Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer
File:                     6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer (raw, json)
Hash identifier:          hCseBF2x7oZLPIe3S0pjjAunqWFGlP6USotqUWvwVvM=
Subject key identifier:   6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       64426A44ACF821F2C39744997C5B2479A1B5E7C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 18:16:23 +0000
Certificate not after:    Tue 18 Feb 2025 18:21:23 +0000
Subordinate resources:    AS: 266198
                          IP: 160.20.168.0/22
                          IP: 2804:3c3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:42:6a:44:ac:f8:21:f2:c3:97:44:99:7c:5b:24:79:a1:b5:e7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 18:16:23 2024 GMT
            Not After : Feb 18 18:21:23 2025 GMT
        Subject: CN=6BE684BE05E26786329CFC6C8E5B8F0195AE1548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:18:a4:7e:c9:1a:d9:d4:b5:92:5f:84:43:
                    49:7a:26:5d:74:a2:11:13:9e:77:57:eb:be:f5:f7:
                    de:8f:d8:29:20:d1:62:03:33:0e:5b:0f:75:f1:13:
                    68:29:b9:d0:2a:48:b7:68:a1:e1:c0:2d:24:a6:f6:
                    6a:b8:ab:26:5e:56:89:2f:85:05:d7:73:cd:fa:57:
                    75:0e:99:74:d0:a5:89:01:4f:4d:56:2a:4f:76:55:
                    2d:54:34:97:ef:53:3a:70:63:ac:9f:c0:63:3e:56:
                    98:73:86:b9:13:89:2e:d2:e0:b0:46:93:0b:a5:b5:
                    a7:a8:3c:01:5b:0f:1d:7e:88:fa:a1:53:71:ce:5a:
                    7a:8b:24:5f:25:a1:0f:4d:66:60:49:f2:00:40:04:
                    28:84:6d:e1:a0:77:77:a5:a9:98:45:7c:7a:28:b6:
                    5e:a0:aa:78:1f:0b:d9:d5:5f:09:27:0b:07:6a:a7:
                    b4:3a:7a:02:19:93:50:79:2d:03:19:b3:99:31:12:
                    5f:7b:e6:a7:9f:b1:52:a9:b0:39:b8:bf:9a:93:ff:
                    28:5f:37:12:e8:69:54:21:42:a7:b2:53:49:89:35:
                    b8:f0:c5:05:51:c7:79:6f:16:93:f3:68:80:73:2a:
                    de:69:4b:91:5e:c1:1a:df:19:dc:84:64:32:59:dd:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22
                IPv6:
                  2804:3c3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266198

    Signature Algorithm: sha256WithRSAEncryption
         87:10:ed:5d:48:9e:57:61:e4:28:b6:70:06:0b:62:f7:60:5f:
         3e:55:ce:85:4d:2f:19:74:ae:7e:9d:a1:67:85:d0:cc:6d:a3:
         4a:ac:eb:15:bf:35:57:4c:0a:96:96:74:fa:b0:73:a3:68:48:
         58:f5:de:02:84:90:0d:d2:27:c5:6d:ec:09:53:ce:bb:9b:3a:
         6d:5d:d9:10:dd:43:27:06:d5:61:b8:bc:a3:15:a7:d7:a5:11:
         bb:78:42:dd:c2:08:f0:b4:e3:07:0d:dd:4d:01:80:dd:cf:dc:
         2b:d8:54:a3:a3:73:3d:c9:8e:f3:ad:a5:36:d2:f6:0b:29:3d:
         60:73:82:51:66:7c:2a:f5:f8:25:e9:97:16:7c:79:7c:14:5b:
         87:40:8a:c7:52:46:d3:e7:a2:40:01:74:fa:2c:b9:b3:ff:95:
         f5:96:bd:96:e0:ba:95:17:df:80:68:80:95:f7:a9:e9:fa:cd:
         49:6a:67:77:c7:69:52:29:c4:26:b1:be:11:98:26:7d:8b:50:
         71:63:6d:78:71:fa:33:28:99:6c:bc:2a:56:e9:73:db:30:a5:
         f1:cc:5d:f3:9b:e8:a1:c6:0f:31:69:58:72:3a:38:b2:0c:26:
         c4:53:73:38:96:9c:50:ed:3f:34:b9:f1:cf:9b:20:e8:82:ef:
         1b:47:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----