Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer
File:                     6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.cer (raw, json)
Hash identifier:          Vsh6TmERd4m0Sqw2jcK3O2Y9MbWVxMnDUcg9Bqqn8mU=
Subject key identifier:   67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79BF68B04EF9A55DAB2E7A048CD1FAD9D9977460
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 14:14:52 +0000
Certificate not after:    Tue 11 Jun 2024 14:19:52 +0000
Subordinate resources:    AS: 265085
                          IP: 170.233.24.0/22
                          IP: 2804:3290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bf:68:b0:4e:f9:a5:5d:ab:2e:7a:04:8c:d1:fa:d9:d9:97:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 13 14:14:52 2023 GMT
            Not After : Jun 11 14:19:52 2024 GMT
        Subject: CN=6755D3522D9AAA05D8E619BF8EA6DBE34D108C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:ff:5c:49:cf:8f:ba:14:68:f2:88:ea:42:
                    dc:dd:0e:74:61:8c:6b:10:5a:a3:50:36:d8:a6:25:
                    38:ea:39:5b:2c:76:dc:12:ef:bf:11:fe:ab:cd:77:
                    21:9e:87:12:7d:6a:c0:8e:39:7b:04:cb:41:da:6c:
                    4c:5d:7a:db:92:41:22:d8:dd:6a:4d:55:f0:6b:a4:
                    1e:a6:ad:d9:1d:ed:d6:72:03:25:16:1c:e0:50:4f:
                    43:8b:36:a7:86:57:b9:2e:e0:0b:73:29:34:b0:6e:
                    a4:ee:65:cf:7a:f1:96:66:17:2e:e7:af:a8:e3:0a:
                    d5:82:97:af:45:5c:0b:34:a2:f2:52:4e:21:ba:f7:
                    ae:94:d0:3a:fd:9f:1b:9a:fc:66:02:c6:56:93:2c:
                    90:74:cf:fd:04:6a:fb:24:65:1c:45:c6:10:d9:b6:
                    57:61:27:3c:17:8b:18:2e:d1:84:ea:f2:69:b5:bb:
                    77:c3:ef:1e:84:66:82:1d:d9:d2:48:69:1c:40:95:
                    f1:9a:a4:0b:13:86:da:33:03:78:c0:c3:d2:2d:dc:
                    be:81:c0:58:fd:ac:4b:47:9f:6b:39:ce:88:01:b8:
                    e1:ca:87:1f:bd:3c:70:84:0d:36:46:ab:8c:f6:71:
                    8f:3f:0a:98:7f:58:0e:fb:22:29:08:21:1d:3d:01:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:55:D3:52:2D:9A:AA:05:D8:E6:19:BF:8E:A6:DB:E3:4D:10:8C:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/0/6755D3522D9AAA05D8E619BF8EA6DBE34D108C24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.24.0/22
                IPv6:
                  2804:3290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265085

    Signature Algorithm: sha256WithRSAEncryption
         54:da:96:83:0e:9e:5a:4f:c7:fb:60:cd:cb:1d:5d:41:f3:f8:
         90:5f:7f:b4:0f:5f:b2:a3:87:fa:92:0f:e9:f7:29:a6:b0:bc:
         e0:ba:08:3c:fe:5e:78:86:d2:75:a8:3a:7e:01:30:41:72:99:
         55:c7:fa:29:4c:9a:3c:0e:23:a1:50:83:bc:2d:54:99:b5:fc:
         98:98:11:15:0e:92:89:d5:01:ef:e3:35:2e:14:8a:44:34:68:
         69:55:cd:72:5e:98:cb:fd:33:99:b8:2b:3e:a2:a8:de:02:25:
         8c:c6:6d:87:76:29:f6:6b:c4:f2:85:5a:ca:92:c3:38:9b:d3:
         e5:b1:23:39:72:30:33:9e:a0:2a:2c:f3:84:ae:81:91:69:fc:
         60:3d:9e:11:4f:2a:81:31:21:08:f2:06:0a:73:a2:54:58:60:
         21:cb:a6:38:82:4e:71:83:a4:dd:8a:f3:21:0b:76:b2:31:1b:
         f0:44:b1:37:cb:01:15:d6:2b:18:c5:fa:96:c6:4b:4f:f4:9a:
         b8:57:cf:c6:39:3b:cb:ff:ae:a3:10:59:42:c4:da:74:60:b7:
         18:36:a3:7e:68:19:40:0f:da:d0:59:f8:9a:2c:46:61:c9:ed:
         7d:6c:0a:c1:32:9c:47:f6:fe:40:95:0e:2d:2d:04:f3:3d:1b:
         85:9b:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----