Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
File:                     D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer (raw, json)
Hash identifier:          uwApHhUs5Nr6uAkDJs4rSgGRsZ3rAvKdtbG9OChw1Yo=
Subject key identifier:   D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       099A6AE371225497C0BF49E9C99DE23C35321499
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Mar 2023 19:03:28 +0000
Certificate not after:    Thu 07 Mar 2024 19:08:28 +0000
Subordinate resources:    AS: 269261
                          IP: 45.182.16.0/22
                          IP: 2804:61dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9a:6a:e3:71:22:54:97:c0:bf:49:e9:c9:9d:e2:3c:35:32:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 19:03:28 2023 GMT
            Not After : Mar  7 19:08:28 2024 GMT
        Subject: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:03:24:53:b1:04:63:2d:f6:c9:85:95:e5:
                    66:3e:dc:9d:71:c4:38:ca:1b:27:82:b8:38:17:bc:
                    cd:55:04:f3:9c:32:e7:9c:fb:66:3c:9c:b5:e5:2e:
                    dd:61:83:dc:a4:87:21:a4:52:b5:00:da:fb:67:cc:
                    d1:11:c8:fe:75:84:50:89:79:25:4a:b4:d8:5b:49:
                    3e:e4:5e:dc:43:cb:b0:ab:9e:d8:39:29:a8:ff:6e:
                    be:5c:71:17:0a:cf:14:2f:57:95:d9:f7:da:06:32:
                    dd:a8:9d:c7:8f:05:4a:74:40:17:91:e6:2d:6d:a8:
                    cc:6b:82:fd:b1:a9:33:19:57:1e:d5:db:84:37:6d:
                    ce:9c:8e:87:ac:17:93:ae:f2:a7:2d:39:fc:8f:3d:
                    12:41:5b:2a:ab:6d:70:8d:1c:86:17:c9:e1:a1:80:
                    63:a2:b4:bc:f8:5d:27:bf:87:f1:e7:bc:da:6f:df:
                    ad:97:2c:86:ab:f6:10:a9:87:10:0b:0c:b7:1f:5f:
                    4a:62:9f:bd:50:13:c7:f8:3f:38:5e:9b:ca:65:22:
                    ea:d8:86:ed:fe:0e:d7:bb:b1:af:89:a8:e4:68:c9:
                    f3:2b:ea:59:4e:4b:95:e3:2c:52:be:14:09:3e:62:
                    39:ce:29:1d:cb:81:62:53:0f:e5:25:88:41:fc:f1:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22
                IPv6:
                  2804:61dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269261

    Signature Algorithm: sha256WithRSAEncryption
         5a:6c:5e:58:2f:5e:ab:dd:c5:70:da:cc:1e:17:d6:bd:92:72:
         e2:a4:ea:2e:d3:08:bb:49:ea:2b:76:13:35:91:b8:b8:f5:ed:
         2b:fa:a1:7e:66:02:8c:df:5c:dd:71:34:68:f5:2d:6d:16:d1:
         2f:38:56:7c:4a:b0:93:99:50:a2:de:94:20:f0:3f:86:7d:be:
         c3:5f:8d:9f:34:a9:1b:c7:0f:4d:8b:01:48:41:fd:aa:5f:ac:
         f4:45:34:30:73:dd:61:f1:98:b5:27:7d:64:cf:ea:75:04:fb:
         84:eb:b4:33:b4:f2:f2:df:ea:68:b3:09:20:dd:ca:57:11:83:
         33:8c:a2:59:47:25:d9:41:84:6b:05:a5:9c:08:11:3a:9a:4c:
         60:4e:5a:9c:9b:e3:87:3f:83:ab:e7:f2:0f:fd:d7:8e:78:79:
         15:f7:b8:5d:08:4d:33:cd:3e:0f:d4:95:c6:9b:e5:7e:ba:f2:
         a4:e3:e3:a4:98:4e:49:8f:bc:70:0d:2d:3b:9c:46:e4:dd:72:
         3b:d0:1e:13:5a:eb:85:22:a3:c5:7b:4d:e2:a7:1e:7e:76:8b:
         13:2e:8c:12:07:75:f7:c8:03:a8:83:3f:2c:72:0d:b2:c0:34:
         13:52:5f:24:86:6c:96:5e:45:4c:93:62:f6:92:b4:26:38:e2:
         55:6f:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----