Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer
File:                     F220AC26EF920D90F2FDAD8C8F43587AA6142B09.cer (raw, json)
Hash identifier:          Xpl2XwBKWf+hUF+GppM51F2xLWFpZdzJp+MMJHFbBo8=
Subject key identifier:   F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A35F7003AC3BBE0768D7DC62ABF28DFC10A766C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 23:02:48 +0000
Certificate not after:    Wed 27 Nov 2024 23:07:48 +0000
Subordinate resources:    AS: 270249
                          IP: 200.107.112.0/22
                          IP: 2804:691c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:35:f7:00:3a:c3:bb:e0:76:8d:7d:c6:2a:bf:28:df:c1:0a:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 23:02:48 2023 GMT
            Not After : Nov 27 23:07:48 2024 GMT
        Subject: CN=F220AC26EF920D90F2FDAD8C8F43587AA6142B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:84:21:60:fc:2a:5c:49:62:1b:39:a1:99:
                    91:21:f7:ca:ec:b5:ac:d4:ab:b4:94:ed:57:a1:80:
                    b9:00:de:18:26:ee:2d:86:a8:e2:f7:f7:3d:e2:df:
                    aa:74:5f:06:a1:78:6a:c9:1e:cd:a3:4f:ec:f1:7a:
                    a8:63:05:5d:71:60:b8:26:bc:6d:0d:d8:11:74:b2:
                    8a:56:75:a1:7c:66:bd:d2:fe:5d:52:b5:c4:eb:ba:
                    bc:1c:87:f4:bd:e2:71:2f:06:89:91:ca:6c:c6:a6:
                    64:28:40:6f:e7:48:3a:cd:ad:d7:17:ad:4a:b3:8d:
                    e3:a6:ec:4d:bd:c5:7e:94:58:63:27:0e:07:51:ea:
                    d4:a1:bf:5f:1e:9d:f8:8c:60:28:d7:36:38:a2:01:
                    11:95:24:73:7b:68:f5:5b:bc:b2:25:68:eb:87:74:
                    e9:99:34:da:43:4a:97:03:e0:25:d6:5a:a6:44:4f:
                    7e:f5:a3:7c:a5:33:2b:3c:d8:b2:7f:eb:b6:e2:a5:
                    76:4f:f3:58:b9:94:27:18:38:66:61:7d:2f:c8:18:
                    98:e3:7a:5f:9f:0e:83:e6:55:17:48:5e:71:15:86:
                    1b:1e:47:f2:d5:a7:31:94:4b:db:19:12:2f:99:e2:
                    c3:7a:29:8c:bd:bb:50:9d:f0:c4:fa:8e:76:30:8c:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:20:AC:26:EF:92:0D:90:F2:FD:AD:8C:8F:43:58:7A:A6:14:2B:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AoAgsoVKNFmzrPsPVWBtiMZDEs5wPkyEaSr1C8wfcUzP/0/F220AC26EF920D90F2FDAD8C8F43587AA6142B09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.112.0/22
                IPv6:
                  2804:691c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270249

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:5a:88:fe:8c:1d:93:56:63:75:e2:35:f2:9f:83:57:16:
         c6:8f:86:1d:37:73:7a:97:86:24:dd:4c:5a:0c:c0:9d:44:68:
         a5:c4:6d:76:df:17:6a:75:52:34:e2:23:24:dc:b0:9f:c9:72:
         03:d6:70:19:1d:57:e8:13:3e:4d:14:57:72:41:91:53:0a:25:
         ae:1f:e7:98:20:77:e7:bd:d1:86:df:82:60:5e:5f:97:28:bd:
         91:3c:e6:7d:0e:3a:05:9f:72:3b:4c:aa:b0:c0:75:15:11:6c:
         72:c5:4b:2a:3e:d1:37:83:ec:38:37:33:9b:20:d1:f9:77:67:
         dd:12:84:9d:8a:2e:17:48:93:4d:9b:ab:0d:4c:46:7e:3f:d7:
         18:42:62:ce:cd:91:0d:27:47:e2:2e:52:32:fe:d9:ac:45:9d:
         51:f8:3b:da:d0:80:24:6a:a8:5b:3a:c4:47:7b:42:0e:b2:68:
         8f:0f:41:c2:58:3e:9d:f2:35:a7:db:f7:fd:8f:c4:21:76:7e:
         ce:ee:04:0b:ae:f1:92:81:37:e3:94:2d:0f:4d:fe:f7:4e:61:
         0d:ad:96:80:ce:aa:7e:bf:94:25:fd:6e:cc:e3:08:74:dd:92:
         78:47:c5:d4:e2:dc:be:68:df:ed:fd:40:a3:32:db:14:4b:06:
         69:f6:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----