 15:36:12 2024 GMT
        Subject: CN=D15E637C4643405A8125A9C18AADE3D8A3546B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:5f:73:cc:c6:fb:89:fb:1f:17:a6:8c:44:
                    4a:c0:0c:b2:6e:34:1a:4d:56:e5:40:c1:3b:2f:21:
                    d5:a5:8f:e5:07:04:b0:9a:d6:de:70:3c:b9:00:31:
                    c2:84:4a:10:6d:89:32:c7:9f:fd:f1:68:57:ce:94:
                    52:86:fa:99:97:ea:76:8c:c3:38:cd:39:5e:08:63:
                    49:0b:a6:17:8d:8a:8a:fb:57:0b:28:26:c3:f5:0a:
                    27:db:5c:50:48:ea:83:7d:38:9f:f0:e0:71:37:6c:
                    35:09:d9:e2:47:e1:e4:10:37:a5:0f:a7:2c:c7:60:
                    19:a0:0a:65:90:30:79:3e:4e:75:58:af:8b:08:56:
                    a4:d6:3d:29:64:53:9e:94:0e:f1:23:4b:9f:27:3e:
                    fd:44:83:45:54:4f:74:70:05:cf:a6:78:ae:91:06:
                    93:da:ec:1f:d4:dc:7c:d5:f3:10:0f:25:29:01:fd:
                    45:03:25:8f:7a:91:6d:d9:38:02:e8:10:f8:0b:f8:
                    48:1c:ac:59:8f:6c:68:49:ce:08:c8:9a:f0:df:26:
                    e6:0f:e4:db:a6:74:8d:f5:b6:29:42:df:d3:03:56:
                    d3:69:60:67:22:93:c8:84:a4:17:bd:ba:e9:68:78:
                    1c:ff:c1:5a:6c:4c:b2:5f:67:45:ef:b8:11:64:c4:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:5E:63:7C:46:43:40:5A:81:25:A9:C1:8A:AD:E3:D8:A3:54:6B:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/D15E637C4643405A8125A9C18AADE3D8A3546B8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         55:d0:2e:68:c0:bd:95:b1:10:87:d6:f5:59:5c:71:b5:fb:4b:
         fd:a6:68:b3:e5:2e:92:e4:d3:9d:cd:b2:d3:6d:1b:26:a2:e6:
         af:94:52:b7:91:9b:5c:b6:36:c4:11:ef:44:ff:69:17:51:a9:
         6d:b8:73:61:3c:08:7d:f9:10:15:f3:c3:47:14:b8:1e:14:49:
         32:b0:8d:5e:b3:1b:1d:7e:05:5c:bb:e1:fe:87:3c:75:e1:8d:
         fc:7b:b5:18:9c:9f:7a:19:56:4f:24:88:49:5b:e8:c2:5c:f3:
         23:42:bc:88:84:61:a2:76:99:9c:1e:83:30:35:e7:24:50:ee:
         74:5f:c2:77:33:66:3e:f6:ef:43:7f:64:a5:28:a9:ae:25:e0:
         87:47:8d:a5:36:81:3f:3b:89:39:dc:b5:5a:73:6d:ec:b7:80:
         79:b7:04:ac:e3:6b:46:0e:51:db:85:47:4b:ae:67:3b:96:6e:
         7b:fc:89:f6:1c:7f:68:94:4e:4b:32:35:c4:f0:31:4c:f6:f5:
         68:1c:d6:fe:ac:29:b0:f5:e2:36:74:ed:dd:78:37:07:bf:ba:
         ef:31:4a:fa:fc:53:cc:5b:9f:0e:23:9a:50:a8:3f:28:3b:a7:
         09:b6:80:85:e5:f2:19:6a:ff:1d:d3:b3:37:10:b4:83:66:c6:
         33:45:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----