Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer
File:                     2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer (raw, json)
Hash identifier:          UUF3xLf3LvoCeAXAeNm+Bqpxt7OA/TKESTK2CXNJBkw=
Subject key identifier:   2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0162C189CDC3CC82F2CF1C9A9ACD3CF43872B212
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:28:03 +0000
Certificate not after:    Tue 28 May 2024 19:33:03 +0000
Subordinate resources:    AS: 265143
                          IP: 143.255.92.0/22
                          IP: 2804:2b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:62:c1:89:cd:c3:cc:82:f2:cf:1c:9a:9a:cd:3c:f4:38:72:b2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:28:03 2023 GMT
            Not After : May 28 19:33:03 2024 GMT
        Subject: CN=2F7A4FD2065A1C732A7417998C1B8FAC75226544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:54:88:c0:ed:98:8f:b0:93:9c:db:41:ac:
                    3f:50:84:2a:3f:69:a2:8b:65:18:26:60:ea:8b:6a:
                    17:46:b2:a2:cd:b0:b5:c4:a5:63:4b:17:ac:6c:88:
                    54:cf:87:ee:55:3b:bd:e1:0b:94:7d:8b:8f:6e:42:
                    8b:b6:93:ed:c5:ec:23:6c:1e:49:e3:79:d0:6e:72:
                    79:37:51:ba:e0:b1:f2:e4:aa:3f:90:86:d9:04:13:
                    c6:dd:e5:fa:f8:80:89:51:02:3c:4f:36:12:9d:90:
                    b9:56:90:0f:18:81:e9:6f:99:b6:02:08:f7:87:26:
                    16:f1:fe:ed:79:ec:85:77:52:d7:07:9a:3f:bf:12:
                    0c:86:09:63:15:93:cd:95:5a:27:c5:ad:23:8b:23:
                    98:4c:77:89:11:f8:3e:82:ad:8e:6a:79:68:b2:5f:
                    b5:b6:dd:bb:c1:9d:7e:1a:8a:45:7c:b0:7e:1d:e3:
                    e4:7e:10:b8:8c:d9:24:0e:97:b7:5e:d0:ee:38:a8:
                    31:11:03:f4:bf:a7:37:02:8f:b3:f2:c7:fb:69:da:
                    dd:7f:24:a9:24:41:94:e2:87:d8:c5:37:9c:0f:8e:
                    13:60:1e:ab:b5:92:96:8a:22:7a:6b:fe:7b:49:88:
                    97:d0:b5:8e:fa:06:70:ea:38:eb:d1:a1:b7:33:6c:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.92.0/22
                IPv6:
                  2804:2b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265143

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:1c:b3:2e:d2:93:6e:de:9b:db:db:1a:88:bf:76:89:14:
         ab:11:12:95:be:f2:f2:39:e9:c9:dd:70:4c:82:8f:f5:80:19:
         c7:93:39:78:ac:f3:da:67:7d:30:0a:11:80:81:14:a1:5e:4f:
         35:ad:e7:3c:7d:0d:2e:24:d6:29:14:f4:4c:3b:81:87:d8:d8:
         68:61:ff:e6:1d:8c:dd:24:16:a0:f3:9f:56:ac:85:74:5d:3d:
         d3:34:04:79:f8:77:95:a3:2f:95:5d:2c:64:4f:75:13:db:32:
         95:ba:6f:b1:be:bf:3e:10:12:9c:c9:40:9a:bd:f8:43:70:9b:
         40:84:05:fb:2b:31:9d:b6:b1:db:94:b0:17:43:34:19:c5:5e:
         e1:94:a5:30:3b:ac:dc:c3:4d:f5:de:7b:12:1b:74:e3:2c:17:
         c8:61:77:68:71:62:51:50:a5:08:36:d3:1e:70:86:93:ad:3d:
         1d:ac:23:d2:55:69:61:99:b4:e9:32:49:0d:a2:9d:68:92:2e:
         4e:82:5c:cc:b2:81:61:95:e0:7d:a1:47:44:d8:9c:6c:13:4e:
         6f:5d:fb:75:b4:5c:c5:3f:6a:3d:31:17:08:06:3b:25:e0:5e:
         01:a4:59:55:6d:53:a5:ad:26:55:9b:49:06:b5:be:ab:15:4e:
         e1:3e:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----