Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer
File:                     E6A09958EF9734F0A5F161CEF634AA636C3946BF.cer (raw, json)
Hash identifier:          nGmVE/YCjY0RvklSRYYRQDDp/kV6JKf5p1uWLYCGqNg=
Subject key identifier:   E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41967A1E35357B3AA6841F7CCFF06C3EF8A14A2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 21:05:14 +0000
Certificate not after:    Tue 08 Oct 2024 21:10:14 +0000
Subordinate resources:    AS: 270753
                          IP: 179.109.96.0/22
                          IP: 2804:70e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:96:7a:1e:35:35:7b:3a:a6:84:1f:7c:cf:f0:6c:3e:f8:a1:4a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 21:05:14 2023 GMT
            Not After : Oct  8 21:10:14 2024 GMT
        Subject: CN=E6A09958EF9734F0A5F161CEF634AA636C3946BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:45:58:4b:3e:8e:42:06:76:98:f2:f3:1b:
                    56:f0:b9:d8:60:19:5a:66:93:2a:cf:30:0e:14:23:
                    44:03:8e:41:d9:e0:ce:bb:44:63:2d:08:05:f9:25:
                    04:36:c1:be:1c:14:8f:c7:14:27:f2:af:22:2a:81:
                    1f:f8:b0:a3:f7:bb:07:7e:68:4e:49:fa:3d:70:3c:
                    e9:cb:e6:4e:cc:69:cc:62:d0:1c:d7:8a:e9:96:3d:
                    c9:f7:16:92:10:af:d2:e6:e3:3b:b0:5e:6e:2f:a0:
                    99:80:70:d7:dc:7f:f7:26:e6:9b:38:0b:22:e8:c5:
                    66:fd:77:8b:13:7e:87:b4:cc:ca:bf:38:13:6b:65:
                    4e:f4:05:4e:66:5f:ba:d0:e6:fd:ee:d3:f6:fa:7b:
                    fe:17:82:3c:57:4b:e3:5e:8a:d7:80:dc:04:a4:ab:
                    2f:51:f3:06:f4:c8:f9:b8:b1:45:57:57:51:af:0c:
                    2c:83:61:50:32:ba:bc:41:6f:df:35:6b:01:54:f9:
                    f9:25:68:bd:6b:f1:d9:6b:be:b3:b4:b0:9c:8c:cd:
                    6b:89:ad:bd:c8:11:48:bb:c3:72:fd:39:59:c4:41:
                    6e:9d:29:23:64:68:b5:ae:6e:98:3a:b4:4f:7b:30:
                    2e:06:ed:da:64:d6:2f:e1:3c:fa:d3:3c:05:c6:bd:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E6:A0:99:58:EF:97:34:F0:A5:F1:61:CE:F6:34:AA:63:6C:39:46:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HKsDRAXYhgW9W7tABJurc8fGrRvnnV67bt9MFYwHRDd/0/E6A09958EF9734F0A5F161CEF634AA636C3946BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.96.0/22
                IPv6:
                  2804:70e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270753

    Signature Algorithm: sha256WithRSAEncryption
         93:44:c0:a2:73:8d:e3:26:f8:71:1a:06:48:87:2a:3a:06:e9:
         6d:23:f8:30:26:50:44:f3:5b:9b:27:e5:81:51:61:60:cd:62:
         19:40:e3:8f:34:75:6b:41:70:b5:38:0e:02:aa:14:6d:72:2e:
         a1:d0:a4:29:6b:57:52:30:ad:b3:28:c3:d7:57:a6:80:2d:02:
         4e:34:b0:ad:98:fd:60:23:7d:8a:6e:fb:d8:0d:db:b9:5c:0b:
         a9:61:a8:e8:c1:5c:72:ec:d9:16:51:c7:22:0c:50:40:b5:1e:
         64:7b:8b:e1:fc:e4:26:24:e5:16:1d:86:7e:84:73:dd:cd:aa:
         7b:ea:8d:4c:58:cf:19:11:62:43:52:44:b2:00:f6:0f:8c:71:
         2f:15:c5:42:5c:c3:8b:b4:f7:ec:65:b1:c6:3e:1c:d2:57:d4:
         e2:35:1c:0c:e1:f5:9d:d2:0d:f8:65:8e:ff:c1:c8:5e:02:3d:
         d3:7e:b8:4d:8a:6a:39:6e:ed:48:63:72:24:e8:8e:bc:69:27:
         82:c9:9d:a2:e1:2a:3f:2f:75:d2:b9:93:2a:cf:15:a7:8f:96:
         34:13:88:22:11:4e:f7:73:b1:34:a8:8e:dd:6c:e6:be:14:7d:
         b1:90:ec:f5:39:8d:ed:58:22:bb:27:0f:48:a4:1b:a4:76:00:
         1d:92:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----