Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer
File:                     D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.cer (raw, json)
Hash identifier:          c1BbeKKsUE5qwGGjWb3ug82xv+o5E3vxoJYU5p9YnI4=
Subject key identifier:   D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F48094E51F11F2B2D8E581214559B6A6C9BE2CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jun 2022 15:43:20 +0000
Certificate not after:    Thu 22 Jun 2023 15:48:20 +0000
Subordinate resources:    AS: 266114
                          IP: 45.5.156.0/22
                          IP: 2804:3adc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:48:09:4e:51:f1:1f:2b:2d:8e:58:12:14:55:9b:6a:6c:9b:e2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 15:43:20 2022 GMT
            Not After : Jun 22 15:48:20 2023 GMT
        Subject: CN=D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:07:6a:a0:4e:40:b2:06:12:a8:1d:e5:08:5d:
                    b2:05:58:73:1c:53:08:d5:5d:99:ce:b7:e4:8f:6f:
                    b7:43:f1:18:50:00:92:77:26:54:d6:bd:73:79:14:
                    54:a8:78:19:db:3f:89:ab:71:b2:b3:b5:2c:f7:69:
                    17:09:e7:02:7a:21:3d:da:bc:59:d7:83:de:43:1a:
                    06:24:37:eb:17:14:e2:39:c8:93:42:cd:46:c1:9b:
                    bb:39:1b:1a:47:bd:65:cd:f7:27:37:f7:5f:e7:f2:
                    e8:a7:ea:62:ad:09:77:af:fa:1b:72:4b:fe:02:d0:
                    a0:8c:13:ca:43:8a:d2:dc:d5:03:dc:78:44:26:49:
                    24:e0:5d:0d:2c:bf:05:7b:8d:19:54:24:d6:8a:29:
                    a0:0d:6c:81:3b:b6:55:7a:80:63:43:fe:cb:26:91:
                    a5:1b:8d:68:36:46:a1:13:02:81:8f:5c:c9:29:23:
                    b4:ae:b0:65:1b:1e:4d:92:1e:08:29:47:86:34:06:
                    53:8d:2a:f7:ab:97:18:4f:a5:68:aa:8b:36:f4:62:
                    ab:74:aa:bd:5e:66:ce:89:04:da:76:90:a3:4e:1e:
                    fe:2d:9c:84:90:1c:c5:53:4e:45:43:32:de:50:72:
                    26:02:b1:69:a0:6d:59:11:69:56:ea:27:60:d5:25:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:D6:B4:1A:FA:2B:CE:57:DA:06:67:CA:1C:8E:18:A2:FE:1C:1C:0D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaizcdwdFrjfg1tkFQ5wnWBRF9ki2LNowseGdLH4SU1T/0/D2D6B41AFA2BCE57DA0667CA1C8E18A2FE1C1C0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.156.0/22
                IPv6:
                  2804:3adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266114

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:59:6c:39:d5:78:1c:a7:11:3a:c7:75:66:15:dd:62:d4:
         b7:cb:eb:e7:eb:cf:9d:c9:41:91:56:36:51:4f:60:30:f2:28:
         13:1d:90:81:fa:1d:6e:9d:c6:4b:6e:55:4a:3d:c8:3c:81:bb:
         09:d5:eb:47:3e:3d:cf:b5:9d:f7:55:77:38:cc:f8:0a:74:e0:
         58:93:c6:28:da:8c:fc:6c:e1:36:ed:7b:2e:41:d4:e8:a6:69:
         7e:ed:36:c2:ca:33:c7:2a:b3:c8:f6:30:6d:c6:0f:70:5c:cf:
         7b:c6:c8:eb:dd:82:95:c0:b5:e8:16:f4:ab:f1:89:30:e4:69:
         9e:bc:f8:d4:0b:7b:83:fe:b7:bf:39:be:18:e8:ca:22:b0:f6:
         09:99:83:17:fd:c3:15:6e:d7:a7:fb:c6:65:e2:42:ab:c7:08:
         63:28:b3:e6:7e:dd:cd:c8:9c:fd:f7:51:19:c7:3a:f9:9b:2f:
         92:4e:e0:21:1a:3c:64:aa:e9:e4:ae:a8:2b:c9:5b:67:b7:ea:
         88:a8:8c:51:55:f6:be:68:9b:5f:bf:cd:d4:e8:7e:6d:10:28:
         36:19:f3:57:7c:0b:f9:bb:18:87:93:02:19:c4:65:42:71:49:
         7b:37:69:e9:b8:bd:66:4c:f5:48:74:ce:57:e7:ac:04:b4:b2:
         d4:f1:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----