Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
File:                     F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer (raw, json)
Hash identifier:          hf2dRuuAF0OHVTFqihMiJb9MXU0eKg3eL1lu+A85JNk=
Subject key identifier:   F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E4D2186D0E991E6D6C4DACBBA2C44C8FFA3B6B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 23:11:19 +0000
Certificate not after:    Tue 04 Mar 2025 23:16:19 +0000
Subordinate resources:    AS: 267580
                          IP: 45.70.68.0/22
                          IP: 2804:43a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4d:21:86:d0:e9:91:e6:d6:c4:da:cb:ba:2c:44:c8:ff:a3:b6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 23:11:19 2024 GMT
            Not After : Mar  4 23:16:19 2025 GMT
        Subject: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:d8:cb:ec:f5:26:5b:e1:53:0a:4b:77:61:
                    bc:6d:34:82:0d:e2:89:9a:c4:0b:2b:db:f3:fe:ee:
                    5b:98:bb:a7:f0:e7:57:4d:a1:58:65:12:4f:8a:a2:
                    70:d1:2f:ed:dd:bc:1f:f8:fd:a5:e7:bc:76:d6:5d:
                    1a:5b:f3:14:2f:2c:ae:da:e2:3c:d8:97:ff:e5:dc:
                    2e:45:5c:a0:ef:22:21:2a:71:5b:9c:c4:44:d9:33:
                    1d:71:b2:f5:27:c8:2b:a0:de:2f:ce:26:7f:5d:c6:
                    15:30:4b:04:9e:7c:a6:f4:86:de:55:7e:a8:bc:33:
                    20:93:5f:b9:11:10:cf:04:71:c9:91:47:2a:4d:1c:
                    a4:4a:b5:98:67:0f:60:f7:75:5e:bb:48:9f:8c:8a:
                    c6:1e:43:61:b4:06:a1:56:eb:4f:eb:02:1e:aa:2a:
                    27:f4:7d:18:ae:96:45:8a:0c:85:ca:ab:32:f0:11:
                    6b:3d:b5:42:47:d1:19:b1:52:2b:f1:58:22:ce:34:
                    c3:b4:d8:aa:79:b6:cf:82:cb:73:26:16:11:1a:36:
                    0f:ad:65:79:0a:59:24:ac:50:ab:fe:1e:58:fc:c8:
                    17:2c:e4:69:e2:94:13:85:80:98:93:bd:ef:f6:df:
                    da:84:ea:8c:1b:9b:59:bb:df:09:3c:cc:49:fe:63:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.68.0/22
                IPv6:
                  2804:43a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267580

    Signature Algorithm: sha256WithRSAEncryption
         14:85:a3:e8:fb:9d:23:c3:be:d4:07:26:4c:72:08:04:6c:8f:
         49:f9:78:0c:46:41:29:2b:d3:cc:56:4c:da:fc:4d:7f:fa:f4:
         57:57:3e:4e:e3:7e:d5:30:8e:40:e3:71:d3:60:5f:7c:f7:20:
         ab:d9:ad:c9:b0:e3:88:e1:0d:8e:1a:3c:e1:af:df:76:2b:55:
         d2:b4:61:ed:00:ff:6f:9e:91:d8:f9:e7:22:3d:27:e3:78:06:
         cf:6b:5d:d3:95:a3:a0:4e:79:e9:4d:ab:9a:0a:6e:fb:29:a2:
         6b:fb:71:15:7a:55:2f:19:31:8d:17:15:c5:7c:60:a9:f0:40:
         63:39:2e:c1:a4:40:a4:09:97:f8:aa:7f:60:e3:68:00:58:94:
         f2:a2:59:d0:f1:e9:5f:c1:69:12:d0:39:59:61:50:2e:eb:15:
         65:a2:f7:d9:bb:29:8b:55:42:ee:d9:b1:18:42:3c:68:72:c6:
         cb:70:4b:97:b6:c5:96:fa:58:7b:aa:b0:b8:46:1b:c4:bf:d3:
         b7:a5:83:55:c6:f9:a2:cc:d1:6a:17:64:1d:a1:9c:86:28:2a:
         0a:c8:8e:8c:80:bf:aa:cc:f1:19:7c:55:be:3e:5b:ec:ff:b9:
         1c:b2:9c:e0:6c:63:3f:78:de:87:b5:d6:c8:a2:82:12:33:a9:
         ad:2d:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----