Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
File:                     F53D745990071B2CCEF5F48CBFA053605498A66A.cer (raw, json)
Hash identifier:          m9AX9/63BbMQNMyyinW7xeEnCQlyBT3uopq0j6ai5zI=
Subject key identifier:   F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BDB0650B7441FD803631221B43FA9FD1367E8ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 12:55:09 +0000
Certificate not after:    Tue 03 Dec 2024 13:00:09 +0000
Subordinate resources:    AS: 267128
                          IP: 45.229.138.0/23
                          IP: 2804:488c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:06:50:b7:44:1f:d8:03:63:12:21:b4:3f:a9:fd:13:67:e8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 12:55:09 2023 GMT
            Not After : Dec  3 13:00:09 2024 GMT
        Subject: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:ab:f6:59:b8:e6:46:52:c4:1a:93:5e:bb:
                    62:33:fb:c3:83:df:77:0a:52:d7:24:20:a8:25:e7:
                    7d:9b:34:e9:5f:66:2c:f5:8d:28:90:aa:0d:c4:8c:
                    dd:ae:e7:7a:15:28:ed:2f:6c:35:56:cc:8f:e0:5c:
                    8b:5e:c4:67:5f:24:fb:92:80:19:db:0b:fe:b9:12:
                    40:f6:82:88:8b:b0:59:cf:2a:08:30:0d:5b:23:46:
                    0f:11:24:5f:6d:dc:21:ed:5a:76:40:81:e7:aa:a1:
                    37:23:b0:6f:4c:4f:9b:50:00:d1:83:09:a3:90:cc:
                    92:95:1e:e4:0e:08:af:0f:3b:f9:41:75:14:7e:7f:
                    49:4a:da:61:64:24:7d:d2:fc:52:7c:e5:4b:ed:78:
                    b1:78:e9:37:38:67:19:30:c0:f8:94:13:1f:39:58:
                    0a:9b:4a:eb:7b:48:da:6d:78:bd:0b:2a:dc:1e:3c:
                    32:72:c8:4f:c5:15:7f:19:cb:35:68:fa:a1:e3:4f:
                    74:c4:cc:23:5f:23:fe:d5:99:94:d8:d7:ca:bd:70:
                    c3:6b:3b:a0:0d:08:85:d6:32:49:d4:62:a8:5f:a6:
                    33:70:73:12:29:51:26:8d:55:d4:9d:02:3d:44:44:
                    91:2f:53:a1:8f:80:c4:56:6d:24:5f:07:36:c5:06:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23
                IPv6:
                  2804:488c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267128

    Signature Algorithm: sha256WithRSAEncryption
         33:a6:6e:bc:61:d5:36:3c:50:24:2e:76:52:40:9f:29:3c:cd:
         40:7c:9e:f9:9a:8d:c9:87:94:6e:32:9e:80:25:85:7c:c5:14:
         23:31:c8:44:d0:26:36:9c:9a:c6:ee:0d:ab:42:3e:33:bb:e0:
         32:8b:ce:84:68:6e:bf:40:7a:15:87:f5:3c:d2:5c:00:61:f1:
         fe:d5:d1:55:b2:ec:90:fe:37:3a:63:5e:00:5f:6e:15:88:78:
         23:a5:6c:29:9e:7b:3c:b6:6d:15:37:7b:a1:6c:d6:a3:f4:73:
         33:32:7f:78:73:42:c4:2f:ec:4b:cb:79:51:a7:86:5b:f3:03:
         b6:0b:8a:c1:3b:0f:75:06:80:08:85:73:05:cb:2e:b8:88:c5:
         88:40:a9:81:6c:f0:09:92:f6:9d:8f:63:9a:b3:eb:bf:bb:55:
         f1:7b:e1:ed:cf:70:76:3d:ec:de:dc:ed:b3:f1:4e:4e:ea:3e:
         8c:bd:6c:e2:c4:9d:bf:1b:95:1a:cb:b0:4a:24:d6:ed:ab:f4:
         6f:58:17:73:94:c7:2d:4a:82:f4:7c:b5:f5:8c:bf:6d:42:a6:
         0f:57:e5:ac:ea:ec:73:a2:d0:18:3c:2d:99:89:a2:9a:92:ae:
         aa:2e:6d:08:ef:96:e6:8e:75:33:6d:a2:00:75:fe:38:90:5b:
         bf:ca:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----