Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer
File:                     F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.cer (raw, json)
Hash identifier:          qTXObYRf/HGbRu2UVUCANZf0ktjyMzfmGAISkQoS7Sc=
Subject key identifier:   F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10630ABC77518EAB51A10BB2D48BDF3C4480AD14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 18:11:06 +0000
Certificate not after:    Wed 12 Mar 2025 18:16:06 +0000
Subordinate resources:    AS: 269197
                          IP: 45.181.196.0/22
                          IP: 2804:60e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:63:0a:bc:77:51:8e:ab:51:a1:0b:b2:d4:8b:df:3c:44:80:ad:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 18:11:06 2024 GMT
            Not After : Mar 12 18:16:06 2025 GMT
        Subject: CN=F2F3137FF0D447CA8693B97D01EE89634AEFD6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:1f:36:a5:ad:61:2e:b5:87:1f:c3:42:4e:
                    85:5c:1c:aa:fd:26:a7:88:a4:38:f6:6b:03:18:30:
                    84:35:e3:3c:ae:1b:77:81:4d:58:e6:9b:20:ac:ad:
                    c8:a5:6d:42:93:6d:61:2c:be:f2:4e:f6:06:20:5f:
                    f3:03:09:86:62:79:e5:4d:66:21:85:53:e8:6f:87:
                    3f:30:61:d6:5b:18:1d:1d:9c:13:11:91:9b:6a:fb:
                    a5:f9:85:98:c2:7c:19:73:17:8b:f3:95:0a:af:09:
                    50:7a:83:9b:f4:a4:cf:be:ba:37:ba:63:32:87:aa:
                    8b:2f:d4:53:88:8f:c7:48:17:7c:da:d8:94:2f:86:
                    70:1f:e5:f0:ee:58:d3:79:6c:5f:ff:50:b0:e1:a3:
                    8c:31:0f:f5:99:f9:b7:aa:53:a6:a1:93:7e:bb:41:
                    0d:5c:7e:8a:3e:91:09:18:fa:df:c3:4b:70:1f:d8:
                    38:ed:41:b5:30:77:7a:95:52:e2:39:ff:89:7e:4d:
                    d0:8f:48:21:bb:a9:58:9e:df:b2:ab:25:1b:8f:b3:
                    2f:16:71:cc:32:29:17:4a:4d:cf:03:11:fc:d9:fc:
                    eb:e3:01:4f:1f:c3:bd:e9:e1:65:96:c5:83:5a:bd:
                    df:ac:21:a9:2d:0b:91:59:bd:ef:60:01:a1:e5:e2:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:F3:13:7F:F0:D4:47:CA:86:93:B9:7D:01:EE:89:63:4A:EF:D6:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/F2F3137FF0D447CA8693B97D01EE89634AEFD6ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.196.0/22
                IPv6:
                  2804:60e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269197

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:5f:25:c2:8d:02:be:b6:47:59:a3:a4:e8:8b:40:77:9d:
         4e:ae:ac:1d:b6:2a:ac:73:9c:8c:ac:77:8e:a0:c9:98:d0:e8:
         57:85:d7:d6:d0:00:17:8b:e2:34:dd:b2:da:0f:8d:84:8e:60:
         67:c3:d9:ad:b8:29:e5:2f:e0:52:d2:81:0c:05:7b:6c:16:03:
         dd:68:c1:4d:70:ef:b8:d9:d7:fb:aa:34:99:20:a7:15:39:a8:
         7e:2e:42:9b:9d:d9:a0:78:01:18:54:75:f8:03:ea:55:37:6c:
         16:c3:74:5f:f2:60:c6:08:87:87:15:49:e1:b6:a0:ac:0a:00:
         ac:93:3b:76:76:fa:46:f9:13:c0:c7:5a:6b:e6:4b:c2:3b:b6:
         dd:e5:18:b0:69:f1:01:32:26:b7:e6:2f:fe:0a:15:99:6e:7d:
         7e:d3:53:52:26:dd:a8:65:07:ed:b3:8b:e1:97:12:b2:dd:9a:
         09:37:96:09:78:e3:1a:23:07:8b:b4:32:78:9a:55:70:3d:eb:
         e0:9d:98:55:0e:48:0c:9c:6e:84:be:67:1e:ba:99:7d:7e:1a:
         90:24:fe:3c:ff:07:12:89:54:bc:f4:c3:fb:99:6e:29:61:31:
         6c:50:75:64:69:f6:29:51:6a:10:e8:e9:72:d1:9d:3e:09:c2:
         a4:da:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----