Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.cer
File:                     F110CE70C3363E6840696AD7EAD6939D5D2C89A6.cer (raw, json)
Hash identifier:          fA4Bde/NsBFRdy7RvCk/SMpZ/NelpMFaf+7fBGnvToc=
Subject key identifier:   F1:10:CE:70:C3:36:3E:68:40:69:6A:D7:EA:D6:93:9D:5D:2C:89:A6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F7CD0614E4162E5F8EDCA7F6BDABB4A25299FD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 15:34:38 +0000
Certificate not after:    Fri 26 Jul 2024 15:39:38 +0000
Subordinate resources:    AS: 271651
                          IP: 181.191.72.0/22
                          IP: 2804:7ee0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7c:d0:61:4e:41:62:e5:f8:ed:ca:7f:6b:da:bb:4a:25:29:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 15:34:38 2023 GMT
            Not After : Jul 26 15:39:38 2024 GMT
        Subject: CN=F110CE70C3363E6840696AD7EAD6939D5D2C89A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:e2:e4:37:6f:63:d8:e3:5c:ed:d9:fe:d9:
                    81:2d:12:21:60:cc:7d:e2:94:4e:3a:2b:e0:21:e4:
                    d8:c6:f8:ff:f8:04:48:4d:0a:49:bc:03:3a:80:41:
                    84:88:01:6c:5a:9d:b0:fb:2f:8c:54:49:f0:ba:37:
                    57:1d:d0:db:5d:9c:1d:22:48:22:6a:24:fb:be:98:
                    29:26:d8:2a:96:e2:03:42:5f:ee:f3:18:bd:20:da:
                    be:d2:0d:81:4c:31:64:20:0a:37:84:59:4e:13:a4:
                    ff:39:36:e6:46:89:0f:b8:94:83:f7:00:45:61:53:
                    6d:e5:e8:0e:5a:36:8f:01:8c:7d:3c:5a:d2:b2:fe:
                    97:2a:2b:18:00:bc:84:4b:af:ee:f0:d1:7c:58:3f:
                    38:8f:e6:3f:1b:71:6d:44:81:8f:27:e0:d8:dc:4e:
                    7c:6a:c9:51:6b:f4:d4:40:97:89:62:e1:f0:de:82:
                    e7:e6:34:fb:4c:cb:7c:fc:95:c7:72:48:e2:ae:4f:
                    0a:63:71:e2:e3:82:ed:35:e6:f7:0e:78:de:26:ad:
                    f6:b3:c9:94:cf:b5:82:f5:07:8e:c6:31:6a:9e:9a:
                    e6:cb:c3:05:e6:28:4d:d0:15:78:a1:b3:65:66:4d:
                    d1:8f:3b:bd:c8:43:80:3e:68:aa:63:cd:81:3c:95:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:10:CE:70:C3:36:3E:68:40:69:6A:D7:EA:D6:93:9D:5D:2C:89:A6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6DWDDtnvS9y2KkQPUPBLzoxU4kmHPN1PUjDTm77irE6A/0/F110CE70C3363E6840696AD7EAD6939D5D2C89A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.72.0/22
                IPv6:
                  2804:7ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271651

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:66:ae:d5:49:be:7d:c2:eb:b9:af:d1:96:c4:07:fe:7a:
         94:95:bc:12:6c:00:d0:e6:30:4f:54:66:9b:12:94:ee:82:33:
         14:51:69:52:00:47:74:02:06:3d:8f:83:af:e6:36:74:c8:a3:
         fb:7c:03:63:db:1e:5c:da:54:d7:9b:ee:e9:c9:c5:ca:a9:12:
         97:ce:34:19:29:f7:d0:e1:ef:23:44:39:23:cc:be:be:2c:e1:
         7d:b3:8a:7b:97:94:58:f1:ec:a1:0d:f2:63:35:43:b7:03:45:
         69:3c:85:7b:53:21:b0:82:c4:ee:cd:19:1d:67:60:5b:71:ca:
         b7:46:4f:09:09:53:77:a2:d0:a3:71:0e:e5:62:58:ea:fd:bd:
         8d:7a:60:9d:85:b5:99:3b:18:cf:a3:1b:ba:74:40:59:f7:15:
         48:ee:67:64:2c:8c:ee:17:b5:7a:3f:88:e8:0b:4c:bd:a9:c5:
         36:aa:47:0e:4e:f5:f7:26:7e:67:0a:37:93:14:31:28:a7:8b:
         ea:79:20:fe:20:88:66:24:80:ad:ec:e3:7f:1a:ab:4b:80:21:
         cd:39:50:52:03:0c:1d:18:5b:80:0e:8c:b1:c0:e9:d6:6a:ba:
         0a:bf:e9:cd:c2:64:2d:2b:37:5c:62:77:a4:34:20:71:0e:35:
         5f:10:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----