Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC8BE94516C2F55C80C38786159A289962CBF023.cer
File:                     DC8BE94516C2F55C80C38786159A289962CBF023.cer (raw, json)
Hash identifier:          neOKaNhX0lly6O0QnKk1qjF6q7Oestf6WBX3SB8m8ms=
Subject key identifier:   DC:8B:E9:45:16:C2:F5:5C:80:C3:87:86:15:9A:28:99:62:CB:F0:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33C1B02BB4D819088C5CE6B811A9B6F611E6EDE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/DC8BE94516C2F55C80C38786159A289962CBF023.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 11:15:12 +0000
Certificate not after:    Thu 02 May 2024 11:20:12 +0000
Subordinate resources:    AS: 53131
                          IP: 2804:194::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c1:b0:2b:b4:d8:19:08:8c:5c:e6:b8:11:a9:b6:f6:11:e6:ed:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  4 11:15:12 2023 GMT
            Not After : May  2 11:20:12 2024 GMT
        Subject: CN=DC8BE94516C2F55C80C38786159A289962CBF023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:a4:6a:f7:a3:93:8a:bc:50:33:80:6f:01:
                    64:e9:fc:e1:90:c9:a3:7b:62:5e:77:44:07:40:ef:
                    34:0b:79:22:a0:8e:d3:d1:8e:c8:7c:02:29:ac:b7:
                    01:f7:7a:07:c1:f3:96:f8:74:77:87:f6:78:ff:49:
                    4c:5f:02:17:2c:df:d4:33:fb:62:e1:50:77:01:32:
                    0c:07:6c:5a:4b:8c:53:bb:e2:f5:9a:54:53:ee:97:
                    18:b0:b1:1d:2f:4c:67:fa:42:14:53:91:8a:bc:3a:
                    01:b1:c0:bb:2c:0f:d0:da:78:6a:7d:af:28:8e:94:
                    a6:90:9b:7c:20:2f:62:e2:b0:9e:b5:83:04:3a:89:
                    34:74:e7:b6:d1:d5:62:9b:a2:af:58:12:53:4e:73:
                    81:fd:e1:c1:24:a0:a0:ab:61:f1:fd:1d:91:28:4d:
                    c6:c7:ab:7e:d4:40:3c:ca:ba:ee:14:54:1c:8e:41:
                    f5:bf:ad:a4:4d:4e:6e:43:77:2b:fa:15:a9:50:8f:
                    07:1b:c3:47:a4:50:f2:be:44:14:38:97:0a:42:7b:
                    07:7f:f8:1b:6c:6c:eb:8e:60:3a:9c:a6:31:16:54:
                    2e:37:04:8f:74:39:b2:d1:f1:13:f0:88:0f:f6:fc:
                    6f:3d:5b:49:8c:b8:88:f1:0f:15:e4:e5:34:4d:fc:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:8B:E9:45:16:C2:F5:5C:80:C3:87:86:15:9A:28:99:62:CB:F0:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8qAEvSyG4CmS9pUetvfaMuB6N6dx9xLGM3zt96KpXZ1j/0/DC8BE94516C2F55C80C38786159A289962CBF023.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53131

    Signature Algorithm: sha256WithRSAEncryption
         18:10:18:8a:e2:8b:27:0b:57:0d:c6:bc:7c:2e:04:97:34:a2:
         e5:f0:95:b3:e7:4e:f1:20:6d:cf:7e:61:8e:7a:14:12:f6:e0:
         9b:69:9d:77:1d:1a:6d:c4:dc:c1:8b:4c:01:65:4f:e1:92:11:
         2e:31:fd:9d:5c:ac:c9:e3:57:de:5c:cb:8c:33:e1:47:81:ce:
         42:1f:49:79:93:60:d9:e8:1e:b7:52:80:c8:1f:98:51:55:f5:
         f3:db:eb:c0:c1:9c:a0:b7:e1:c3:dc:36:8d:cc:e3:4a:9a:40:
         e3:90:ec:e4:0f:3b:93:88:aa:b5:44:34:b5:48:ab:95:5d:5b:
         6e:a9:62:02:59:d7:e0:e3:8c:08:46:97:3a:68:5a:2f:2f:a4:
         d0:e1:52:3f:7d:fb:7e:cb:22:18:c9:03:93:08:4c:c5:92:ef:
         7f:6b:96:c9:c3:2c:25:39:47:19:bd:40:b8:c0:09:44:a5:d7:
         1a:d0:ae:5a:9a:47:7f:94:44:84:8f:b9:f9:37:c9:df:95:7b:
         57:4a:6a:03:23:47:9e:c0:d7:9b:aa:aa:bf:19:b0:c3:a8:7d:
         5f:3a:b4:5c:6a:89:ae:62:ff:b7:24:f6:e8:a5:a4:17:d1:83:
         61:60:0e:04:f9:c5:e0:93:7b:15:50:12:68:8a:21:08:cc:5c:
         c1:6d:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----