Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F6CE1A72AFCDD47BFC5C9218AC5577C2EEB5CE16.cer
File:                     F6CE1A72AFCDD47BFC5C9218AC5577C2EEB5CE16.cer (raw, json)
Hash identifier:          5frUrOlhYDEOFognrjA1I1z4vnTLwUICyxIVjEKSecE=
Subject key identifier:   F6:CE:1A:72:AF:CD:D4:7B:FC:5C:92:18:AC:55:77:C2:EE:B5:CE:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D45DC55188D9D133A4A07FC5738F0061D1FC612
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/0/F6CE1A72AFCDD47BFC5C9218AC5577C2EEB5CE16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 21:25:51 +0000
Certificate not after:    Wed 24 Jul 2024 21:30:51 +0000
Subordinate resources:    AS: 271057
                          IP: 179.48.228.0/22
                          IP: 2804:7598::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:45:dc:55:18:8d:9d:13:3a:4a:07:fc:57:38:f0:06:1d:1f:c6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 21:25:51 2023 GMT
            Not After : Jul 24 21:30:51 2024 GMT
        Subject: CN=F6CE1A72AFCDD47BFC5C9218AC5577C2EEB5CE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:32:25:3a:07:27:3c:ec:c9:04:f4:47:68:
                    fa:9a:18:29:bd:56:d5:4c:5b:6d:5c:ac:20:11:b2:
                    e5:89:ce:4c:9b:23:77:85:f6:80:49:b4:fa:92:2f:
                    fc:10:31:dc:24:2e:08:b9:f6:3c:41:e1:77:c4:be:
                    8d:a5:62:f7:61:ed:1a:7a:d1:08:50:78:d5:d6:6b:
                    21:b2:f9:25:5e:81:17:b1:d5:a6:81:e5:99:37:77:
                    61:8f:23:31:b8:87:7d:8c:af:88:15:c3:fd:cf:23:
                    d1:2c:03:6a:ac:a3:27:14:0f:22:1a:18:58:dc:ba:
                    67:c5:0d:d5:71:ea:c2:76:66:34:d7:b7:f7:9a:fc:
                    fb:52:ac:24:11:b3:24:9f:19:d0:90:76:97:6e:34:
                    0a:ab:35:bf:d7:29:ab:e8:2a:17:19:96:c6:d3:00:
                    33:98:e6:72:a4:cf:4c:d6:6b:3c:15:51:5f:fb:1d:
                    53:3d:df:1b:b1:3b:e1:5d:2d:19:02:ea:a1:7c:d9:
                    25:6a:57:a3:43:17:22:57:1c:e1:97:52:7a:3e:dd:
                    10:80:f8:0b:46:e6:24:b0:23:b0:b1:72:62:52:e2:
                    7b:2a:dc:0a:30:fc:af:ce:36:35:47:7a:17:cd:96:
                    a6:72:63:ff:76:ba:71:fb:11:8f:ce:a6:d6:6a:46:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F6:CE:1A:72:AF:CD:D4:7B:FC:5C:92:18:AC:55:77:C2:EE:B5:CE:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fgK7kAB67fVn4KRGH9ZGRg1cJD5BMZfAaJSpyTddqdj/0/F6CE1A72AFCDD47BFC5C9218AC5577C2EEB5CE16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.228.0/22
                IPv6:
                  2804:7598::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271057

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:04:a1:51:4d:35:bd:5d:a4:c9:93:93:0f:f7:30:08:12:
         70:bb:f0:5e:e5:af:14:0d:fa:d3:64:2a:b8:69:ef:95:71:b5:
         8b:8e:a4:de:89:7c:fa:ef:a0:26:37:26:ed:2c:45:d7:c3:8d:
         3e:2d:4b:c8:9f:6c:d5:01:1e:3f:68:2e:14:fd:de:94:97:b8:
         f6:5f:1d:f8:49:ee:30:af:40:fe:43:80:dc:9e:2f:76:21:38:
         c6:e5:11:ce:58:dd:3f:37:7f:16:ca:ee:fe:0c:a8:7e:11:c8:
         58:fd:e5:39:b0:18:5c:7c:be:a7:01:c1:2f:9c:b3:4e:68:5c:
         93:b8:39:94:4a:2d:62:d5:ca:10:7f:15:12:89:27:77:33:df:
         1f:4b:ab:eb:e3:8c:03:34:db:65:34:24:aa:6d:1d:c5:8b:c8:
         af:1a:9a:eb:fc:5d:91:f8:3f:86:7d:0b:19:e0:64:23:b8:ca:
         f3:9b:90:ed:eb:6a:4e:f6:3e:f3:ed:c6:2d:0b:60:4b:f8:57:
         ee:7d:a4:a0:29:69:6b:15:e3:08:32:d0:2f:5d:54:8e:5c:f5:
         ec:6c:51:ee:97:ec:d7:42:05:19:09:32:fc:e1:a9:c4:c8:26:
         37:20:66:26:8d:ff:9b:fb:29:e7:c5:4c:fd:7b:1c:b5:0a:16:
         70:f6:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----