Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86F6097D5D41474A984E795588A70420B258E351.cer
File:                     86F6097D5D41474A984E795588A70420B258E351.cer (raw, json)
Hash identifier:          fzutr0GWxIE9HuQJ3FN3PJPXSSfIq3BOZNQvPE6Q8kY=
Subject key identifier:   86:F6:09:7D:5D:41:47:4A:98:4E:79:55:88:A7:04:20:B2:58:E3:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B9E1AAD65B9274F869CC2592F2FBF10B93B843F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 15:59:35 +0000
Certificate not after:    Fri 24 May 2024 16:04:35 +0000
Subordinate resources:    AS: 262574
                          IP: 177.73.224.0/22
                          IP: 2804:6998::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9e:1a:ad:65:b9:27:4f:86:9c:c2:59:2f:2f:bf:10:b9:3b:84:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 15:59:35 2023 GMT
            Not After : May 24 16:04:35 2024 GMT
        Subject: CN=86F6097D5D41474A984E795588A70420B258E351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:77:11:d0:e3:9c:9c:a3:ca:d3:6c:6d:61:
                    05:8e:4e:a7:e5:2a:11:5c:ac:77:57:9b:70:a8:3b:
                    83:b3:0c:a0:01:c2:0c:24:ee:e3:84:f5:ed:65:98:
                    a6:89:c3:2f:57:3d:52:d6:6e:69:9f:7f:39:91:bc:
                    0b:47:ee:ae:62:73:45:bb:40:4f:f1:16:d8:06:b7:
                    11:e9:ce:d2:f8:71:8a:89:b8:3a:f4:ea:bd:30:66:
                    89:d2:57:29:3d:b0:ad:70:81:ab:12:e4:0b:51:87:
                    62:a7:a1:76:92:45:79:68:e1:eb:d8:fb:e1:e2:a6:
                    8d:0d:05:d8:73:93:26:27:6e:a1:73:1a:c3:b3:38:
                    bc:ae:d6:a5:c3:f8:14:13:1a:f2:80:15:32:36:34:
                    45:70:62:37:ac:ae:78:03:39:68:b4:01:79:e4:2f:
                    cc:92:3d:59:34:47:3c:23:33:e1:66:18:3c:cd:b5:
                    55:76:53:16:c6:4b:53:5a:c2:b5:27:80:77:b4:e4:
                    d8:52:c2:61:26:73:f3:e6:34:8f:4f:6a:af:97:86:
                    9d:c4:f3:95:63:dc:b2:96:3c:b4:71:fe:72:ad:04:
                    4b:fa:25:a1:53:0c:1d:ff:3d:55:75:63:72:d3:aa:
                    f0:92:9a:d2:59:11:ed:a3:18:7a:8d:e4:5e:df:df:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:F6:09:7D:5D:41:47:4A:98:4E:79:55:88:A7:04:20:B2:58:E3:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/0/86F6097D5D41474A984E795588A70420B258E351.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.224.0/22
                IPv6:
                  2804:6998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262574

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:e6:6b:20:29:b2:04:ee:74:55:ae:aa:fa:0b:6f:df:28:
         4f:40:7f:d3:6d:f6:df:dc:e8:49:45:1c:a7:ff:cd:5e:dd:8a:
         e5:19:a4:f9:f9:f7:82:87:24:db:ad:02:2b:62:16:02:d4:b3:
         ea:61:9e:08:a0:e4:50:24:1e:4c:1c:e1:5d:82:c4:d7:a7:3c:
         ed:15:25:0e:cf:5c:ad:d6:cf:b2:48:43:51:57:28:58:c6:9b:
         31:e9:58:4b:35:14:5a:bd:35:fd:ab:40:f6:ce:8a:34:9b:c5:
         40:25:4e:39:6a:85:bd:af:f2:be:58:5b:91:96:db:83:d7:c8:
         e8:4b:51:a5:f0:8f:58:21:5d:2f:7b:5f:ac:d4:99:94:76:c6:
         6d:bb:fa:33:b5:ca:53:ac:2b:35:2d:e6:fb:64:dc:d6:8d:41:
         d3:17:52:4e:f3:42:37:17:ff:39:6a:d3:57:4a:40:c0:d6:cf:
         22:b7:f6:13:1a:28:69:ff:20:b7:cd:bf:d2:75:a4:eb:8a:bd:
         12:29:30:71:4d:aa:ae:ec:4c:db:c5:3f:4a:f2:47:fb:02:8f:
         7e:9d:26:bc:80:b9:52:5d:92:8e:5e:d1:53:f4:75:44:b1:7f:
         b9:ee:78:ae:08:e3:a0:65:22:c0:e8:2c:ff:a2:f2:52:9a:00:
         6c:99:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----