Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D222F962EA56F1911760688F832B92229BBA6E09.cer
File:                     D222F962EA56F1911760688F832B92229BBA6E09.cer (raw, json)
Hash identifier:          ASqWJCnVeh5DR8ySgUafiBUG7U5z7tRcn4KOSDmG1i0=
Subject key identifier:   D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       318FF1D53CD0F5F549E92F2080046BECD9B98099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/D222F962EA56F1911760688F832B92229BBA6E09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 20:21:36 +0000
Certificate not after:    Tue 24 Sep 2024 20:26:36 +0000
Subordinate resources:    AS: 269111
                          IP: 45.178.212.0/22
                          IP: 2804:5f98::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8f:f1:d5:3c:d0:f5:f5:49:e9:2f:20:80:04:6b:ec:d9:b9:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 20:21:36 2023 GMT
            Not After : Sep 24 20:26:36 2024 GMT
        Subject: CN=D222F962EA56F1911760688F832B92229BBA6E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:08:02:58:62:0c:0e:79:c6:85:0b:ec:48:
                    67:bf:08:bd:0a:1e:a1:80:9d:c4:75:09:42:fa:39:
                    da:05:99:01:d8:43:85:53:67:c4:75:f9:0c:01:68:
                    40:82:ad:fb:ca:f7:26:d4:7f:f4:64:b1:b5:c3:9b:
                    b5:29:b0:5f:70:9b:2d:dd:65:c2:a7:70:f7:e5:28:
                    f7:1e:2d:35:da:e4:8c:15:66:c8:fa:61:71:33:c6:
                    30:76:1d:b4:22:01:0b:2f:18:48:70:bc:1c:91:b1:
                    21:91:fc:09:84:8e:b5:8a:fc:9b:57:d0:5b:d0:93:
                    56:5b:28:4b:3f:02:1b:88:03:a6:06:d3:ee:dc:3e:
                    00:7d:83:1d:1d:2b:b7:d8:b6:5c:5d:20:a1:af:9d:
                    b4:dd:d8:a7:10:17:73:a0:17:60:a9:fc:1d:43:ec:
                    5e:a9:b5:b0:03:eb:3d:92:5f:0f:66:17:63:1b:43:
                    a6:2a:91:a6:b3:5d:25:22:e0:b7:b8:63:ac:81:8a:
                    d2:1c:94:7c:62:d7:90:99:41:d6:d3:d7:c8:0f:03:
                    25:b3:8f:40:ff:50:54:d9:bc:51:44:89:db:ac:99:
                    5f:51:d6:df:53:db:c9:ce:a7:dd:0e:27:a2:27:32:
                    e4:f5:08:57:4a:ad:ee:f9:83:8c:8f:00:15:23:be:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:22:F9:62:EA:56:F1:91:17:60:68:8F:83:2B:92:22:9B:BA:6E:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/1/D222F962EA56F1911760688F832B92229BBA6E09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/22
                IPv6:
                  2804:5f98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269111

    Signature Algorithm: sha256WithRSAEncryption
         65:36:75:de:61:08:21:e2:91:13:0a:70:89:79:59:f4:b6:98:
         be:e5:90:6e:f7:3e:f5:82:fd:29:8b:20:53:c3:05:9a:37:6a:
         b2:dd:72:98:9a:fe:f6:4c:06:19:f6:a3:19:45:a8:8f:6e:27:
         4a:59:48:99:3c:1b:16:e9:58:c9:f3:73:71:a9:a3:63:7b:71:
         62:77:32:87:23:a3:b0:4d:ca:99:26:e6:f5:bb:8a:2c:0f:68:
         41:47:46:86:8f:a6:5f:d6:81:e6:72:a5:b0:a1:49:a6:4b:27:
         b6:71:c0:58:4a:6c:0a:fd:de:45:0c:f1:d0:d0:f5:2b:ac:4e:
         c5:71:20:46:f5:d6:17:5c:29:31:cd:66:49:73:b3:a8:04:2c:
         01:4d:ee:93:01:f9:c7:75:dc:e1:59:44:b1:36:80:74:9f:a2:
         9f:5d:dd:51:b5:c3:5f:54:b4:89:09:8c:41:6a:c3:b0:33:cc:
         a9:d6:31:48:93:b8:e2:8a:0c:af:43:e5:23:37:64:b6:7d:46:
         a7:27:25:f7:80:5b:d1:dd:16:16:8f:c5:89:74:86:4f:a0:8f:
         96:e4:bc:97:03:e8:a9:e8:87:eb:58:96:85:58:37:e9:13:1f:
         a0:6f:1b:28:6d:1a:26:88:aa:f1:fb:e9:2b:d2:c4:7e:4f:59:
         8e:d9:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----