Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6BD52DC079825A702D874B54502AD138171621D.cer
File:                     C6BD52DC079825A702D874B54502AD138171621D.cer (raw, json)
Hash identifier:          gepCTtBYBiQM9V4ZPlguPbM0yIHsGUmrungeDfyvCW4=
Subject key identifier:   C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       614FB2D15B56091EF19E6019071B3333DB0CF3C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 15:55:13 +0000
Certificate not after:    Thu 24 Aug 2023 16:00:13 +0000
Subordinate resources:    AS: 272185
                          IP: 2804:833c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4f:b2:d1:5b:56:09:1e:f1:9e:60:19:07:1b:33:33:db:0c:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 15:55:13 2022 GMT
            Not After : Aug 24 16:00:13 2023 GMT
        Subject: CN=C6BD52DC079825A702D874B54502AD138171621D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:81:21:cb:7c:04:40:ca:e3:03:6d:57:c3:
                    42:3e:aa:ba:29:62:98:f1:1d:70:97:33:b5:2f:fb:
                    d3:24:00:9a:47:d2:c5:03:d3:4f:61:53:bf:00:17:
                    3d:7c:7a:1a:e5:cb:f9:32:10:96:d9:b6:bf:52:d4:
                    46:39:7c:14:a0:86:d2:cd:22:d6:a2:3c:53:66:22:
                    bb:3f:59:ee:c3:b4:ef:10:29:c4:45:3b:9a:5e:9e:
                    4f:f9:08:fd:05:a5:00:ce:bb:6c:44:cd:6b:f5:ad:
                    7b:76:ea:40:98:d1:a2:c8:02:15:d8:75:95:80:1a:
                    85:f9:35:c7:ba:dc:b4:68:66:d4:eb:01:3d:07:10:
                    c0:4e:15:25:ab:fd:52:cc:f6:21:21:f6:5e:3b:29:
                    93:18:ac:ba:bb:b8:2c:f7:f6:f5:39:f3:65:e1:1d:
                    c7:ac:88:cb:17:64:0f:aa:a3:95:2f:fd:3c:61:6a:
                    8b:12:0d:57:44:73:8f:6f:68:bd:2d:3e:ca:3e:2a:
                    59:99:8d:a8:3a:08:a9:0b:37:70:93:5d:44:5f:7c:
                    2b:97:2e:bc:38:e1:0c:c9:4d:8f:7a:08:7e:fe:1a:
                    7f:0b:2b:2d:30:b4:05:d1:53:ba:38:4d:3f:16:60:
                    8b:bd:e9:86:39:20:b4:8f:20:e4:de:a9:d6:d8:86:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:BD:52:DC:07:98:25:A7:02:D8:74:B5:45:02:AD:13:81:71:62:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/0/C6BD52DC079825A702D874B54502AD138171621D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272185

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:ce:fe:55:d6:8f:35:2f:bb:7c:09:2c:b4:61:af:50:d8:
         0e:5e:af:32:d5:9d:7f:4d:11:8b:6d:08:1f:8d:35:42:d9:3c:
         5b:4f:a0:a1:93:45:9a:5d:70:9e:5f:3b:9d:c0:27:65:d9:a1:
         58:ce:ba:58:08:86:a5:2b:81:99:3d:ef:29:67:0e:f6:ca:34:
         c9:20:d9:5c:37:8f:2c:3e:a0:90:16:76:32:00:cd:5a:c7:82:
         01:8a:69:06:7e:15:c8:ce:e7:02:8b:b8:37:eb:aa:4e:67:20:
         a3:5b:99:11:b7:f3:41:cc:18:46:34:ed:d1:41:e6:40:e5:41:
         65:c6:de:4d:9c:6f:d6:42:0f:45:80:72:24:68:22:4a:8d:88:
         e6:b7:f0:49:48:b8:02:a8:02:2f:7a:a2:ff:c0:d0:e6:cf:9e:
         f5:7e:a4:a2:68:aa:1d:a5:ce:73:7a:5f:cc:7f:bf:90:b6:30:
         6f:da:eb:97:49:55:69:0d:50:98:c2:f9:e4:ed:71:b0:96:c9:
         58:6f:e0:39:a9:4a:6f:01:d9:6f:88:74:50:f6:9c:93:cb:59:
         a2:af:df:f7:88:ec:ae:a3:60:29:b7:70:1c:2b:13:d7:6d:f2:
         0d:e4:4e:b4:4b:c9:32:ca:6f:2f:b0:48:6a:80:f0:f8:0e:03:
         77:a8:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----