Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F72B0E4FE0229F91F09EF735E4683EC72140F3F0.cer
File:                     F72B0E4FE0229F91F09EF735E4683EC72140F3F0.cer (raw, json)
Hash identifier:          0O0mOwkFuzv5DulEx12iCqEVknrIBDBidNZHbMRtnQA=
Subject key identifier:   F7:2B:0E:4F:E0:22:9F:91:F0:9E:F7:35:E4:68:3E:C7:21:40:F3:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10857ECCD9BBAF6F298B353739F70FA8B740ACD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/F72B0E4FE0229F91F09EF735E4683EC72140F3F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:04:09 +0000
Certificate not after:    Tue 28 May 2024 19:09:09 +0000
Subordinate resources:    AS: 269090
                          IP: 45.178.76.0/22
                          IP: 2804:5f4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:7e:cc:d9:bb:af:6f:29:8b:35:37:39:f7:0f:a8:b7:40:ac:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:04:09 2023 GMT
            Not After : May 28 19:09:09 2024 GMT
        Subject: CN=F72B0E4FE0229F91F09EF735E4683EC72140F3F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:f6:b0:d1:18:57:14:39:c0:a9:db:6d:ee:
                    f9:25:87:b9:37:df:86:2c:75:c0:97:c7:ec:14:f5:
                    96:cc:c1:4a:37:38:f9:49:12:81:5f:e9:00:3e:99:
                    53:68:66:ff:3b:07:75:a3:8d:19:ea:2b:18:78:54:
                    99:af:b5:0c:77:62:92:f5:26:3e:4b:bf:a4:a1:ff:
                    fb:59:cf:86:d1:53:5a:a3:f7:a8:63:81:b1:76:34:
                    d5:42:a0:8c:a9:0c:28:ed:5c:9a:77:1b:7e:07:71:
                    47:84:96:99:a6:6a:2d:18:b7:3a:9b:ee:85:2d:71:
                    86:d3:e3:e5:bc:7f:fb:5f:f7:99:d2:40:ac:a0:92:
                    38:fd:9f:4f:20:91:db:ea:c1:0f:66:41:75:16:5f:
                    1d:f9:3d:0e:17:82:a9:23:72:d6:fa:66:5d:29:30:
                    3e:36:14:2b:7f:d1:63:27:4b:60:8b:c3:a3:3c:ca:
                    9d:26:f1:0b:0a:45:14:e6:58:bb:81:17:20:b3:10:
                    95:fd:58:b3:b2:35:80:8d:bd:fa:f3:22:5a:ec:c2:
                    ca:21:82:b4:87:30:d1:d6:31:e7:d0:63:f4:1b:7a:
                    6b:84:14:c2:bf:46:39:5b:51:58:88:cc:3f:c1:49:
                    aa:7a:c9:93:51:03:97:8b:f9:25:d9:51:b2:01:f7:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:2B:0E:4F:E0:22:9F:91:F0:9E:F7:35:E4:68:3E:C7:21:40:F3:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/F72B0E4FE0229F91F09EF735E4683EC72140F3F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.76.0/22
                IPv6:
                  2804:5f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269090

    Signature Algorithm: sha256WithRSAEncryption
         45:2f:0e:b7:d5:03:c3:ff:8d:37:ed:58:83:eb:91:79:e7:6d:
         cc:77:e9:29:33:73:cb:d7:c0:57:c4:6b:f7:9c:1d:95:e4:3c:
         8a:3b:d0:7e:d7:c6:87:39:55:ce:07:cc:a8:4e:e6:6b:4c:2b:
         3c:5d:76:b5:63:2f:b6:f1:3b:5d:b1:48:61:8c:11:19:9f:ce:
         4b:a7:b7:70:f3:da:b9:ea:1a:17:ca:e1:87:27:50:fb:30:e2:
         3d:41:d0:9e:66:90:0a:1b:70:54:d4:15:44:79:18:0b:d9:c8:
         00:2c:dd:eb:94:5c:15:b0:d4:67:87:fd:9f:fc:85:9c:05:3d:
         a1:ac:37:5c:a2:68:8e:f8:74:ca:29:94:97:de:34:ac:99:82:
         e2:87:4f:3a:90:53:52:38:f1:4c:68:57:e2:1d:27:95:54:9c:
         5b:5c:b3:50:57:cd:9a:4a:3b:62:7a:a9:9c:c1:d7:d0:03:f4:
         49:42:58:83:b1:67:53:72:f0:9b:a9:01:01:64:0d:f9:95:8b:
         84:2a:96:46:00:6a:33:96:ee:d7:12:55:0b:6f:67:60:c5:33:
         68:c9:f5:c8:dc:06:5c:b7:a6:f4:14:d2:ae:17:b9:f3:a0:20:
         56:60:3d:0b:17:9a:fa:6c:27:7a:0e:ac:07:1a:fc:25:62:e4:
         a2:78:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----