Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EAD33A3441821E9062612878C0B6A2C153665E93.cer
File:                     EAD33A3441821E9062612878C0B6A2C153665E93.cer (raw, json)
Hash identifier:          KZFigklX1hf4b+z2Bb7g2J0Ardr9PYprMIGBOUIxFlU=
Subject key identifier:   EA:D3:3A:34:41:82:1E:90:62:61:28:78:C0:B6:A2:C1:53:66:5E:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       720C94750D049E3610DBB2315B4BCF894CEBD5A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/EAD33A3441821E9062612878C0B6A2C153665E93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Jun 2023 16:47:22 +0000
Certificate not after:    Thu 06 Jun 2024 16:52:22 +0000
Subordinate resources:    AS: 269262
                          IP: 45.182.8.0/22
                          IP: 2804:61e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0c:94:75:0d:04:9e:36:10:db:b2:31:5b:4b:cf:89:4c:eb:d5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  8 16:47:22 2023 GMT
            Not After : Jun  6 16:52:22 2024 GMT
        Subject: CN=EAD33A3441821E9062612878C0B6A2C153665E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:cd:3a:e9:4c:64:bc:bf:ba:1e:b8:7f:24:
                    f4:80:32:fc:9c:b3:14:dd:1a:20:51:8e:d7:c1:8f:
                    ec:12:9e:81:64:17:72:8e:21:95:84:55:f3:27:49:
                    b9:74:ba:53:37:c2:ad:73:e6:9e:86:11:fd:8c:f1:
                    79:5b:46:12:9d:8f:8e:01:b8:91:1f:b5:1a:ea:1c:
                    cf:c3:78:50:a2:33:e5:ca:7a:af:40:66:5b:a4:6c:
                    53:d1:fa:99:73:85:b7:56:8b:cb:4d:ff:7d:51:d5:
                    f8:2b:0b:f1:95:c8:5f:06:55:a0:72:d8:a8:81:8b:
                    f4:cf:a6:23:4a:7c:b7:37:54:34:9d:54:ab:44:31:
                    76:2d:ca:96:dc:1f:95:9d:a3:0c:37:05:49:f8:2e:
                    85:5b:71:2c:bd:29:2f:27:fa:15:52:df:98:07:dc:
                    2a:06:b5:ff:b8:02:0c:c7:46:0a:e0:05:1a:ce:a0:
                    ad:50:79:cb:8a:50:f8:02:44:19:2d:34:f4:33:ce:
                    29:e8:be:20:83:5e:02:ca:71:59:73:72:05:2d:38:
                    c4:b2:61:24:94:89:ee:78:46:94:0f:81:d4:5b:0b:
                    b5:bf:1f:56:1e:d6:8e:ab:84:a6:67:c1:5f:35:e7:
                    c2:4d:e5:80:b0:c2:9c:b5:21:39:db:76:24:40:fc:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:D3:3A:34:41:82:1E:90:62:61:28:78:C0:B6:A2:C1:53:66:5E:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/EAD33A3441821E9062612878C0B6A2C153665E93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.8.0/22
                IPv6:
                  2804:61e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269262

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:b8:10:e6:ef:f9:42:87:fc:76:7d:60:fe:fb:be:de:f6:
         45:dd:53:25:ab:12:7f:a9:32:a6:79:3b:68:5c:c4:28:a1:81:
         b0:0d:5e:ee:db:66:7c:8b:f6:f1:c1:a1:ee:c1:f5:3d:47:79:
         95:87:90:79:c4:fb:46:57:1a:50:b2:44:10:6b:5b:63:68:d0:
         07:7b:70:3b:8b:e1:d1:aa:96:93:0a:8d:82:fd:5b:83:88:cd:
         17:36:44:b7:68:4a:08:ce:7b:63:3a:d2:c4:1f:7d:8c:53:17:
         2a:42:15:aa:75:b7:f6:36:73:72:5b:bb:a6:ff:09:04:53:8e:
         e4:29:01:a0:32:e8:e1:b9:f2:92:02:33:02:48:20:d4:00:fc:
         f1:4e:3f:09:d1:b6:4f:0d:6e:ec:11:d6:33:97:84:39:c6:94:
         4d:e2:e1:e0:7a:a5:e1:9d:48:82:72:2b:74:74:6a:86:8a:ac:
         b5:ae:9f:a7:30:04:15:08:01:3e:b2:8c:f9:32:7b:54:3b:15:
         05:55:5f:19:ac:6e:bd:b1:dd:d8:eb:47:d9:d6:35:38:d2:86:
         8e:b0:75:4c:5a:a9:26:57:f6:62:64:80:f7:df:24:a7:b1:a8:
         41:67:9a:e2:45:59:a6:40:44:36:80:bd:72:58:d9:22:ec:30:
         65:ad:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----