Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.cer
File:                     EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.cer (raw, json)
Hash identifier:          PSCJxUQXzmGdNzKLDgfkRhtyM0JxzNu1IorcBJAVJSo=
Subject key identifier:   EE:5E:DE:39:AD:4E:5E:E8:EE:8F:3E:07:83:50:69:94:F2:B2:7A:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D58BA027215AF43A51EF5717671CF0891BDA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 22:15:10 +0000
Certificate not after:    Fri 14 Jun 2024 22:20:10 +0000
Subordinate resources:    AS: 268548
                          IP: 45.163.40.0/22
                          IP: 2804:52e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:58:ba:02:72:15:af:43:a5:1e:f5:71:76:71:cf:08:91:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 22:15:10 2023 GMT
            Not After : Jun 14 22:20:10 2024 GMT
        Subject: CN=EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:f7:f5:e8:e9:f7:9b:63:53:5f:d9:30:2d:
                    d5:12:91:f5:10:71:b6:42:84:00:33:5f:55:a4:3f:
                    4d:c8:3e:22:4c:d0:96:99:b0:e0:14:f4:53:f5:f8:
                    65:a0:9d:52:ab:7e:8a:ac:c7:ce:b5:59:da:e6:60:
                    75:38:26:e0:70:cf:b8:c2:39:9e:42:cc:31:00:71:
                    75:ec:95:3e:d4:58:0d:47:59:b8:c8:ca:a6:d5:3e:
                    fb:15:0f:4f:e3:3c:e0:a5:6c:4e:df:6d:32:f2:40:
                    75:3e:43:9f:ee:e3:c5:b6:7a:9c:7e:c6:ad:b6:90:
                    2c:f9:c7:56:86:cc:c3:6f:d7:1e:cd:23:55:5a:da:
                    f4:89:54:7a:6b:cd:ba:7c:b0:3c:94:78:e6:94:f6:
                    aa:e3:24:5c:80:31:db:1f:2b:45:cc:0f:a3:e7:31:
                    97:14:0e:a1:88:a9:5b:2d:6b:9d:d0:83:2b:32:78:
                    34:ac:35:2e:05:0d:8e:f2:13:e9:4b:ee:18:35:5d:
                    c8:e0:5c:c5:c4:04:5a:f3:1f:73:72:92:7c:62:9d:
                    33:af:33:6a:e3:a3:00:4e:7a:c3:e7:ff:7b:63:bf:
                    f0:2f:ca:f0:76:c1:8e:27:79:ea:98:f2:ee:3c:cc:
                    08:ce:4e:5b:68:27:31:bd:a1:65:5b:b6:b7:4d:f5:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:5E:DE:39:AD:4E:5E:E8:EE:8F:3E:07:83:50:69:94:F2:B2:7A:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/0/EE5EDE39AD4E5EE8EE8F3E0783506994F2B27AAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.40.0/22
                IPv6:
                  2804:52e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268548

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:a0:b1:7b:55:89:e3:fd:f8:a6:b6:86:95:17:1b:73:c1:
         c1:c0:4c:0d:4e:f6:4d:ff:da:07:14:1f:ca:9d:28:47:17:28:
         f9:69:37:ea:db:b7:dd:10:78:9f:7b:0a:20:60:9c:3a:90:6d:
         51:f3:73:ce:1d:fe:2f:e0:27:f5:74:06:bb:7d:f0:47:e2:52:
         61:cd:24:57:a6:75:26:3c:35:c4:55:24:40:2e:0d:f6:4c:79:
         f1:0e:87:8d:75:96:fd:85:12:85:73:9d:99:3f:6e:5e:19:ff:
         62:6f:df:7d:b6:a1:e9:f3:26:bc:07:50:29:2a:82:6f:cc:49:
         4d:d8:c1:a1:d3:a1:98:b8:04:74:17:60:1a:2f:83:c9:17:7d:
         36:de:0e:21:80:0b:dc:eb:b8:f0:40:a7:d1:62:7c:d4:16:ae:
         69:0b:2a:68:b4:26:86:2a:69:20:f2:3f:5e:d8:44:e1:d6:a3:
         42:72:ae:b4:a7:2c:3d:98:20:c9:a5:b1:08:aa:1d:78:87:2a:
         c6:9c:7a:3e:1c:54:17:a6:33:e1:05:b5:3f:df:37:28:8b:ac:
         a4:1f:6e:ed:22:9a:62:bc:a7:34:d4:62:0f:6e:44:46:ba:d0:
         1e:e6:c0:47:8f:a6:67:d7:60:c2:a5:68:cc:e8:c3:ee:98:0d:
         71:17:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----