Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/068DE4939DC70C774260BEF2C9FCFE4351316661.cer
File:                     068DE4939DC70C774260BEF2C9FCFE4351316661.cer (raw, json)
Hash identifier:          dY2bves1fK5ldDLoRu3B2nIo6AB3X+1OJ4hQfeR1hxk=
Subject key identifier:   06:8D:E4:93:9D:C7:0C:77:42:60:BE:F2:C9:FC:FE:43:51:31:66:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       369ED0BA7FA9C54A14FB85A1E1BF4664CD55606B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/068DE4939DC70C774260BEF2C9FCFE4351316661.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 15:13:07 +0000
Certificate not after:    Thu 25 Jul 2024 15:18:07 +0000
Subordinate resources:    AS: 269141
                          IP: 45.180.156.0/22
                          IP: 2804:6008::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9e:d0:ba:7f:a9:c5:4a:14:fb:85:a1:e1:bf:46:64:cd:55:60:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 15:13:07 2023 GMT
            Not After : Jul 25 15:18:07 2024 GMT
        Subject: CN=068DE4939DC70C774260BEF2C9FCFE4351316661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:69:a8:63:80:69:dc:bf:45:1b:58:86:f9:
                    78:12:db:ed:c3:01:1a:3e:58:92:b1:6e:b9:f0:dd:
                    59:a1:b2:76:28:e4:0b:01:87:b8:7c:90:09:85:21:
                    3c:f8:b2:39:a2:55:ef:50:59:d5:1e:86:f6:6f:6e:
                    34:6f:8b:ef:38:3b:9a:3e:d2:e9:7a:e3:53:b2:c6:
                    21:94:88:7b:ed:f5:4d:86:44:3f:12:32:44:27:7a:
                    24:1f:23:6d:57:1a:ba:4e:33:9f:80:54:42:28:82:
                    10:2d:b8:a0:13:ea:51:7f:bf:08:01:07:37:af:26:
                    ce:ae:17:60:fb:e3:78:b3:0d:1e:d7:57:21:4b:c6:
                    9c:9d:b8:ec:00:3d:de:85:46:c5:3b:2f:17:92:c0:
                    2d:ad:dc:3a:ed:7d:2b:69:a5:96:79:dc:1a:7e:13:
                    af:b9:0f:10:66:55:e2:e7:6f:f5:0c:d7:11:59:1a:
                    12:3f:28:d5:1f:5a:a5:35:b4:bc:9f:b4:8c:4c:02:
                    38:ff:94:6e:14:5f:fe:5d:97:88:14:a5:48:74:ee:
                    e6:b3:31:8e:98:96:39:47:1d:3e:0c:6f:bc:01:a5:
                    05:a7:05:a5:77:2f:0b:06:53:26:a2:55:c7:0a:eb:
                    45:a5:f6:41:87:dd:dd:38:97:6e:f8:3c:66:4e:29:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:8D:E4:93:9D:C7:0C:77:42:60:BE:F2:C9:FC:FE:43:51:31:66:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ahfmuU5TwZ197yWUAVoVJzXAj6kSe4nEMTAAHrvVQm1/0/068DE4939DC70C774260BEF2C9FCFE4351316661.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.156.0/22
                IPv6:
                  2804:6008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269141

    Signature Algorithm: sha256WithRSAEncryption
         65:02:05:6e:91:e7:04:f2:a1:1e:f1:ab:e6:dc:9f:e1:fa:b7:
         15:4a:b9:25:18:87:1f:03:ae:d3:4a:9c:02:01:ed:22:1b:c1:
         ea:dd:23:42:fb:31:c7:6d:aa:51:3f:ed:0e:20:05:33:fb:b8:
         e1:98:c1:a8:b6:e9:3a:5f:ba:ed:1e:0e:43:f4:20:65:37:f5:
         23:c5:33:3c:70:1c:f1:34:09:23:ca:10:f8:da:ec:20:cc:67:
         76:36:05:78:52:28:73:9b:8a:25:2d:07:b3:5a:46:ce:67:d6:
         94:32:f3:4c:5b:f2:12:8d:06:03:c3:5b:02:7d:15:c4:5c:01:
         a6:bf:7b:fb:30:e6:7a:f2:cd:38:5a:83:2d:a8:67:88:0a:e5:
         63:21:a2:40:59:39:f0:e5:ce:03:fa:61:3d:95:fc:de:3b:31:
         8f:72:06:13:3c:f7:b4:55:de:26:f8:1f:a4:e4:91:65:4b:75:
         b5:cc:4b:b5:a7:6b:e8:15:99:50:fb:c4:49:4a:f9:16:c2:6e:
         44:21:f3:a9:d4:23:57:8e:8e:2f:8c:f5:48:ff:c2:88:2b:fc:
         18:ed:92:73:89:7b:39:ed:dd:c6:5d:aa:1d:d4:d8:b5:e9:9b:
         66:9c:94:89:8b:d3:46:40:63:a5:e4:0e:47:3b:72:7e:de:6b:
         db:8c:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----