Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6C6225C4F1CA480FEE7B0EE39C71425E696B9C9.cer
File:                     C6C6225C4F1CA480FEE7B0EE39C71425E696B9C9.cer (raw, json)
Hash identifier:          XdH0E+CjHVB4n+tPfXa5+AbNJ/Y8ib8ncfdYNFZ4+BM=
Subject key identifier:   C6:C6:22:5C:4F:1C:A4:80:FE:E7:B0:EE:39:C7:14:25:E6:96:B9:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41E1FC386CE2FAE5EBECD90412D18D09B9F2E321
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/C6C6225C4F1CA480FEE7B0EE39C71425E696B9C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:39 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:39 +0000
Subordinate resources:    AS: 270899
                          IP: 177.91.228.0/22
                          IP: 2804:7328::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e1:fc:38:6c:e2:fa:e5:eb:ec:d9:04:12:d1:8d:09:b9:f2:e3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:39 2024 GMT
            Not After : Mar 31 11:03:39 2025 GMT
        Subject: CN=C6C6225C4F1CA480FEE7B0EE39C71425E696B9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:6a:73:86:d0:17:fe:ee:63:94:d4:20:8d:
                    83:d7:a2:3e:86:ca:06:1b:8f:c2:85:99:b7:7f:5e:
                    9a:e4:d5:f2:47:23:23:47:08:12:4a:39:98:1d:f4:
                    d3:71:6b:c0:00:71:77:06:0a:8d:ea:fe:5e:ca:82:
                    3b:e0:5c:57:df:0c:b4:b8:66:95:f5:86:02:4b:60:
                    b9:36:41:20:89:1b:d6:69:d0:7c:88:c3:0b:3b:63:
                    55:63:cc:cc:98:d1:99:e6:b6:c2:de:14:8c:13:7d:
                    1a:65:49:c3:dd:0b:7e:6d:56:b5:52:4f:2a:66:57:
                    2b:29:ca:97:60:b0:93:9c:f7:58:3a:a6:8c:7a:9a:
                    4a:cd:38:33:3a:80:5a:fe:17:40:88:66:f1:fa:db:
                    75:f3:84:eb:0f:9c:77:9e:15:50:37:90:f1:a8:86:
                    e5:f4:c6:94:7d:07:b9:7f:8d:2f:39:14:c4:fe:b1:
                    21:87:c5:7f:0c:12:06:73:d2:e7:fd:05:e2:7f:f4:
                    b7:4d:d5:ce:cc:c0:5e:80:9a:26:cf:45:6c:ab:dc:
                    b9:86:0c:50:04:a0:52:b3:1d:3c:be:30:58:eb:db:
                    7f:c9:a4:fd:93:5d:e2:01:09:bf:93:11:b4:e0:b0:
                    86:3c:1b:e5:02:15:56:b4:86:48:64:40:39:05:2e:
                    4a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:C6:22:5C:4F:1C:A4:80:FE:E7:B0:EE:39:C7:14:25:E6:96:B9:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/0/C6C6225C4F1CA480FEE7B0EE39C71425E696B9C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.228.0/22
                IPv6:
                  2804:7328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270899

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:cd:6d:4d:f3:6d:2c:6b:0c:94:46:97:5e:1d:bd:76:f5:
         22:a1:d0:1b:20:e8:84:31:a7:28:36:64:e7:3f:cc:a1:08:b1:
         a3:99:75:45:36:95:3c:f5:40:3e:93:2e:d6:b7:b6:61:49:72:
         62:85:95:3c:46:9b:55:6a:fc:43:12:55:54:77:16:ee:51:a9:
         dd:a0:7d:9f:35:08:a2:3d:5f:82:2f:84:e2:e7:ab:3b:c1:a2:
         28:33:50:62:bf:80:d1:91:c8:2e:c7:60:fb:d4:b5:1f:0a:e5:
         3c:22:44:d1:95:a5:cd:11:6d:8e:08:fc:04:a8:73:ee:03:b2:
         f2:93:9d:35:28:80:7a:ed:b6:fc:3c:9a:0a:31:2c:7a:52:66:
         e3:45:36:aa:82:38:dc:26:af:e9:f7:89:d6:0e:f5:e4:2f:fa:
         d4:a8:1c:76:7e:c9:11:d4:6c:82:2e:e7:19:44:85:7a:15:91:
         8a:f3:2f:5a:f0:ef:68:e3:80:53:a0:ea:47:52:99:d3:d8:d7:
         8f:fc:83:f1:59:d4:2d:a5:d4:cc:6f:5a:64:9a:70:c0:14:cd:
         c5:c3:8c:20:74:85:a1:16:34:e8:66:0b:26:57:ad:2d:b6:89:
         9e:6a:b8:e5:3e:92:70:39:ec:fb:c7:ec:ca:7e:c8:96:f3:f5:
         14:d3:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----