Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.cer
File:                     F0A502747602B2264B5BD0938308DA17D1A2B94B.cer (raw, json)
Hash identifier:          LVcxhN/bPysc4k982zhHHpmh9aIl3VszmojtxPy2IgQ=
Subject key identifier:   F0:A5:02:74:76:02:B2:26:4B:5B:D0:93:83:08:DA:17:D1:A2:B9:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6062614EFAB04C5AC642AA85DE27906741C44F9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 12:23:34 +0000
Certificate not after:    Tue 07 Jan 2025 12:28:34 +0000
Subordinate resources:    AS: 269137
                          IP: 45.180.144.0/22
                          IP: 2804:5ff8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:62:61:4e:fa:b0:4c:5a:c6:42:aa:85:de:27:90:67:41:c4:4f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 12:23:34 2024 GMT
            Not After : Jan  7 12:28:34 2025 GMT
        Subject: CN=F0A502747602B2264B5BD0938308DA17D1A2B94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:f0:d4:d2:77:6d:cb:5c:74:42:d8:08:5a:
                    56:9c:b8:7d:f6:23:9c:d5:87:3b:a1:28:5b:59:80:
                    9e:d9:8f:ba:ad:bb:64:75:f3:b8:ff:3e:bc:28:1f:
                    1e:93:7b:d6:a7:f7:1c:67:3b:b3:81:27:02:35:37:
                    c1:f8:f0:4f:b6:5d:6b:11:f4:a1:9c:ce:4b:20:51:
                    44:00:fc:53:59:e3:7c:a9:1d:7b:bc:a0:7e:be:ba:
                    11:95:c7:06:d0:7e:fd:c0:77:70:4b:09:3a:ab:d4:
                    3e:88:05:12:57:a4:4f:d6:23:23:39:1e:6e:c6:14:
                    ed:ee:13:66:c7:c4:eb:26:4f:1a:2a:83:c8:d5:28:
                    de:9d:03:2a:26:2e:20:0a:cc:ab:e9:cb:77:58:da:
                    e2:33:3e:08:53:dc:45:e8:60:f4:f4:c8:c9:b4:1f:
                    4f:b4:6c:6d:1d:e8:f9:3f:e3:d1:34:b4:67:d2:9b:
                    63:f1:84:76:06:1c:f2:40:df:b3:5c:26:b1:4d:12:
                    91:24:bd:f2:ea:7a:1b:3f:47:9b:60:8d:36:d7:b9:
                    04:a3:36:66:04:2c:f3:1d:81:9a:08:36:97:36:5d:
                    e9:3c:8d:65:6b:eb:03:25:78:6a:34:df:07:7e:40:
                    a9:14:2f:03:ea:67:42:38:87:bc:29:2f:3d:43:c6:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:A5:02:74:76:02:B2:26:4B:5B:D0:93:83:08:DA:17:D1:A2:B9:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.144.0/22
                IPv6:
                  2804:5ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269137

    Signature Algorithm: sha256WithRSAEncryption
         58:8e:07:d4:60:76:1f:1b:b7:fe:5b:3d:a2:a3:da:86:11:c2:
         1e:9c:cf:af:8a:2d:d8:3c:5f:54:bc:fe:23:93:92:90:57:19:
         78:54:fe:79:ec:af:3a:94:79:ae:1a:94:54:3a:fb:7f:24:ec:
         38:40:13:6e:ae:c5:79:ee:6d:1c:2a:f9:c5:6c:d5:7f:c6:61:
         a0:70:25:88:09:f7:dc:bb:17:46:00:89:1a:a5:ab:72:93:fa:
         99:10:4f:4e:e3:06:b9:22:07:04:81:0b:81:b2:e6:60:a5:bf:
         64:30:15:e7:3d:8d:7e:b4:96:d6:e1:80:bb:2c:c7:a0:20:dc:
         35:0d:4a:3b:a7:cf:36:db:0f:4e:35:11:a8:fa:ee:e1:81:fe:
         1e:c1:e3:8e:0a:bf:80:57:9d:de:f1:ef:29:e7:c8:a6:99:75:
         13:f2:3b:88:02:cb:cc:10:ae:5f:41:52:cc:8e:20:6d:a7:ef:
         96:d2:ba:86:b2:6d:76:39:09:d4:61:a9:4c:db:66:f5:e5:dd:
         45:02:e1:84:28:a4:1d:99:32:44:a1:58:b3:4f:47:62:1b:da:
         8d:08:25:b1:84:b5:55:91:e0:a2:8d:3a:4b:cd:71:6f:94:cc:
         ac:d9:7d:6b:8c:61:80:25:b2:53:cf:cd:b3:91:99:12:1b:1f:
         c7:98:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----