Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer
File:                     EB3A64DF8C582A21481B7978AB002615ADCB5DFE.cer (raw, json)
Hash identifier:          kkBLGoWbovXdnkPUZreOPRxp6CRvpbjhFdTZ3J+cR70=
Subject key identifier:   EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C0FA404FD2ED9BFE91009899276C58C4F9797C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 18:17:20 +0000
Certificate not after:    Sat 16 Nov 2024 18:22:20 +0000
Subordinate resources:    AS: 271321
                          IP: 190.113.60.0/23
                          IP: 2804:79b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:a4:04:fd:2e:d9:bf:e9:10:09:89:92:76:c5:8c:4f:97:97:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 18:17:20 2023 GMT
            Not After : Nov 16 18:22:20 2024 GMT
        Subject: CN=EB3A64DF8C582A21481B7978AB002615ADCB5DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:c2:f7:cc:ba:f4:0a:be:5c:6f:0c:18:39:
                    73:82:16:94:78:1c:a1:d3:1e:39:f4:ec:03:16:8a:
                    71:88:f3:eb:f7:86:1f:b7:34:ae:21:81:47:91:4b:
                    75:6b:2f:1d:31:59:69:64:3c:5b:61:d5:5e:97:81:
                    d5:a6:a9:e1:36:45:71:33:84:bd:81:7f:46:a7:12:
                    43:5b:5f:92:ff:cf:bc:f0:01:2a:9a:52:bf:76:99:
                    9f:76:1a:16:ec:96:8a:11:49:9b:f9:2d:83:bd:94:
                    b4:7f:17:5f:ea:74:e9:de:a9:95:fd:dd:12:30:9d:
                    03:82:e4:12:bd:b2:60:2d:ca:44:c5:3e:ff:cc:7f:
                    30:0f:d7:3a:ec:87:e6:b9:08:6f:70:bf:b6:57:5e:
                    1b:f2:e4:d7:57:12:ca:38:67:3b:b2:22:89:b0:f7:
                    67:34:48:e3:39:72:bc:6e:5b:64:8b:8b:24:6d:eb:
                    bf:19:60:a2:c3:3d:33:c3:63:57:1b:1b:3d:b8:67:
                    dd:a8:ae:9f:44:e0:53:d0:86:9b:dd:b1:bf:35:b5:
                    5f:11:2f:24:55:7d:99:b7:e5:ec:ce:65:b0:77:f0:
                    9f:70:03:99:6c:ff:1f:fc:87:c6:54:11:2f:25:da:
                    3f:ae:f5:e8:a8:5d:51:1a:24:18:f0:e1:0b:20:e8:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:3A:64:DF:8C:58:2A:21:48:1B:79:78:AB:00:26:15:AD:CB:5D:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vTjk6WecxVrYJYTGQjhK46ReiYien2FDPpQYMr68AGU/0/EB3A64DF8C582A21481B7978AB002615ADCB5DFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.60.0/23
                IPv6:
                  2804:79b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271321

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:d7:b5:44:94:29:d4:51:8f:80:2d:2a:71:ae:c1:e3:50:
         14:50:25:46:d2:a2:3c:3f:15:ee:fe:36:b4:d2:c3:bd:04:cd:
         ec:65:71:85:a7:d9:fa:9d:43:ba:4c:06:f3:46:98:55:c4:2f:
         d1:53:54:2c:73:0a:ce:92:ab:64:cb:71:06:a1:86:2c:1b:8b:
         2a:75:16:73:72:5e:cb:83:c3:18:a6:be:53:64:45:e7:0a:b3:
         6c:d0:cc:eb:79:8d:b9:ab:11:82:7e:8c:f5:7d:f2:c7:ea:34:
         b3:69:d8:50:e7:6b:b3:1d:10:ad:04:de:f1:43:4d:f9:46:03:
         07:93:2f:85:34:fd:71:55:35:b5:9c:e5:42:c3:92:e9:f8:41:
         ae:b3:8d:b4:52:dd:6a:eb:68:b4:9d:ec:f3:c0:1e:0b:84:5f:
         6d:b0:1d:7e:95:5f:b5:c5:57:c6:6a:cf:3a:64:0d:c0:4d:93:
         dc:75:85:89:f6:64:a1:fb:9c:8e:3b:2b:2b:72:67:a2:18:50:
         c2:7f:e4:7a:91:2d:1c:be:6f:ce:51:da:71:86:50:25:f1:78:
         51:06:8d:8f:16:a0:63:6b:26:6c:9c:aa:7f:26:73:ca:ff:47:
         cc:ba:62:78:88:35:79:45:eb:c9:d1:32:26:2d:20:a7:99:ad:
         6c:f3:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----