Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.cer
File:                     E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.cer (raw, json)
Hash identifier:          BmtRqaedQpcGI6j6ckrGUcmtcJueJdfo6l3JgKvWmiQ=
Subject key identifier:   E8:8C:D6:1B:C7:63:95:4F:E6:76:E6:FF:BB:BB:37:6D:7A:8F:F9:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       747AC6C067CE89ADF1B1AC0662777549A3FFF4A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 29 Jul 2023 16:53:03 +0000
Certificate not after:    Sat 27 Jul 2024 16:58:03 +0000
Subordinate resources:    AS: 263103
                          IP: 186.235.240.0/21
                          IP: 2804:4c24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7a:c6:c0:67:ce:89:ad:f1:b1:ac:06:62:77:75:49:a3:ff:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 16:53:03 2023 GMT
            Not After : Jul 27 16:58:03 2024 GMT
        Subject: CN=E88CD61BC763954FE676E6FFBBBB376D7A8FF90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:2d:29:2d:3a:2d:a6:71:f7:de:8e:fd:1f:
                    1a:e2:c9:b5:1b:6e:35:ed:87:57:36:eb:61:36:f6:
                    5c:48:f5:fc:4f:e3:3f:7c:29:0e:29:a6:02:a8:28:
                    4f:0c:d0:34:1e:18:90:cf:db:80:d5:0a:bf:18:b4:
                    66:ce:40:58:49:f0:90:8c:4c:83:51:45:ad:3e:8c:
                    ba:40:65:19:80:b1:a9:a2:93:36:2c:fe:35:55:49:
                    06:3a:23:04:55:f6:06:5f:cc:bc:94:d4:49:be:27:
                    7f:5a:df:b2:0e:e8:2d:49:55:0f:b8:ee:e4:ae:64:
                    62:cb:cf:88:c8:c3:6c:a1:2c:9d:8d:23:b9:9d:28:
                    ef:e4:fc:15:c1:f4:8a:a7:fb:97:06:90:0c:45:a0:
                    87:55:ed:1f:64:1f:b7:99:55:e4:bc:65:b5:56:c9:
                    8b:52:18:e1:19:31:c4:37:b8:76:ab:81:8a:d8:41:
                    77:7f:68:d0:e4:10:55:77:60:2c:fa:fc:fc:8d:7a:
                    49:e0:cb:94:e9:8a:40:96:d3:94:da:87:fb:16:93:
                    92:a7:32:79:e1:8b:6a:3d:25:f1:5e:13:30:45:c3:
                    76:1c:c0:7e:0e:32:16:2c:55:92:e7:67:18:5c:96:
                    68:6e:fc:74:f4:cd:99:68:7b:eb:5e:fd:17:05:93:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:8C:D6:1B:C7:63:95:4F:E6:76:E6:FF:BB:BB:37:6D:7A:8F:F9:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.240.0/21
                IPv6:
                  2804:4c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263103

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:45:98:33:c5:80:13:33:f5:e2:fd:09:62:17:29:0f:61:
         bd:4b:69:67:c1:fd:c9:a2:36:18:e9:cd:55:77:f9:80:50:15:
         2a:f4:24:99:df:51:17:69:ae:c2:39:21:d9:d7:62:52:ce:cb:
         9e:fc:78:f5:2a:f6:93:cd:5b:67:12:53:04:bb:b7:09:bb:04:
         ec:42:cb:73:f6:47:0f:1f:b6:8d:94:ef:98:f8:18:b1:ce:a0:
         6a:75:8b:d9:cc:0a:0b:8d:9a:b7:9e:54:d9:1b:8b:0f:b7:ff:
         36:a7:c9:26:16:66:c5:4a:46:8e:8e:fc:8b:0f:67:2e:71:4a:
         a0:41:03:6d:fc:6a:91:3c:4b:4a:12:36:ae:31:df:e9:31:9b:
         b3:40:73:a4:ef:b8:fe:6f:47:d4:8f:95:6a:c1:b4:f5:b3:7e:
         b2:67:f7:29:80:f1:58:be:9f:ef:0e:4c:a1:69:1b:79:ea:fa:
         61:21:6d:10:52:8a:f5:ea:0e:ff:c1:69:64:29:9c:6a:0f:8e:
         f8:ab:0a:0a:5c:b8:7f:6e:a0:d4:91:19:09:f1:12:68:45:94:
         57:ae:ac:fe:3a:94:24:33:58:c3:6c:f1:a7:e0:de:b0:17:70:
         23:02:e2:5e:dc:e4:ba:a6:dd:f8:f2:60:f2:11:c9:95:43:fa:
         37:e3:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----