Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer
File:                     2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer (raw, json)
Hash identifier:          nOHpS9lI3LnjWVKDr3Y8Rxfef8pNv7hB6uPSor8ZTBM=
Subject key identifier:   2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D7DE9BC3AB1435639A23F558AABB67ED6C9C34C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 16:54:14 +0000
Certificate not after:    Wed 14 Aug 2024 16:59:14 +0000
Subordinate resources:    AS: 269461
                          IP: 45.187.68.0/22
                          IP: 2804:64fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:e9:bc:3a:b1:43:56:39:a2:3f:55:8a:ab:b6:7e:d6:c9:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 16:54:14 2023 GMT
            Not After : Aug 14 16:59:14 2024 GMT
        Subject: CN=2F01BE16D3A51E20A05820B976FF259FD4D960FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:c2:4b:c4:a1:76:c9:07:76:e5:63:eb:c3:
                    60:2f:d1:95:49:4f:7b:e8:36:c1:42:a4:64:de:7d:
                    66:fa:e8:a6:32:6c:8d:5b:19:14:7a:93:93:5b:ad:
                    27:f5:54:cd:20:86:d6:0d:81:b2:b1:9d:e7:a2:dc:
                    43:93:80:52:41:f4:87:e0:a5:af:40:4b:d1:d2:a4:
                    ce:e6:25:06:74:82:fb:8f:a7:f8:98:05:c0:e2:91:
                    3f:f3:54:26:80:33:0b:42:4a:65:34:29:9d:59:3e:
                    65:a3:f1:b8:e7:ad:17:18:36:d8:ca:81:e6:57:27:
                    d7:46:15:ff:52:cc:a6:1f:52:f3:b1:e0:ec:8b:48:
                    98:93:00:66:7c:cc:b2:a3:79:79:ff:d6:6e:2b:f7:
                    9d:76:d5:7b:14:87:2e:e0:76:b3:d8:d7:92:4b:e2:
                    87:db:a2:ce:88:d4:f7:9f:88:96:63:fa:fc:c6:fc:
                    c7:b7:bb:30:69:b4:e5:29:d2:e6:ac:50:87:8b:f1:
                    2c:77:d0:12:fb:d3:81:8b:ed:ab:f0:6d:c9:95:5a:
                    ac:72:31:e6:82:ec:dc:a8:7e:3a:11:81:8b:76:18:
                    6b:cd:db:c4:b7:b5:18:86:7c:c6:97:56:09:db:09:
                    fd:99:23:35:75:19:6b:2b:ec:50:32:da:87:2e:e7:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.68.0/22
                IPv6:
                  2804:64fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269461

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:d9:cf:f0:c1:72:a7:f4:be:fd:3e:de:de:07:cd:81:99:
         63:61:ce:e0:5e:cc:9f:18:22:bf:52:0e:37:1a:5d:67:83:ad:
         81:9d:fe:f8:4c:e5:3b:9d:68:c7:09:29:e0:6d:87:7b:5c:9d:
         db:5d:39:69:74:5e:ec:8e:48:db:86:71:aa:e8:00:40:e5:a2:
         42:d8:75:6d:e6:3a:0e:20:2d:39:2e:97:1f:18:25:6a:9e:fe:
         80:61:d4:f6:74:0b:2c:72:b7:df:65:66:3a:3b:9f:3d:18:de:
         59:55:dc:96:c2:6a:d8:bd:d7:9f:95:24:4c:67:64:1c:ac:ba:
         a5:36:d5:8c:30:35:65:37:47:56:8b:20:7b:be:d3:cb:b5:6a:
         80:15:24:7c:fa:74:a0:fe:81:1e:60:15:a0:e8:fa:85:a1:10:
         0b:6a:de:bc:23:3b:7d:b0:58:07:85:c4:87:25:a2:95:f3:02:
         fe:48:ca:28:34:ef:6e:ba:6c:4a:ae:b9:95:cb:d2:f8:3b:38:
         74:84:eb:be:06:76:62:e9:3b:94:c3:b6:47:ee:c0:d1:d2:7f:
         cd:65:f9:9d:69:2b:dd:5a:47:8b:cb:c4:71:e1:b9:6d:aa:2f:
         3c:55:d5:76:57:d4:4c:8d:aa:0a:92:da:2d:12:66:46:a3:23:
         b4:a9:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----