Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer
File:                     D2F7452DD5564A2585DD665D38AD7886662B208D.cer (raw, json)
Hash identifier:          iWhDmD9VZ5LurgQWffRJS+ZluSgFkyHUcr2q6WVmo+0=
Subject key identifier:   D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11CDE3AA9742DFA5AA107A30A51114C0A885028E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:48 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:48 +0000
Subordinate resources:    AS: 271641
                          IP: 200.194.188.0/22
                          IP: 2804:7eb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cd:e3:aa:97:42:df:a5:aa:10:7a:30:a5:11:14:c0:a8:85:02:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:48 2023 GMT
            Not After : Nov  5 03:58:48 2024 GMT
        Subject: CN=D2F7452DD5564A2585DD665D38AD7886662B208D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:a4:75:9b:ab:56:94:da:77:32:00:cf:69:
                    63:cd:e9:5a:c5:77:a3:b6:6f:0e:43:4d:e2:bc:cf:
                    f0:a4:8f:53:e3:86:3e:ae:bc:f7:1b:4f:84:07:e0:
                    77:2e:7c:4f:58:0b:ca:22:65:d7:28:d7:54:16:4e:
                    d4:c5:a9:e1:11:29:8c:43:91:13:a6:7f:63:52:f4:
                    d9:b7:78:ae:85:51:b3:c2:66:b0:59:0e:87:9c:22:
                    df:fc:70:58:da:e6:b1:ee:27:39:10:e1:b8:bf:fc:
                    dd:18:ae:0f:85:60:3f:2e:9e:e7:f8:65:86:4d:6f:
                    86:39:b2:c2:27:a6:30:29:a3:de:45:e5:15:4f:9a:
                    2d:21:2c:e6:c0:74:60:3f:92:d0:cc:23:1f:0f:89:
                    df:45:e6:6b:3c:02:20:16:6d:22:ad:cf:6b:80:44:
                    3a:52:02:18:8e:02:ba:03:a7:34:2b:dd:73:d2:c0:
                    fb:b7:87:2f:ed:bd:0a:be:67:49:f1:b2:4b:e9:d6:
                    d0:5c:ca:db:30:6f:5d:e3:99:21:18:79:d3:bc:01:
                    e1:ec:dd:63:42:09:81:96:11:f3:d8:6f:ab:aa:93:
                    cb:1c:5a:d9:12:74:2b:06:e3:1c:2c:6c:b2:cd:48:
                    45:2c:de:42:2c:72:0a:57:d8:af:8c:fc:2f:1c:4b:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/22
                IPv6:
                  2804:7eb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271641

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:c3:7b:b7:23:f6:82:0f:17:94:6d:fa:2f:4f:76:d4:ed:
         17:45:e3:43:4a:d3:cc:3b:61:f0:96:14:ea:fc:52:53:f8:88:
         d7:91:9c:59:a1:95:2d:b8:f5:31:41:f0:a0:77:9a:bd:58:07:
         99:4f:ad:2e:6d:c5:0e:27:4d:4c:c0:71:28:0a:d0:f1:0e:0b:
         8f:69:af:05:5a:ce:3a:f1:0c:0c:b3:cd:be:2c:b2:ac:93:7c:
         98:32:05:e6:0e:ec:ca:dc:58:b9:2d:e6:0c:04:4b:30:95:26:
         15:72:03:b6:6b:1e:3b:0e:ad:00:28:a3:33:92:04:ea:f8:23:
         16:fc:df:46:c4:8f:fb:9f:f7:de:e9:dc:ed:a7:7b:9e:3f:14:
         06:99:66:41:79:50:e9:9d:0b:25:22:50:da:8e:6e:ec:5d:84:
         50:29:d4:33:d3:cc:b8:e9:0f:4c:8b:bb:64:74:b6:2e:6e:70:
         4f:80:c9:33:35:13:75:a4:ab:9b:4d:4f:65:94:85:2a:c9:ea:
         a1:76:58:e7:b1:1a:9b:d6:af:f1:9b:39:ea:70:26:ff:b8:25:
         65:3d:fe:86:eb:04:a5:74:16:5f:d4:e2:0c:c9:95:a4:4a:61:
         c5:92:bc:d4:3a:f9:b2:81:99:2e:02:fe:df:6d:e9:17:a5:e2:
         27:15:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----