Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.cer
File:                     E959984352554C0376C5B30DDCD3D08AC7EC938F.cer (raw, json)
Hash identifier:          6eMNVl0Udq/OaHAiJH4vsGS/n0OhRlAAz8VkeBozGmQ=
Subject key identifier:   E9:59:98:43:52:55:4C:03:76:C5:B3:0D:DC:D3:D0:8A:C7:EC:93:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11EF0EE401BE34E0429C958FA7B83D5B758AEB69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 12:24:02 +0000
Certificate not after:    Thu 23 May 2024 12:29:02 +0000
Subordinate resources:    AS: 263988
                          IP: 138.255.188.0/22
                          IP: 2804:28f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ef:0e:e4:01:be:34:e0:42:9c:95:8f:a7:b8:3d:5b:75:8a:eb:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 12:24:02 2023 GMT
            Not After : May 23 12:29:02 2024 GMT
        Subject: CN=E959984352554C0376C5B30DDCD3D08AC7EC938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:d7:cd:55:ae:e7:fa:99:f6:4e:3b:d3:38:
                    f8:80:bd:9c:de:cf:a3:aa:e3:b7:e8:b5:62:b6:ae:
                    93:31:b7:7c:91:df:54:2f:ad:e6:62:53:fb:ef:6f:
                    40:e2:6f:43:cf:aa:cb:f9:ce:0a:e6:26:e2:9e:70:
                    91:be:58:b0:3c:b1:d6:2d:98:b1:cc:39:3c:4a:57:
                    b2:ce:35:2e:8d:57:01:65:2e:1c:36:2a:99:0e:49:
                    b2:e5:9f:fa:80:56:33:30:54:6c:2f:5c:29:f7:59:
                    25:e7:74:2e:c5:6b:68:06:43:98:d7:fa:dc:d3:9f:
                    1b:16:a1:71:96:92:0b:1a:c1:34:a8:80:08:ea:4e:
                    8f:0c:cb:21:1f:f7:4a:ab:dd:fe:00:90:87:f3:00:
                    fc:e0:0d:b5:08:b4:b4:db:84:b0:57:85:30:80:1a:
                    7c:99:e6:70:b5:e7:40:35:46:18:07:e4:0b:91:89:
                    7e:d6:8a:0d:97:cc:f9:ef:cf:f3:02:ab:ec:24:b9:
                    f6:2b:49:80:68:87:86:ef:2b:43:8d:8c:01:69:0a:
                    17:2f:95:aa:00:fd:83:9f:b1:d3:43:a1:d2:35:2e:
                    b6:5f:85:cb:b2:83:49:8f:e8:20:29:52:ae:32:e2:
                    98:42:f9:a8:18:2e:8a:6a:9c:e8:ee:8a:b7:b9:1c:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:59:98:43:52:55:4C:03:76:C5:B3:0D:DC:D3:D0:8A:C7:EC:93:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/E959984352554C0376C5B30DDCD3D08AC7EC938F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22
                IPv6:
                  2804:28f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263988

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:06:38:57:42:eb:1b:dc:87:99:f8:7e:17:61:8c:a4:ee:
         c3:c8:e8:29:82:66:f9:1a:47:23:f7:10:ae:09:0c:d0:16:a8:
         47:e4:5c:dc:bf:4c:99:d8:58:af:68:fb:7f:2d:43:cf:49:3e:
         6f:b6:a2:28:12:91:86:02:b5:ff:8c:5f:0a:19:09:59:36:be:
         55:e2:e9:00:5c:05:55:3f:bb:63:64:a6:18:f3:11:bb:89:a4:
         42:98:c1:38:60:d4:9d:ac:e1:1f:5d:87:cc:c5:4f:00:f7:ac:
         da:9d:74:b6:f0:9a:0f:8e:7b:3c:90:62:27:06:ca:fe:f5:ad:
         40:20:0e:a0:e8:a2:f7:fb:d9:25:50:16:c7:46:e5:b2:1b:92:
         67:93:7c:d0:3c:22:b2:73:75:e7:55:6d:70:c7:5e:cf:cd:db:
         71:a1:c0:ea:41:f7:80:3a:47:da:1f:a4:9e:d9:2a:4e:dd:3f:
         3b:00:ae:17:9d:f8:b4:0d:b5:c8:da:a2:01:0f:13:d9:6b:2f:
         fe:85:2f:d6:f5:8a:f3:0d:ab:cb:06:36:17:c8:3d:3c:7b:10:
         29:2d:c3:d7:0d:61:15:31:8d:ab:4c:b6:c7:e4:93:c7:a9:56:
         62:52:7f:68:90:a2:77:ff:63:05:22:29:75:41:c4:a2:3d:f4:
         22:28:c8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----