Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.cer
File:                     F7A99C21917C598605586A0D8C97EF57F47B58D2.cer (raw, json)
Hash identifier:          2ZcJ56zlwLilFvB/81guLzn9ylmTa1/or+kFXwtZJWg=
Subject key identifier:   F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7222AFE1F1B3B7B75375188D52CB23FC0BFAFCFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 21:05:16 +0000
Certificate not after:    Tue 08 Oct 2024 21:10:16 +0000
Subordinate resources:    AS: 270586
                          IP: 177.152.100.0/22
                          IP: 2804:6e48::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:af:e1:f1:b3:b7:b7:53:75:18:8d:52:cb:23:fc:0b:fa:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 21:05:16 2023 GMT
            Not After : Oct  8 21:10:16 2024 GMT
        Subject: CN=F7A99C21917C598605586A0D8C97EF57F47B58D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:f4:c2:9f:29:02:95:72:86:9e:ed:8b:16:
                    5a:f6:fd:a6:01:01:fb:50:ed:69:0e:09:09:0f:9f:
                    29:24:ca:dd:9a:bd:e4:22:17:c7:c3:3b:ee:81:65:
                    98:8f:36:5b:0d:dc:d0:84:f1:4f:76:4b:a3:0d:23:
                    8b:0f:43:1a:55:6a:90:f2:ce:c2:17:82:db:f4:60:
                    6b:0f:f0:69:62:b2:67:7c:a7:f1:a8:a8:3f:3a:61:
                    be:0f:7f:9e:f9:7c:50:a0:fa:ee:06:c5:c3:f6:dc:
                    d3:bd:63:ec:3d:0a:e2:af:c2:09:77:05:0f:30:83:
                    c4:95:9a:45:2c:bf:d9:fb:58:28:69:27:55:85:cf:
                    d0:e4:86:4a:b1:45:90:c8:1e:fe:43:be:0c:cc:92:
                    2c:fa:7f:cf:bb:9c:55:76:ac:94:a0:5c:0d:db:ac:
                    79:81:61:17:e1:3a:32:44:21:37:04:0a:aa:58:cf:
                    60:ad:49:1d:5f:1d:ed:2e:3a:ee:b6:3f:64:15:6e:
                    f7:1f:ec:97:1f:d4:af:03:8e:25:06:2f:c1:81:47:
                    f0:63:72:d9:6d:5d:98:d3:2e:4c:e4:61:e6:82:65:
                    be:6e:61:c8:db:93:70:43:8d:ab:ad:25:00:db:fa:
                    a7:19:7d:52:ce:62:d1:10:30:37:dd:39:f9:19:ce:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.100.0/22
                IPv6:
                  2804:6e48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270586

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:61:c9:43:b4:3a:70:15:8a:8c:03:4f:c6:1b:03:f8:f9:
         f7:19:a7:cf:64:09:bc:57:31:d1:b2:40:45:a1:8b:e1:07:6e:
         4d:f7:75:0d:9c:51:ed:24:67:cb:d9:f5:4c:bd:f6:97:dd:18:
         d5:9c:b6:f9:47:e8:d3:77:9d:c2:42:e2:62:09:09:3c:df:2f:
         89:5f:e8:ab:e4:e6:bb:ad:a0:9f:4f:c8:29:b6:df:d7:3b:59:
         f2:51:1f:09:97:51:21:73:2e:54:30:3b:82:5c:c1:5f:32:40:
         f7:0f:bf:dd:9d:da:ea:e3:c9:a8:bf:62:31:32:9a:c1:6b:71:
         fb:f8:28:c4:5e:f5:c3:e9:54:f2:84:83:3d:0f:87:ea:49:a5:
         78:e0:b4:d9:42:58:06:52:c1:7d:a4:1e:0c:97:04:fc:29:31:
         f0:b1:a4:b2:02:89:3e:e4:e4:10:16:fc:8a:c4:ca:cd:a1:39:
         db:8d:40:23:db:61:04:db:11:b3:97:27:54:69:d7:61:43:b1:
         1a:17:13:ca:4b:93:ec:d0:ec:a2:90:c2:2b:28:7e:55:c9:20:
         62:e8:4c:cc:7c:ff:9e:a7:70:84:b1:81:80:a8:8c:7e:a0:e2:
         d8:2f:37:2b:b0:6a:b8:33:05:eb:bf:57:a7:41:ea:3c:8a:24:
         1c:5a:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----