Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer
File:                     F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.cer (raw, json)
Hash identifier:          Ip9NWsXqc3NMbsRVF+DZADw9KD9/BtEWEJlQtxJQEBw=
Subject key identifier:   F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78ED77AD8A7FD7440B8FF4B45D40EC3D70894C58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 15:11:43 +0000
Certificate not after:    Thu 27 Jun 2024 15:16:43 +0000
Subordinate resources:    AS: 267296
                          IP: 45.233.76.0/22
                          IP: 2804:4b4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:77:ad:8a:7f:d7:44:0b:8f:f4:b4:5d:40:ec:3d:70:89:4c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 15:11:43 2023 GMT
            Not After : Jun 27 15:16:43 2024 GMT
        Subject: CN=F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:4f:57:7f:79:0b:80:7e:76:15:f7:11:25:
                    a4:85:c9:f8:3f:09:e5:d5:00:21:2d:85:db:12:b0:
                    11:c6:2f:9d:59:7a:4b:79:aa:9d:ad:42:79:73:bc:
                    eb:d8:a7:c3:a4:2b:0e:4e:4a:69:21:fb:05:1e:ee:
                    37:6c:6b:59:79:de:b2:90:3c:7b:f5:2e:58:71:b6:
                    19:ee:c7:7b:a2:94:89:ce:5b:3f:5f:c7:ae:25:a8:
                    96:ec:46:d7:00:c0:9e:74:68:d5:dc:59:a1:16:7d:
                    e8:98:6e:ff:38:1b:9a:52:39:23:ad:22:92:7e:ec:
                    e2:b6:ac:89:6a:66:b0:36:ea:72:56:31:fa:67:97:
                    ff:6d:12:e5:6f:34:e3:f1:07:13:34:b4:23:a7:50:
                    20:29:c8:4f:a1:6d:68:e1:b6:54:27:38:05:5e:d7:
                    7d:1a:8d:e5:66:b8:a9:9c:cf:79:23:e1:99:14:ec:
                    01:92:bf:1b:2e:82:ca:95:11:84:93:8d:54:a1:1f:
                    f0:a3:f2:96:6a:63:69:a9:c6:f9:09:78:01:e6:14:
                    fc:c0:52:c7:b6:8b:6f:be:19:05:7d:3e:1d:d6:f1:
                    11:d8:49:d3:48:4f:cc:17:81:35:cf:24:81:f6:a9:
                    be:cd:96:ec:98:4a:32:4c:d7:98:58:55:c2:b6:00:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:D2:D6:58:1E:C2:A7:A4:B1:58:70:9A:A4:0F:4D:6F:A7:86:FF:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JrTveLYUnu1hH84FUxci2Unjsf3ATwnU8UwjJYSFqWp/0/F0D2D6581EC2A7A4B158709AA40F4D6FA786FF47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.76.0/22
                IPv6:
                  2804:4b4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267296

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:57:5c:70:39:c4:a7:11:23:0a:78:1a:6d:d1:46:70:46:
         d9:75:25:9c:6c:03:21:35:d2:4f:6e:38:19:50:dc:09:39:1b:
         0e:88:42:97:48:b2:cf:56:d9:11:1b:32:00:21:77:e1:6f:3c:
         2d:61:32:ee:f6:ca:6d:69:be:89:0f:1e:97:e0:31:da:11:b6:
         c5:29:64:f1:54:4b:30:87:34:75:25:72:b0:2a:d5:53:5d:71:
         8d:d8:8d:46:43:1a:b9:5c:1b:8e:dd:09:5f:0e:27:0f:6d:4a:
         9e:1c:e6:b4:df:0a:70:91:6d:a6:6f:bb:9c:58:88:34:18:4a:
         99:c3:3d:cc:08:61:ef:08:05:6b:be:75:ee:e4:93:c5:a1:ce:
         e5:8e:f5:f3:66:33:b9:0f:55:5a:2f:10:d6:3c:34:f7:ee:b8:
         b9:46:4e:4c:32:21:56:f2:21:83:91:13:bf:8a:26:bf:d3:56:
         52:a8:02:61:2f:8b:f4:b6:da:0b:fc:23:a9:e6:3d:ff:10:2b:
         57:a9:5b:8a:8d:6f:78:93:c5:42:e7:b7:6f:0e:73:05:27:90:
         fc:3e:ad:13:fb:53:9b:06:6d:a0:fa:c0:9c:ec:33:f9:4d:26:
         e4:1f:11:b2:22:63:40:10:9a:d5:89:af:67:e5:fd:b6:d9:92:
         1f:89:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----