Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25E61B6D67B29DE9BAB2ED6FDD778E70FC4B4758.cer
File:                     25E61B6D67B29DE9BAB2ED6FDD778E70FC4B4758.cer (raw, json)
Hash identifier:          J9oP8QsYeG4tRMO8oICOiKM/SiCHqXEuryfQ8I02b7E=
Subject key identifier:   25:E6:1B:6D:67:B2:9D:E9:BA:B2:ED:6F:DD:77:8E:70:FC:4B:47:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       208C1F5BFD60FC0A28162C0768777AADE0C23060
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/25E61B6D67B29DE9BAB2ED6FDD778E70FC4B4758.mft
caRepository:             rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 01 Oct 2023 15:17:48 +0000
Certificate not after:    Sun 29 Sep 2024 15:22:48 +0000
Subordinate resources:    AS: 272762
                          IP: 2804:884c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8c:1f:5b:fd:60:fc:0a:28:16:2c:07:68:77:7a:ad:e0:c2:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  1 15:17:48 2023 GMT
            Not After : Sep 29 15:22:48 2024 GMT
        Subject: CN=25E61B6D67B29DE9BAB2ED6FDD778E70FC4B4758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:3d:c8:f4:fb:8d:09:87:38:27:5f:33:20:
                    f4:bc:85:ef:0b:61:d1:28:75:15:f5:30:1d:3e:0c:
                    94:e8:84:26:2c:a8:32:19:a5:52:79:40:24:48:aa:
                    db:67:85:87:49:90:65:b2:be:0e:55:46:2a:e8:b1:
                    12:60:3a:4f:5f:03:e6:fa:f1:4a:d7:82:b3:74:68:
                    86:8c:06:ab:26:a0:dc:cf:2a:0f:cc:68:93:63:64:
                    3e:18:e7:e3:11:40:52:1f:09:41:2d:10:4e:23:f2:
                    c0:73:f7:f8:f3:db:44:9a:9d:88:21:8d:da:ab:be:
                    24:dc:7d:d9:20:5e:ed:8f:c2:6b:49:6d:4c:79:79:
                    fa:60:c7:eb:d6:d5:41:43:ae:fd:bc:05:9c:7d:ad:
                    7d:a4:c3:95:74:61:ab:7a:a0:c4:41:2b:6f:d1:0e:
                    4e:3e:8a:42:87:af:05:84:b8:0d:14:db:cd:76:ae:
                    0c:e3:69:fd:b7:b1:1b:73:e0:72:41:67:5a:c0:02:
                    55:13:6d:bb:04:08:04:28:06:47:f5:bc:76:8c:ab:
                    5c:a3:be:00:69:ef:ff:ad:fb:0a:00:19:c3:c8:32:
                    35:7c:e2:24:ed:4b:e8:b5:11:28:81:13:2c:29:2c:
                    e2:fd:5e:b6:1d:29:ae:ab:64:a6:4a:21:f0:01:41:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:E6:1B:6D:67:B2:9D:E9:BA:B2:ED:6F:DD:77:8E:70:FC:4B:47:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/36DSh72bmkCBA7c4269qWENUX4tCfKnozwgHP1Zukuvk/0/25E61B6D67B29DE9BAB2ED6FDD778E70FC4B4758.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272762

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:b4:3b:e2:4b:a5:9b:5b:68:32:24:16:15:9c:a4:5d:8c:
         8d:18:c5:1f:09:b1:d6:50:9e:b7:16:a9:72:f6:22:7e:77:ba:
         03:b0:d9:e1:8f:72:1f:9f:0e:f1:32:2c:0a:0a:69:b3:da:58:
         78:e5:69:85:dc:d5:8e:b7:16:1f:62:54:53:3b:7b:95:c2:4e:
         b8:91:21:39:b4:a0:0e:74:a8:1b:c0:24:40:a2:50:f6:d9:de:
         64:c3:87:ef:6a:77:90:76:f5:7e:6d:5d:61:74:79:af:a9:01:
         6f:21:1b:3b:48:68:af:9e:f7:c4:58:86:05:d0:04:ab:c6:33:
         d3:22:c1:7a:fe:56:09:c5:60:00:eb:bf:c1:c4:c5:b8:35:e2:
         5b:28:40:d8:10:cc:24:b2:ed:91:6e:db:87:00:40:46:5c:b7:
         1c:2a:fc:da:c8:e6:1d:25:ce:26:15:2c:1d:b0:a8:92:aa:85:
         04:90:91:c2:9c:f5:90:86:62:1a:1c:aa:19:49:5e:cb:a3:a8:
         77:88:21:a5:19:2a:71:0a:87:67:fe:db:ef:a9:d3:d5:0d:59:
         5c:29:4b:b2:eb:20:d7:fd:aa:64:7c:03:c1:74:87:7a:24:8d:
         fc:53:a7:72:e7:72:95:86:6c:95:56:62:7d:07:55:6f:49:25:
         a4:08:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----