Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer
File:                     F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.cer (raw, json)
Hash identifier:          8FXmmjAdzv5KBAP2HN1aCCYlHwViI5fx8LG9nNsJwmc=
Subject key identifier:   F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CDC59FDD8BB343EEEA6D2D26D2EA77109E6F04F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 12:41:18 +0000
Certificate not after:    Thu 15 Aug 2024 12:46:18 +0000
Subordinate resources:    AS: 28140
                          IP: 187.49.32.0/20
                          IP: 187.103.208.0/20
                          IP: 2804:1a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:dc:59:fd:d8:bb:34:3e:ee:a6:d2:d2:6d:2e:a7:71:09:e6:f0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 17 12:41:18 2023 GMT
            Not After : Aug 15 12:46:18 2024 GMT
        Subject: CN=F62DE795A8A9D5008B0F890B1AE18AC4AB39928F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:52:8c:58:1f:63:55:78:65:7f:94:cc:ba:
                    98:3d:19:2c:bd:d1:e4:37:0e:5e:da:fa:fa:a0:02:
                    a2:8e:ac:b4:48:eb:62:40:1e:4f:87:01:52:c2:dd:
                    28:65:22:1e:24:76:fe:e2:5d:d0:51:8f:8c:33:ec:
                    63:8a:8a:33:95:fa:56:f8:74:26:80:b7:46:21:19:
                    22:4c:ea:da:41:45:99:bd:a6:8a:f2:6c:6d:81:33:
                    e3:8b:79:ca:79:ea:6d:ff:67:b4:3e:74:5b:50:47:
                    08:d3:10:97:5f:d5:93:9b:7b:09:e9:87:4c:a6:b8:
                    74:63:b3:4b:3e:ab:cf:12:e5:68:8d:dc:c4:f2:7f:
                    f9:06:e5:f1:8e:a0:4c:15:5f:63:a4:a5:e2:aa:d5:
                    c4:84:56:ab:73:f3:32:07:17:43:a9:ff:48:c5:1f:
                    c9:ae:37:7c:50:8c:23:5a:2f:9e:15:67:e9:a8:64:
                    26:61:18:e8:0b:ae:72:3d:6e:86:86:f3:2d:67:76:
                    68:23:55:d6:1c:bd:f2:2c:1c:e4:a7:58:70:0d:c8:
                    39:72:88:e8:bb:09:b5:7a:3f:b3:c0:7a:2c:1f:eb:
                    6a:25:9a:3a:ac:ef:3b:33:4a:93:e2:08:f5:59:82:
                    df:f2:12:3c:b6:d7:5e:63:46:38:3b:8b:94:d3:e5:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:2D:E7:95:A8:A9:D5:00:8B:0F:89:0B:1A:E1:8A:C4:AB:39:92:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/0/F62DE795A8A9D5008B0F890B1AE18AC4AB39928F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.32.0/20
                  187.103.208.0/20
                IPv6:
                  2804:1a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28140

    Signature Algorithm: sha256WithRSAEncryption
         65:df:26:96:4e:97:45:20:7d:ef:e3:7b:94:eb:f1:cb:3e:5e:
         01:76:97:f4:6c:01:df:be:ba:ba:44:c6:14:60:85:a5:b0:05:
         2e:d8:af:41:cb:56:32:64:9d:75:1b:91:72:23:2c:2f:35:81:
         19:53:18:af:cf:87:af:7b:e8:e4:53:a2:fa:f9:31:91:8f:f7:
         18:49:b1:eb:d0:30:ff:c2:69:59:be:af:e2:1d:13:bf:f3:e5:
         da:e7:bc:dd:28:bc:81:14:70:19:b8:8d:e7:96:da:ff:ee:5f:
         e5:13:38:a9:b4:39:11:dc:81:5b:b4:b2:a4:dd:7e:88:02:9e:
         9f:3d:8d:07:eb:44:8b:2f:db:e4:c9:55:e0:98:24:0a:03:82:
         87:e2:32:2c:d8:36:fa:54:d4:8a:6d:4e:7e:07:1e:b1:09:b4:
         38:fd:ef:3b:4d:78:20:28:f1:bb:f4:8c:45:71:a0:b3:2d:b0:
         9c:a2:66:1a:f8:cd:6b:92:dc:49:d8:25:5b:f0:3f:39:16:c8:
         6f:94:e6:fe:11:2b:a0:22:45:7d:dc:5b:97:bf:d4:26:44:a1:
         ec:39:39:f8:d9:fb:0f:71:c3:17:ab:7e:f0:73:c5:88:20:69:
         a5:20:f4:d2:c9:56:bf:ec:e0:82:b5:5a:3f:10:cc:07:22:b6:
         0d:f1:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----