Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.cer
File:                     F54AF77B19B9B7EB0E281E779779F2742EABB361.cer (raw, json)
Hash identifier:          qREdKkpuW7Tohps40NL5aRCT+xxA88atqDY4tcssxEA=
Subject key identifier:   F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       297FEF623F7CDA0CF2D8DD946FE4F4344FBBADAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 12:34:17 +0000
Certificate not after:    Mon 15 Jul 2024 12:39:17 +0000
Subordinate resources:    AS: 262302
                          IP: 177.10.204.0/22
                          IP: 177.87.128.0/21
                          IP: 2804:ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7f:ef:62:3f:7c:da:0c:f2:d8:dd:94:6f:e4:f4:34:4f:bb:ad:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 12:34:17 2023 GMT
            Not After : Jul 15 12:39:17 2024 GMT
        Subject: CN=F54AF77B19B9B7EB0E281E779779F2742EABB361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:84:4e:34:24:41:16:a5:41:13:e8:c0:0a:
                    f1:49:bc:f8:1e:88:47:97:87:cc:b8:68:af:6e:b6:
                    22:35:2b:6a:0c:cc:08:fb:4a:36:bb:ce:68:84:5d:
                    a4:d1:55:a9:cf:70:58:a7:9c:b8:11:94:64:c6:09:
                    3b:24:71:3a:e8:21:fe:22:57:28:38:d9:d1:66:8e:
                    dd:82:b4:bb:a4:fc:1e:7a:09:3c:f9:69:62:f0:da:
                    1d:0d:26:9c:76:b2:50:dc:77:b5:5c:20:8d:44:a0:
                    f2:3a:80:b7:27:25:7e:47:3c:fd:1b:d0:ed:ff:54:
                    89:45:37:5e:47:56:96:5c:1b:5b:6b:ff:4e:a0:df:
                    f2:03:1d:14:a1:d6:ca:40:ed:76:46:be:1d:95:87:
                    c4:be:46:59:cb:c8:5c:42:09:9b:33:01:3e:77:39:
                    51:23:48:d4:66:03:56:19:5d:0a:20:cd:e9:f6:84:
                    e3:0b:21:23:3d:4f:db:f9:7f:4e:d0:3b:90:90:48:
                    3e:6e:b6:f8:2d:f4:14:a0:34:d4:82:d8:c7:3a:56:
                    32:a5:ab:a4:01:17:42:1e:ba:20:aa:22:c5:d9:3b:
                    9e:32:b4:15:ae:9c:b1:21:a2:d7:a5:0b:3f:19:77:
                    90:20:db:4d:ca:f9:73:f0:d8:c5:8a:4b:8c:77:48:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:4A:F7:7B:19:B9:B7:EB:0E:28:1E:77:97:79:F2:74:2E:AB:B3:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/0/F54AF77B19B9B7EB0E281E779779F2742EABB361.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.204.0/22
                  177.87.128.0/21
                IPv6:
                  2804:ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262302

    Signature Algorithm: sha256WithRSAEncryption
         88:3e:e4:89:c7:bf:5d:04:f0:3e:29:15:30:92:e8:8b:5e:3d:
         a1:b3:f1:13:56:c2:26:45:77:52:1a:80:f6:04:23:84:09:aa:
         3e:84:cb:f8:5e:b6:07:65:bf:d1:5f:95:10:a8:96:b8:e7:05:
         c8:9e:60:50:6a:6f:eb:6e:be:c9:b0:7c:12:c9:b7:f9:94:24:
         56:40:91:c8:18:f7:b7:da:25:0a:94:8b:dc:13:60:1e:68:4b:
         b1:3b:84:18:3c:7b:22:7f:68:65:e5:b0:89:7a:2e:b9:26:81:
         d7:a7:7c:3f:db:24:1a:d7:0c:d1:54:3a:d8:ce:d4:63:dd:7a:
         8f:1d:a8:9e:d3:92:74:1f:11:6d:2a:f2:21:5b:a7:c6:bf:59:
         19:54:c5:5b:83:70:d5:84:3b:aa:f8:a0:dd:27:2f:b2:07:b4:
         8c:82:4d:f7:fa:40:d9:34:7d:05:8d:f7:53:6c:97:9e:fc:9f:
         00:c7:bb:59:f4:1b:cd:7e:93:be:76:3f:c6:36:4b:95:cb:7f:
         7e:9d:1f:71:6f:6a:76:b4:fd:36:89:e2:20:51:34:b7:d3:14:
         6e:d6:cd:d0:05:14:61:0e:b2:7b:eb:2b:de:0a:d4:8e:85:c3:
         b0:c6:70:75:75:6a:a3:eb:ee:bd:ac:ee:34:d4:09:70:eb:8a:
         cd:2e:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----