Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12F0693B57AB2B4D6F9A920B113818C86BE617EF.cer
File:                     12F0693B57AB2B4D6F9A920B113818C86BE617EF.cer (raw, json)
Hash identifier:          SPjOKmjJvRwBLCzYVfCGdrkaf3k8oeO3FEsgovN5XXA=
Subject key identifier:   12:F0:69:3B:57:AB:2B:4D:6F:9A:92:0B:11:38:18:C8:6B:E6:17:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E40A3B6BC3B1009D9A011EC185CC55C39950AE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/12F0693B57AB2B4D6F9A920B113818C86BE617EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 14:35:43 +0000
Certificate not after:    Fri 21 Mar 2025 14:40:43 +0000
Subordinate resources:    AS: 52772
                          IP: 177.39.156.0/22
                          IP: 2804:259c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:40:a3:b6:bc:3b:10:09:d9:a0:11:ec:18:5c:c5:5c:39:95:0a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 14:35:43 2024 GMT
            Not After : Mar 21 14:40:43 2025 GMT
        Subject: CN=12F0693B57AB2B4D6F9A920B113818C86BE617EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:a0:f2:ec:d7:d1:47:2e:e9:c0:a7:0b:1f:
                    da:dc:34:96:21:49:b1:8c:e2:0f:32:a8:43:bd:52:
                    dd:06:69:f0:4b:09:54:28:ab:49:22:1b:78:a5:02:
                    25:da:38:ed:46:a7:d2:5e:91:6d:dc:39:1a:9b:41:
                    92:e1:e4:88:f4:df:29:39:89:10:06:17:d4:e6:79:
                    31:fa:cd:ee:61:52:ef:23:8e:08:c8:ac:96:dc:5e:
                    4d:82:7f:99:58:e4:96:c5:18:6b:11:04:13:36:4c:
                    6f:c5:cb:54:ac:10:14:d7:68:b6:5b:26:d7:86:65:
                    b1:d6:1f:dc:9d:6f:1f:e5:3a:d1:be:c0:0a:67:91:
                    f8:7d:1c:ec:38:04:a3:a3:4d:82:99:61:91:c1:cc:
                    15:f2:bd:64:a8:7a:3d:92:11:3c:66:53:00:47:6e:
                    1c:f7:66:fc:d3:3a:dc:a9:b4:90:14:ea:e2:ca:55:
                    41:30:45:38:c9:bd:37:ac:10:42:bd:7f:df:2e:af:
                    05:6e:44:bf:42:c2:e5:dc:22:e7:04:61:de:06:1e:
                    4f:80:dd:8c:44:40:de:cd:e0:25:8b:b7:af:9e:56:
                    75:d2:1f:0f:a5:2e:e3:78:db:65:d7:b1:d0:2f:3a:
                    84:9d:d5:7d:85:fb:d8:32:fe:e0:f4:f1:94:6e:e0:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:F0:69:3B:57:AB:2B:4D:6F:9A:92:0B:11:38:18:C8:6B:E6:17:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/12F0693B57AB2B4D6F9A920B113818C86BE617EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22
                IPv6:
                  2804:259c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52772

    Signature Algorithm: sha256WithRSAEncryption
         75:35:96:61:c2:9f:00:05:a5:94:8c:2b:61:15:c6:5e:13:9a:
         f3:ea:65:b3:72:fb:a5:61:fa:aa:d1:97:ba:0e:bd:29:21:ad:
         4d:6d:0f:71:59:d2:f7:1e:14:af:22:c5:54:8e:59:3a:18:3b:
         ce:46:2e:53:8d:09:96:33:e6:90:be:ed:1a:9a:2d:9a:49:74:
         c2:87:66:9c:ca:8e:d8:32:54:47:bb:0c:f6:22:e5:c3:4f:30:
         c4:93:da:8b:b5:85:93:ff:80:47:d8:82:96:cd:2d:a3:10:41:
         6d:56:1a:83:41:9e:fd:bd:04:df:3b:3d:e5:2d:a8:9b:2b:43:
         bc:cf:fc:9c:e9:89:9b:98:28:49:e5:b1:24:cf:da:aa:27:81:
         4f:6e:10:3e:9a:42:01:e3:86:50:8b:7d:c7:79:14:5e:10:5f:
         c5:08:0c:cb:7a:e5:26:5b:a9:97:9d:cf:4a:e6:ad:b5:d4:ad:
         2b:9f:1d:d4:8c:b5:82:62:5a:78:82:75:8f:39:89:8b:08:d5:
         54:1c:ad:c4:e3:43:98:73:9c:99:22:02:92:68:0c:03:73:dd:
         22:a4:61:3e:75:d4:ed:64:dd:e4:12:71:e2:67:f2:c4:b4:16:
         06:4b:8b:86:48:97:34:2a:39:d3:28:18:d7:60:79:73:c3:fc:
         f2:f7:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----