Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer
File:                     D2F3CF1154C37962C5D2AEB18040800B074D67A5.cer (raw, json)
Hash identifier:          vEFoNVNeRpUSb9XlCzN3iVFl+3dih2Z+OdE/PuCNErE=
Subject key identifier:   D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E6FAE6FB0BA0C92B0F533C5573AE03138FD526A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Dec 2022 04:02:24 +0000
Certificate not after:    Thu 21 Dec 2023 04:07:24 +0000
Subordinate resources:    AS: 268659
                          IP: 45.165.64.0/22
                          IP: 45.165.88.0/23
                          IP: 2804:5494::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:ae:6f:b0:ba:0c:92:b0:f5:33:c5:57:3a:e0:31:38:fd:52:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 04:02:24 2022 GMT
            Not After : Dec 21 04:07:24 2023 GMT
        Subject: CN=D2F3CF1154C37962C5D2AEB18040800B074D67A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:27:28:8f:ad:68:27:c3:d2:01:f4:b7:06:
                    77:35:d9:d0:b2:bc:13:4f:bc:62:f6:64:d6:42:67:
                    a3:db:9d:5c:4c:19:e9:8e:ec:8a:8f:9a:38:13:2b:
                    52:1b:be:82:81:21:0e:ec:97:0e:31:df:fd:37:65:
                    41:66:38:2d:73:bf:26:ae:dd:02:ee:2e:49:f2:d2:
                    8c:1d:1f:1f:47:63:d5:fa:df:d9:3f:06:0c:ef:b2:
                    77:e3:64:93:00:d8:60:66:47:1f:62:6b:ae:97:dd:
                    42:67:64:ac:58:c8:18:be:20:aa:86:4d:1a:fa:fc:
                    47:d1:86:ae:e8:ef:5b:49:c6:01:9a:02:c0:69:07:
                    12:4b:16:6d:78:a9:9d:04:e9:54:51:73:e0:36:a2:
                    1f:11:64:3d:62:fb:32:4d:41:2b:1a:66:4a:8f:7d:
                    b2:a9:00:29:73:78:17:8e:bf:81:12:8a:cf:c8:85:
                    14:5b:9a:12:40:74:ec:fe:d5:66:03:91:97:a2:60:
                    1e:a2:9e:74:63:0a:29:e2:27:f0:1d:12:a2:4e:7b:
                    23:01:ae:f2:bc:1c:cd:99:43:35:54:19:6e:43:d2:
                    81:fd:60:84:6e:52:00:4b:0f:0a:b0:c2:4e:f6:e6:
                    0c:ee:79:b3:e1:4f:44:d7:1a:ba:99:8f:6d:4d:15:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:F3:CF:11:54:C3:79:62:C5:D2:AE:B1:80:40:80:0B:07:4D:67:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/0/D2F3CF1154C37962C5D2AEB18040800B074D67A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.64.0/22
                  45.165.88.0/23
                IPv6:
                  2804:5494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268659

    Signature Algorithm: sha256WithRSAEncryption
         88:80:91:8d:ea:59:22:9b:56:57:b1:c5:e6:30:34:d0:39:e5:
         ee:2c:af:1b:f8:64:00:9b:e0:10:09:2d:c3:39:56:77:75:86:
         a9:73:29:78:33:95:7c:68:75:6a:7d:12:f7:ea:ed:6b:30:72:
         ce:c5:ec:5b:eb:5b:3a:32:41:98:43:87:c5:3d:20:ba:b8:62:
         93:85:fe:26:2f:43:f1:8e:b4:92:a6:30:bd:7a:1d:55:90:3d:
         c8:15:58:3e:90:d6:19:e9:43:83:0a:bf:74:9f:b9:50:9b:d2:
         33:81:3d:e1:d9:f0:c6:a1:32:0a:49:6a:d1:c2:27:e2:75:23:
         6a:93:38:f3:3c:2b:25:7e:a0:66:8c:91:b5:6f:f4:fc:e6:d7:
         4e:bd:7c:31:7f:8a:80:c1:60:57:72:b1:26:c9:f0:ed:a8:65:
         5a:a3:f9:44:98:80:83:c2:cb:81:4b:e1:c9:ae:68:f0:70:77:
         ca:ba:c3:d7:27:21:f8:3a:13:8c:77:65:51:f1:be:5c:a2:77:
         d7:2c:95:e5:5f:45:69:5f:59:36:4d:f9:57:05:18:9e:b3:89:
         e1:64:07:fe:73:f7:0c:fd:1b:69:de:3c:9e:e4:3e:2f:69:d4:
         61:e3:5e:d3:b4:c1:32:d1:82:cb:b4:62:1b:f0:7f:8f:10:2b:
         43:23:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----