Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
File:                     C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer (raw, json)
Hash identifier:          WSqLDTsAiIaMZcepgFLUmB7wemDWld38ESKDnuoMMLM=
Subject key identifier:   C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0813B25D78515CD4758EC4835D68F2811A57FFDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 14:35:15 +0000
Certificate not after:    Thu 24 Aug 2023 14:40:15 +0000
Subordinate resources:    AS: 52572
                          IP: 177.86.152.0/22
                          IP: 2804:ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:b2:5d:78:51:5c:d4:75:8e:c4:83:5d:68:f2:81:1a:57:ff:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 14:35:15 2022 GMT
            Not After : Aug 24 14:40:15 2023 GMT
        Subject: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:11:36:47:7a:cd:b8:7e:34:c8:81:d6:74:
                    a8:8e:3e:ae:15:71:fc:ae:6e:eb:c2:7e:e1:b4:c9:
                    bc:da:b5:11:a6:67:47:9d:04:52:9c:e8:20:ab:cd:
                    37:86:b3:17:70:50:c8:31:d4:18:c8:e6:78:65:74:
                    2b:29:7f:59:53:61:f8:f2:6a:3e:3c:68:40:f7:7f:
                    64:58:e7:1a:09:0d:5d:6b:33:53:59:cd:7c:a1:98:
                    51:47:a7:7b:db:df:50:83:ea:dc:c2:3e:63:4e:ca:
                    e0:c7:8c:03:f8:05:23:1e:af:38:4f:b5:99:99:23:
                    a4:f6:5b:e1:91:31:fc:e9:2c:ba:59:3b:2b:46:33:
                    b1:26:ec:28:bf:a3:01:de:38:3c:af:43:90:7c:14:
                    ff:23:7d:0d:d6:d0:34:96:6c:2b:58:15:31:33:2d:
                    64:1e:2b:6e:c7:f0:5f:52:9c:ed:43:b4:6d:d0:d1:
                    1b:26:25:83:66:ae:31:c8:ce:07:6f:d3:dd:ad:e8:
                    2d:54:10:80:f2:2e:2c:40:4f:bd:7e:a1:24:f9:2a:
                    59:ec:fe:2b:ed:1d:9a:84:78:20:f6:b2:ee:87:d7:
                    c5:40:a9:f1:86:5b:ba:49:e0:3d:54:49:fd:84:11:
                    9a:b3:6f:b8:16:e5:4e:86:18:54:c3:be:77:64:03:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.152.0/22
                IPv6:
                  2804:ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52572

    Signature Algorithm: sha256WithRSAEncryption
         58:87:28:94:ac:d1:fc:e4:42:a9:71:af:98:f3:51:28:63:57:
         3c:e1:d5:02:1a:90:7d:70:93:28:43:82:5e:f2:51:65:fe:cb:
         92:25:0d:99:ce:45:90:65:e6:18:fc:88:db:8e:5e:2e:f6:d0:
         59:c3:27:34:c0:25:45:43:24:1a:78:5c:40:f1:79:b5:9f:b2:
         26:d9:f9:89:5c:6e:4f:e0:96:a7:c8:5a:98:9e:4d:3d:e1:7b:
         72:f3:8f:4c:67:07:a5:e2:a1:98:a9:76:07:a2:f1:f4:18:aa:
         c0:6e:2b:c9:5a:da:00:97:ad:d7:0c:b1:5e:63:61:80:66:39:
         75:b6:07:ca:7e:c8:6b:fc:4a:f0:10:64:3e:63:7e:e1:90:b5:
         d2:68:2b:9a:b6:4b:cb:5e:c7:bf:98:8b:3b:1b:69:8a:a8:8d:
         40:c3:7c:23:fc:50:22:6d:28:54:0e:fc:67:0b:b9:6c:a6:57:
         9d:21:cf:e0:09:1f:a5:99:cc:1a:32:35:b2:57:f6:49:7d:ef:
         71:d3:6e:de:0b:b7:b7:a7:7e:73:02:94:dd:ed:0f:5a:13:ae:
         08:01:b7:4c:a4:b4:52:8d:fb:ff:28:31:d9:89:a4:de:47:ad:
         69:d7:c8:fc:5b:73:80:46:55:4b:93:1f:65:1f:58:84:17:f1:
         a3:71:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----