Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer
File:                     06F41C467498C83DCD58365909CB1B1CDF4E4E34.cer (raw, json)
Hash identifier:          fgAIuF4xL9XDjAOCnGR+rE39dWFpi2ehg9IsZTXtk70=
Subject key identifier:   06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       230DB03337DFD02DD6A2135CD542015929AE9D01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/06F41C467498C83DCD58365909CB1B1CDF4E4E34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 18:25:11 +0000
Certificate not after:    Mon 17 Jun 2024 18:30:11 +0000
Subordinate resources:    AS: 272185
                          IP: 2804:833c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0d:b0:33:37:df:d0:2d:d6:a2:13:5c:d5:42:01:59:29:ae:9d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 18:25:11 2023 GMT
            Not After : Jun 17 18:30:11 2024 GMT
        Subject: CN=06F41C467498C83DCD58365909CB1B1CDF4E4E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:95:6e:cb:3b:84:59:50:d1:7b:d1:bb:d4:
                    8e:2a:a1:ab:ce:7f:f4:70:55:ab:e7:9d:af:c9:81:
                    a8:3f:f1:3f:a6:43:f3:a0:f4:6e:8d:a2:ff:ad:da:
                    b4:60:88:4a:9e:32:51:12:f1:fc:61:ef:29:55:67:
                    d0:55:38:e1:1a:4e:fe:b8:b1:98:46:90:10:89:e5:
                    49:48:6a:6f:fb:34:4f:65:f7:31:5d:3e:33:0d:47:
                    63:ad:fc:c8:f3:74:9d:02:8f:6d:5d:fe:3c:8e:44:
                    7d:7e:59:4f:a2:b5:a1:f2:16:e8:04:ce:9d:02:c5:
                    76:db:80:5f:8a:cc:f9:f6:14:1f:2b:80:b1:ec:44:
                    1b:ea:64:65:d2:f8:e6:9b:51:31:44:84:b0:5c:85:
                    3a:ff:31:d4:a2:cd:96:78:77:b3:55:da:f1:cd:f5:
                    b9:42:04:6e:9d:84:a8:70:9f:d8:34:b7:35:f8:67:
                    cd:ba:cc:06:30:57:54:8c:1b:72:f5:04:22:3d:ee:
                    25:39:72:fc:e5:d9:12:a6:9b:5e:04:25:63:9e:62:
                    57:0a:c2:5d:40:47:24:21:32:2b:07:c1:32:85:a7:
                    fb:01:1a:48:44:62:2a:3e:40:48:e3:c6:1c:9b:45:
                    44:21:55:53:64:b2:e2:72:ea:41:43:c4:92:bc:15:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:F4:1C:46:74:98:C8:3D:CD:58:36:59:09:CB:1B:1C:DF:4E:4E:34
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/1/06F41C467498C83DCD58365909CB1B1CDF4E4E34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272185

    Signature Algorithm: sha256WithRSAEncryption
         31:88:2d:b4:6f:06:fc:75:4a:bb:ca:e3:40:96:17:aa:42:bf:
         e3:07:e3:69:4a:3f:f4:85:cc:d5:25:24:20:cb:99:2d:36:d4:
         82:e2:06:9d:70:25:5e:5d:9e:ed:fc:e6:3a:9e:30:83:df:60:
         af:71:56:e2:98:cf:96:cf:80:e2:fd:f5:87:b7:2e:b8:fb:0f:
         22:c5:1d:81:09:be:90:d7:b8:36:88:22:06:18:9e:e2:51:b9:
         fe:6b:85:af:8e:d5:4a:ae:7d:f2:f0:97:3b:df:c7:5d:e6:63:
         22:33:c8:57:1d:89:f8:98:9c:04:3f:08:e3:6d:ba:92:8b:22:
         13:8a:32:2a:08:ac:8e:23:d3:8e:19:0c:cb:4f:d3:d2:bd:d4:
         07:56:9b:30:fd:54:26:59:27:1c:09:0c:47:40:0d:96:df:4a:
         ff:ca:ad:5f:4f:61:fd:3c:59:12:09:be:e2:4e:e3:2f:25:fe:
         c8:52:58:c1:bc:ab:32:bc:04:9a:cc:4a:5c:1c:57:6d:eb:cf:
         eb:28:10:d8:51:d4:f5:17:36:7f:a2:7c:78:7d:b8:ce:ef:c4:
         54:52:9b:bc:48:92:53:7c:f2:6d:60:f4:e3:b8:67:fd:87:23:
         2a:3a:34:e6:75:43:c2:88:90:66:9d:12:fc:7f:e2:49:0c:39:
         49:ef:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----