Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.cer
File:                     A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.cer (raw, json)
Hash identifier:          SJ+zpLxNhF1wTEH6p0BzG0JyhgfeFTupHjO+n+Rkzq8=
Subject key identifier:   A6:F0:56:FF:C6:6B:17:D1:FC:C3:53:D6:6D:F4:EE:FC:59:D2:49:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26D41F3AAD9CDB2E6E96B9D7B1DD9928EBF27BDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 17:14:50 +0000
Certificate not after:    Wed 19 Feb 2025 17:19:50 +0000
Subordinate resources:    AS: 263471
                          IP: 138.94.68.0/22
                          IP: 177.73.108.0/22
                          IP: 2804:1258::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d4:1f:3a:ad:9c:db:2e:6e:96:b9:d7:b1:dd:99:28:eb:f2:7b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 17:14:50 2024 GMT
            Not After : Feb 19 17:19:50 2025 GMT
        Subject: CN=A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:09:78:de:51:8a:65:a4:8c:34:b4:43:f4:
                    ac:a9:cd:35:45:93:11:48:ea:e0:de:b7:70:1e:6b:
                    60:9f:11:17:30:32:fa:0c:7c:05:65:cb:a2:6b:01:
                    29:02:6d:c8:46:61:99:f2:5e:e1:37:54:14:bc:2c:
                    33:55:2c:b7:78:3c:e0:1c:22:60:39:44:0f:5b:28:
                    29:45:34:03:eb:c7:9d:31:b0:22:19:33:75:c5:12:
                    04:15:79:f3:62:d8:0f:a3:65:96:d7:d0:4e:c1:98:
                    c5:b7:56:b9:4d:e2:24:6c:6a:16:fc:6e:8d:0d:e8:
                    a2:34:61:90:a8:07:8c:4c:03:d7:b5:00:81:af:54:
                    5d:67:79:97:af:0a:72:80:b0:2f:ea:57:e9:56:3f:
                    ca:40:2c:a9:03:8f:6b:64:bf:e6:3d:83:cd:55:fe:
                    bd:7f:a1:f4:e5:71:7e:0b:f8:22:9b:50:3b:7a:82:
                    8c:cf:69:be:a3:99:18:18:2f:a4:ff:d1:05:c2:03:
                    21:ae:2e:09:79:39:95:d4:fb:20:a7:a5:cf:59:61:
                    5f:f0:9b:c5:0b:ce:33:76:9e:2f:d5:04:64:de:40:
                    0c:92:ff:b9:e3:fb:73:a2:96:66:e6:d9:79:ea:3d:
                    08:17:68:33:a7:7a:a0:5b:15:c3:43:01:11:08:e0:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:F0:56:FF:C6:6B:17:D1:FC:C3:53:D6:6D:F4:EE:FC:59:D2:49:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.68.0/22
                  177.73.108.0/22
                IPv6:
                  2804:1258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263471

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:e1:ff:5e:32:b0:9c:48:f2:aa:3f:47:d8:2d:97:a4:fd:
         33:de:90:f4:23:4c:7d:5a:3c:75:aa:f7:33:3a:7b:d6:ce:49:
         fb:f5:ab:43:96:8f:54:b1:64:31:0a:99:41:bc:a8:e0:a2:85:
         73:06:b5:af:56:7b:6a:ac:3d:e5:11:5b:75:8e:3f:a4:1c:bf:
         cf:54:96:74:57:19:48:65:b5:dd:9e:95:1a:e1:e3:fc:71:21:
         6a:be:08:aa:a4:64:9c:9d:1a:1a:75:dc:17:a2:8a:68:e6:ae:
         89:fa:a0:07:76:ea:7c:0b:6c:11:4d:cb:34:37:48:bb:52:dd:
         df:1e:71:40:a8:31:e1:3f:f8:01:5c:65:24:81:6f:9a:a4:e4:
         d8:ca:56:d1:6a:b7:ca:04:8b:84:a6:c5:d6:47:c9:d3:e3:37:
         71:15:8f:51:13:22:d7:02:55:95:f1:5f:f4:f1:ec:e8:4d:37:
         26:f1:8a:17:8e:f6:b0:a8:a6:23:14:d6:62:95:4c:81:47:a7:
         b0:ab:f1:35:3c:0e:5b:14:8d:f1:8a:48:5e:96:3f:52:20:17:
         d2:d6:32:bf:9b:c3:1e:b9:22:89:86:da:e7:cb:47:27:24:c3:
         10:19:3b:38:29:9b:56:03:5d:43:d1:c9:74:23:60:c6:8e:d3:
         7e:75:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----