Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0669B639FEEA1869BC6516F15FC2BE38DEF2E70.cer
File:                     D0669B639FEEA1869BC6516F15FC2BE38DEF2E70.cer (raw, json)
Hash identifier:          zyAZzxTpJ78quoSXlE3n+/fRZjOLwir+njjvzsmrTNI=
Subject key identifier:   D0:66:9B:63:9F:EE:A1:86:9B:C6:51:6F:15:FC:2B:E3:8D:EF:2E:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5B5B05C04EA86D3F43872560A15FDBF0553BF560
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/D0669B639FEEA1869BC6516F15FC2BE38DEF2E70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Jul 2022 22:55:17 +0000
Certificate not after:    Thu 27 Jul 2023 23:00:17 +0000
Subordinate resources:    AS: 263395
                          IP: 168.194.136.0/22
                          IP: 177.125.124.0/22
                          IP: 2804:1590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5b:05:c0:4e:a8:6d:3f:43:87:25:60:a1:5f:db:f0:55:3b:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 22:55:17 2022 GMT
            Not After : Jul 27 23:00:17 2023 GMT
        Subject: CN=D0669B639FEEA1869BC6516F15FC2BE38DEF2E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:5a:6a:15:43:09:15:1c:a2:76:27:51:85:
                    07:c6:c7:aa:9b:9f:a4:9b:95:7a:e4:b7:e1:9b:44:
                    51:c8:c3:61:76:3e:1b:22:40:b0:50:4a:42:84:6f:
                    1d:7a:b9:4f:2e:dd:ae:fa:b2:93:08:37:94:7e:61:
                    c3:be:2c:10:ab:07:ef:11:5f:ed:94:d7:44:87:b0:
                    e4:59:6c:d8:79:c4:73:9c:d0:dd:ea:b5:cd:53:49:
                    b9:7f:b7:51:a9:8f:15:74:52:39:29:f6:38:41:2e:
                    85:98:4b:4d:44:fd:21:52:58:96:b2:8d:cf:2e:92:
                    07:a0:05:1b:d3:7d:a1:c3:1a:c4:d9:09:02:98:39:
                    c6:96:9e:c9:13:8e:d9:e4:d6:32:97:49:2b:89:a2:
                    2a:7a:16:1a:fe:ed:48:92:af:f0:e3:bb:8c:f9:cf:
                    f2:cc:43:1a:0c:d0:51:d5:f3:25:e9:92:0f:9d:98:
                    3e:bd:0c:38:fe:ee:26:7b:b5:3e:3f:3b:df:c6:8b:
                    25:ea:bd:fa:dd:e8:37:61:7c:84:a2:0d:ed:12:b9:
                    a5:61:8d:28:4b:cb:99:4c:42:7a:67:cc:c0:0e:51:
                    7c:1c:49:ad:0e:ab:79:75:a6:0e:23:94:ee:24:70:
                    a1:41:e9:b3:f8:86:b6:63:02:c8:55:0b:c6:82:7b:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:66:9B:63:9F:EE:A1:86:9B:C6:51:6F:15:FC:2B:E3:8D:EF:2E:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/D0669B639FEEA1869BC6516F15FC2BE38DEF2E70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22
                  177.125.124.0/22
                IPv6:
                  2804:1590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263395

    Signature Algorithm: sha256WithRSAEncryption
         63:84:6e:83:fd:7f:dc:96:92:68:cc:2b:e1:8c:41:48:61:81:
         d1:11:cb:59:73:0c:e7:c9:c5:cd:f4:89:f5:7c:79:47:f3:22:
         9f:19:52:59:b6:11:18:e5:4a:92:aa:7b:51:7d:bc:2b:e9:9e:
         a6:76:32:79:5b:84:0e:08:0d:57:8b:59:40:91:13:db:f2:38:
         94:29:db:9e:66:a4:60:cc:0a:9e:6f:ce:04:66:c5:21:c5:0f:
         29:c2:32:93:9a:f0:c5:6f:14:f6:4b:2a:a1:e6:c5:e3:76:99:
         0b:5f:49:fd:a0:13:50:9c:48:fe:f8:eb:3c:09:d2:f0:0a:4f:
         14:43:e9:69:c7:e8:cc:2a:1f:9f:04:3f:0a:95:26:a0:89:0a:
         24:9d:49:82:05:a5:a8:d4:10:b1:e5:23:c7:8f:46:da:de:b4:
         69:a5:5b:f8:89:c6:f6:ff:fd:0f:83:79:03:49:10:cd:8f:07:
         2c:ab:6c:98:3b:64:3a:d2:1e:41:8f:9c:7b:ad:a9:59:07:79:
         67:6f:71:51:b9:06:5c:3a:83:75:92:a1:14:0f:68:38:d4:96:
         c1:48:cf:90:a2:56:32:38:0d:a8:2e:ba:c3:55:7c:73:20:ac:
         a0:86:39:33:58:e6:09:06:15:b1:00:ff:b0:c4:95:07:96:7a:
         95:94:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----