Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/363D9D7FFDEE6190A7DD438F9BE41DEA17CEC777.cer
File:                     363D9D7FFDEE6190A7DD438F9BE41DEA17CEC777.cer (raw, json)
Hash identifier:          zRwpdZGv2uTZ5D9WYKzDPJrq7wPqxMEFHGENNcx7+ug=
Subject key identifier:   36:3D:9D:7F:FD:EE:61:90:A7:DD:43:8F:9B:E4:1D:EA:17:CE:C7:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7724E93A2A51B90C783D0DC797B4603282DDF5C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/363D9D7FFDEE6190A7DD438F9BE41DEA17CEC777.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Sep 2022 17:21:16 +0000
Certificate not after:    Sat 23 Sep 2023 17:26:16 +0000
Subordinate resources:    AS: 268126
                          IP: 45.169.228.0/22
                          IP: 2804:5864::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:24:e9:3a:2a:51:b9:0c:78:3d:0d:c7:97:b4:60:32:82:dd:f5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 24 17:21:16 2022 GMT
            Not After : Sep 23 17:26:16 2023 GMT
        Subject: CN=363D9D7FFDEE6190A7DD438F9BE41DEA17CEC777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:f8:65:d4:91:38:51:c1:25:4f:f7:80:b4:
                    be:b8:70:3d:d0:a2:3c:d6:23:4c:aa:f6:13:6d:43:
                    02:7e:ff:30:a7:1c:88:49:ab:0d:f1:06:31:97:0d:
                    13:8e:10:ec:89:e8:ca:87:c5:15:90:a8:01:7f:ec:
                    9d:07:7c:3c:54:be:7e:3b:2f:d6:ac:7f:00:20:f7:
                    18:92:eb:b1:b3:08:cc:c0:d7:07:b2:30:d2:15:0d:
                    10:04:c2:70:78:bb:d2:54:aa:a0:5d:b1:a8:fe:a2:
                    69:88:f2:c6:92:a8:85:99:5c:fa:f2:a7:dc:28:87:
                    b5:b4:3c:01:3d:10:ba:92:c8:e3:c0:a1:42:e5:04:
                    f1:6e:6c:27:8a:21:b1:3c:26:df:27:2f:91:62:5e:
                    44:0a:26:1a:3a:4a:d3:3b:01:3a:a8:fc:12:95:77:
                    fc:21:8b:9e:e6:c6:fa:29:97:f6:bc:b2:89:bb:14:
                    1c:ef:b8:0d:6b:3b:42:4e:21:fa:58:82:0c:ba:75:
                    cb:92:6d:18:5a:68:9d:47:3e:b4:a1:4f:50:70:b4:
                    57:61:d6:f6:4f:19:62:c9:1f:cf:07:46:ec:bb:d9:
                    2c:4a:39:70:cc:bc:b5:db:0c:13:f5:76:e6:e8:08:
                    17:4b:ec:7e:6f:36:26:bd:fa:8e:cb:6a:a1:1f:d0:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:3D:9D:7F:FD:EE:61:90:A7:DD:43:8F:9B:E4:1D:EA:17:CE:C7:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wMqfzYPHYrmckUbP1dtMQyn8Tx3Quh57NSa2FgkUajA/0/363D9D7FFDEE6190A7DD438F9BE41DEA17CEC777.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.228.0/22
                IPv6:
                  2804:5864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268126

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:51:6c:c4:84:60:47:af:a8:9b:03:cc:96:53:e2:60:79:
         1b:c0:ec:1c:bf:98:25:71:c8:0f:37:2f:ed:b8:67:e6:69:1e:
         13:06:c4:f5:e5:3f:7d:0f:a0:61:2b:2f:91:3d:15:82:31:af:
         27:db:44:99:c1:bf:fc:67:55:76:fd:4a:28:f3:8b:13:17:1d:
         5c:29:43:bf:be:eb:56:99:9d:7f:0f:ac:a6:bc:0e:a5:d9:c0:
         b9:28:c4:e7:f1:08:f7:4c:55:90:62:47:ed:ec:ca:29:30:7e:
         bf:01:9d:ca:46:b4:e4:ee:9f:5d:6a:52:0e:30:47:a6:21:50:
         a5:c9:f1:27:7f:62:17:7d:ae:1d:0e:4a:32:9a:ac:75:53:ad:
         56:c1:12:2d:1e:76:97:55:77:eb:df:28:b7:4d:06:0d:8a:f4:
         9a:14:44:88:bb:a3:fb:a3:ba:21:4a:9d:91:83:9d:83:e6:f6:
         e3:2c:50:af:41:e6:37:6f:a9:27:30:26:6d:8c:71:60:7e:8c:
         eb:c9:c6:88:8a:4b:6e:ad:ba:07:0d:4a:96:a3:36:c5:a7:cb:
         eb:a5:6b:30:0e:ef:95:a1:3e:16:d1:c3:c4:e2:17:65:cc:84:
         a0:f0:50:a4:c4:d6:60:34:b5:bd:ca:34:f3:5d:99:12:36:03:
         58:3e:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----