Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer
File:                     569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer (raw, json)
Hash identifier:          1Z1dkwdAEZ+1PWoNx4qU9umMGLBZ8DOblxPXL43bKII=
Subject key identifier:   56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       108D71D7F31CBDD4AE9DB56FE03302C8C243D25E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 16:11:38 +0000
Certificate not after:    Tue 04 Feb 2025 16:16:38 +0000
Subordinate resources:    AS: 266133
                          IP: 45.6.64.0/22
                          IP: 2804:3b2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8d:71:d7:f3:1c:bd:d4:ae:9d:b5:6f:e0:33:02:c8:c2:43:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 16:11:38 2024 GMT
            Not After : Feb  4 16:16:38 2025 GMT
        Subject: CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:62:82:72:cc:0e:a8:db:d7:9f:28:78:58:
                    80:0a:a0:0e:e6:fc:56:62:da:81:9d:ba:5a:63:b7:
                    ff:b8:cf:84:a7:ee:3e:18:32:49:d3:c3:4a:83:98:
                    26:dd:29:ac:40:81:8e:d4:0c:36:93:30:a9:ce:00:
                    f8:66:bc:9c:30:b6:07:62:3f:df:f5:16:6b:83:f4:
                    a5:b2:df:de:64:f9:3b:ea:55:13:31:8e:16:9d:83:
                    8d:75:4b:be:7a:cb:d3:35:5a:23:3f:e3:80:7c:fe:
                    ae:af:0d:85:40:2b:27:91:c5:61:2e:0f:b1:94:25:
                    54:62:b2:d8:93:ad:e4:3b:65:b9:cb:c1:61:42:fb:
                    3c:68:60:0c:53:d6:e8:2e:77:67:f5:d3:27:69:dc:
                    c2:17:80:d5:99:0b:99:9b:12:4e:b5:14:56:7f:c5:
                    e9:7f:e8:4d:63:7b:e4:bf:07:b6:40:56:58:a3:e4:
                    5e:ed:d4:5f:0f:0d:c4:a6:2d:1e:26:6b:2e:f5:bf:
                    b0:8a:39:ec:84:1c:61:c4:20:42:29:27:a2:dd:4b:
                    03:3e:e4:08:38:f7:5f:c1:69:b4:57:ea:b8:67:1b:
                    c5:6c:71:48:46:e0:14:b0:86:10:35:ce:f7:be:c3:
                    62:4f:b0:31:92:c5:d2:9a:f4:76:e1:13:04:50:ed:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.64.0/22
                IPv6:
                  2804:3b2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266133

    Signature Algorithm: sha256WithRSAEncryption
         19:44:8e:51:d4:b5:11:85:ba:ce:ec:d5:6b:6e:29:ee:97:c2:
         1b:88:e5:60:df:14:16:00:b0:aa:d3:b5:ef:0e:a3:19:48:5d:
         01:9c:b8:ee:87:b4:02:59:f6:69:db:6b:6e:d7:f4:3c:81:ee:
         6f:4d:39:63:aa:9e:36:fc:ed:0a:f6:ca:85:ee:9d:47:28:a6:
         3c:b6:78:3e:23:b5:fd:ae:c3:9d:78:62:24:b1:96:78:f6:c4:
         bc:fa:e8:fa:e9:68:85:89:47:d9:0c:7e:be:76:d8:62:10:34:
         01:c9:2a:f9:e0:d3:bd:f6:dc:33:03:50:14:15:27:cf:f5:97:
         f8:e1:93:02:cb:15:68:9d:32:86:84:ed:fd:3c:40:ba:0f:4a:
         da:32:13:cb:93:e8:f7:fc:b4:0d:6e:f8:88:d4:5d:ea:d6:ba:
         ee:a0:10:e2:dc:b8:30:7c:ed:09:34:f4:36:68:67:11:11:47:
         14:9f:78:f0:03:8b:6b:ff:e9:e0:74:33:9e:29:d6:a0:43:7b:
         6e:8a:3a:b5:58:94:99:f3:ec:df:93:ec:67:93:cd:2a:55:2e:
         3b:ab:af:b4:c9:2b:22:e3:bc:96:f1:4e:50:fd:0e:4c:85:42:
         2f:30:33:3f:4f:1b:09:69:11:a8:8c:89:ba:b5:34:58:d1:e3:
         dd:e0:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----