Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F4F556C33EA7428E6140162105F40037D7CF70CA.cer
File:                     F4F556C33EA7428E6140162105F40037D7CF70CA.cer (raw, json)
Hash identifier:          5011PoEfkCrmWgRcA1m4SZBNMQrHaiDbly2ZK+R6F/s=
Subject key identifier:   F4:F5:56:C3:3E:A7:42:8E:61:40:16:21:05:F4:00:37:D7:CF:70:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AD904024C1DE066F1F2278100AA45F4A3E676C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/F4F556C33EA7428E6140162105F40037D7CF70CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 18:21:37 +0000
Certificate not after:    Mon 10 Mar 2025 18:26:37 +0000
Subordinate resources:    AS: 271739
                          IP: 2804:8040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:04:02:4c:1d:e0:66:f1:f2:27:81:00:aa:45:f4:a3:e6:76:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 18:21:37 2024 GMT
            Not After : Mar 10 18:26:37 2025 GMT
        Subject: CN=F4F556C33EA7428E6140162105F40037D7CF70CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:e4:2a:d2:57:ff:5e:1f:1f:d4:78:46:62:
                    e2:63:92:09:6a:1d:80:5e:26:a1:91:c7:33:d5:c5:
                    a3:dd:b2:53:9d:e3:7e:3b:d9:5d:02:14:19:ac:24:
                    33:54:59:1b:33:24:e6:5d:c4:01:ea:d8:3b:a7:6a:
                    17:79:82:0e:2c:c6:d7:7f:cd:57:2d:b9:23:f8:9f:
                    99:87:d1:d1:cb:94:5a:63:65:c5:72:9f:e4:07:d8:
                    2e:71:f9:71:c7:8d:fa:62:11:3d:19:98:50:3e:e7:
                    1c:be:2f:4a:cf:39:80:42:bb:bc:2c:f3:2a:ed:8d:
                    e1:bb:25:26:56:8a:bb:8b:f6:68:6f:67:4a:81:15:
                    33:75:57:95:26:67:47:1c:16:0b:11:01:41:ca:3c:
                    0b:8c:f5:d9:0a:d1:4f:eb:8c:77:a3:03:c8:60:6a:
                    c2:be:73:d2:7d:e0:c1:05:8b:11:ff:88:ca:2e:ea:
                    99:c8:db:89:53:5a:a6:d6:18:18:09:dc:9f:94:20:
                    9d:b8:84:02:4c:20:53:a7:08:6f:33:21:06:ee:57:
                    4c:3e:e7:2b:cf:ca:2c:48:84:d2:08:e0:76:a6:bd:
                    6c:cc:ea:af:7b:51:4f:6c:73:6b:63:96:83:37:6a:
                    69:10:66:b0:9b:88:d5:ae:44:94:12:95:9e:0d:c3:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:F5:56:C3:3E:A7:42:8E:61:40:16:21:05:F4:00:37:D7:CF:70:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/0/F4F556C33EA7428E6140162105F40037D7CF70CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271739

    Signature Algorithm: sha256WithRSAEncryption
         b1:7b:a4:f0:1e:bc:aa:d1:30:d8:d3:c8:ae:06:49:fb:aa:f2:
         7e:1c:e1:3b:40:f0:10:7b:1c:bf:94:b1:20:ce:d6:6d:2d:9f:
         9f:95:7b:4c:a4:f4:f2:5f:6b:a8:90:a4:7d:58:47:c4:4d:5d:
         bf:d0:d7:56:5f:b6:75:b2:39:e4:7a:00:9e:56:fd:26:a8:c4:
         d6:c5:9b:d6:4b:ea:3b:4d:09:f6:35:25:8a:eb:e2:d9:a0:bd:
         79:a5:0f:92:48:bd:4f:7c:f8:17:09:1a:1c:ea:82:14:39:c8:
         7a:ce:1d:19:cd:3e:2b:0b:80:fa:dd:06:55:9b:b6:e7:d2:6d:
         58:89:99:b8:35:7f:11:f6:5b:19:78:27:c1:90:c4:1f:1f:2d:
         5c:24:62:be:4c:3e:91:1e:62:9a:0f:30:f7:21:68:55:55:ac:
         64:a0:b3:e2:a0:a4:4d:4b:21:c0:d5:f4:19:a4:c4:bb:d3:65:
         1b:5f:71:c8:55:a4:00:db:bc:46:56:67:d4:d3:ba:03:94:97:
         7e:4e:95:f3:1b:14:10:01:0d:80:99:89:42:8f:00:94:4a:0d:
         66:a6:a4:d1:5f:55:12:f6:7a:45:20:c3:dd:ea:fa:95:f9:66:
         d6:52:d1:30:27:e0:5d:09:98:9c:6b:6f:f0:ae:d8:42:e8:2e:
         ca:91:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----