Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.cer
File:                     F0EA057A6221780F5BC2ECA742F09366267EFD07.cer (raw, json)
Hash identifier:          LVsTmSRa+LxnD5gzMFbovD0QaNaQS3SHQBS/AYgC7aQ=
Subject key identifier:   F0:EA:05:7A:62:21:78:0F:5B:C2:EC:A7:42:F0:93:66:26:7E:FD:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       796CB9339CC3FAF35CB64D7478C39B531289CAC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 20:02:22 +0000
Certificate not after:    Thu 11 Jul 2024 20:07:22 +0000
Subordinate resources:    AS: 272548
                          IP: 181.232.232.0/22
                          IP: 2804:84f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:b9:33:9c:c3:fa:f3:5c:b6:4d:74:78:c3:9b:53:12:89:ca:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 20:02:22 2023 GMT
            Not After : Jul 11 20:07:22 2024 GMT
        Subject: CN=F0EA057A6221780F5BC2ECA742F09366267EFD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:1d:5b:de:6e:e9:1f:26:a0:b2:7b:54:9b:
                    c0:38:19:a6:5d:d2:be:dd:27:3a:f0:78:01:03:57:
                    b1:f8:12:7a:58:b8:ed:a9:12:7b:04:8c:3b:02:32:
                    37:cd:d6:59:25:9f:f3:34:1a:9a:90:32:8d:18:ae:
                    ed:d4:06:d3:f7:a2:17:4c:b6:de:12:2b:47:aa:10:
                    b9:27:00:5a:d5:1e:d1:ce:0d:f2:22:45:b1:46:51:
                    ea:79:b9:59:4f:c0:65:58:ba:48:68:64:ce:7c:ac:
                    b6:63:e0:1b:c0:c1:9a:fd:16:9c:e7:84:ff:9c:46:
                    4a:c9:ab:e6:1e:2f:76:6b:0b:fd:1f:e8:31:75:9a:
                    60:70:80:fd:6a:97:e0:cf:e5:e1:95:25:9e:c5:ae:
                    96:82:8f:ad:23:0b:5f:aa:ba:c6:32:58:f3:cf:74:
                    a6:16:9f:2a:90:8b:cf:af:ef:fe:18:60:2b:90:c9:
                    b6:21:47:cd:7b:92:5e:5f:13:38:b2:b3:7e:d5:7b:
                    62:7e:26:4a:4e:26:54:de:43:07:4a:eb:51:af:92:
                    c0:73:9d:2e:88:14:3f:4e:fd:6c:73:a9:34:e0:28:
                    46:01:68:3f:2e:44:73:02:d4:7a:41:96:27:8d:fb:
                    77:a5:59:cc:db:1f:68:cb:a8:21:4e:36:9d:ff:7c:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:EA:05:7A:62:21:78:0F:5B:C2:EC:A7:42:F0:93:66:26:7E:FD:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/0/F0EA057A6221780F5BC2ECA742F09366267EFD07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/22
                IPv6:
                  2804:84f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272548

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:3f:1b:a0:1d:9c:5f:b5:26:1a:c6:00:ec:61:d7:ca:6c:
         74:21:f5:c4:78:10:3b:0d:6c:52:0a:4d:df:c6:34:68:4a:93:
         41:a8:2f:22:93:81:ac:37:bc:a2:1a:f0:e6:13:5d:10:c2:ca:
         1a:3c:f9:fe:72:1d:d5:94:0e:80:7d:3a:d4:db:f7:9a:59:8f:
         0d:71:fa:a2:e8:97:a5:3e:f4:2d:39:1a:72:f7:31:a1:d3:10:
         e5:1a:41:54:4f:b0:0a:fd:ed:85:c7:c8:e4:f9:91:7c:77:33:
         42:3f:77:05:ff:24:6a:1e:4e:e2:66:2d:d8:35:c7:b7:36:91:
         f4:ad:24:8f:cf:4d:37:d1:4e:fa:3d:d6:55:13:ac:74:0d:56:
         b8:ef:54:79:cc:72:69:58:4b:cb:04:b6:0d:dd:2c:18:6c:25:
         8c:72:e2:63:5f:19:43:d7:f2:b1:85:4a:eb:8c:26:bf:53:30:
         7c:cd:a6:7e:c0:7b:bf:5f:64:12:91:0a:12:2c:3c:5e:59:a3:
         92:79:23:4c:51:f5:c1:51:ce:08:d7:b2:81:3a:70:d3:8e:a7:
         5d:07:cb:a6:1b:45:f4:e3:d1:86:82:fd:9d:3d:20:b2:f2:33:
         63:ec:a8:fa:0b:77:ef:4f:24:4e:e2:40:a1:0b:67:f5:0d:f1:
         e7:74:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----