Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer
File:                     F7F6A71E49F1F3B065858A411F3D9669A240EA4E.cer (raw, json)
Hash identifier:          6d7wpz2d8nw1tNRU6VI9fPTv2SMbTchfdKAeNKOMYM0=
Subject key identifier:   F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FCCF0E8987BC985E463D0D156CF5DB39BC74399
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 14:53:35 +0000
Certificate not after:    Mon 17 Mar 2025 14:58:35 +0000
Subordinate resources:    AS: 272470
                          IP: 2804:81b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cc:f0:e8:98:7b:c9:85:e4:63:d0:d1:56:cf:5d:b3:9b:c7:43:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 14:53:35 2024 GMT
            Not After : Mar 17 14:58:35 2025 GMT
        Subject: CN=F7F6A71E49F1F3B065858A411F3D9669A240EA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:c6:40:3b:f5:aa:04:86:d9:bb:89:ea:a2:
                    65:7b:2a:4f:34:8d:bb:02:bb:d7:e2:86:fc:46:d2:
                    1f:ce:79:28:0a:b0:a0:97:3c:d5:9c:71:80:69:0c:
                    61:a1:2c:81:32:00:6e:0f:c0:ed:5e:71:e0:e2:9a:
                    46:7d:67:df:c9:88:92:33:30:bb:d3:e7:77:57:72:
                    ca:ae:04:c6:72:1f:41:10:6b:3a:89:6d:ff:e7:41:
                    a1:f3:9e:dd:e1:8e:4e:87:73:ef:2b:df:2b:59:9b:
                    4b:10:d9:5a:72:82:7d:b9:01:f4:35:d7:6a:86:f6:
                    73:3a:c2:38:78:8f:10:b4:e7:1b:43:9b:b8:4c:5d:
                    30:3d:a1:9e:b9:53:22:05:12:52:fc:9e:2f:53:4f:
                    23:45:4c:37:de:2b:c9:9b:49:dc:45:d5:55:5d:4a:
                    9c:e1:a5:68:c4:78:09:a7:18:b7:2e:63:ca:4a:6c:
                    b4:d6:02:a8:63:c4:69:0a:24:8e:04:14:29:4c:4a:
                    d0:6f:10:1f:4d:21:68:a9:59:66:5d:e1:42:96:1b:
                    56:72:a4:a5:19:c1:68:ff:7a:6b:ae:3a:9d:37:3a:
                    cc:89:0f:cc:03:34:c7:24:22:cb:53:bc:d8:23:22:
                    92:8c:ca:6c:0d:16:4e:dc:7a:f8:57:7f:f5:8d:06:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:F6:A7:1E:49:F1:F3:B0:65:85:8A:41:1F:3D:96:69:A2:40:EA:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aF5LAHs8m1EWpskffpHwniCY6dcPH9KKS6cYKcnTpHB/0/F7F6A71E49F1F3B065858A411F3D9669A240EA4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272470

    Signature Algorithm: sha256WithRSAEncryption
         ad:62:28:ef:79:9e:18:61:1f:88:28:98:91:ec:d4:36:80:78:
         5b:e3:59:02:9c:ef:18:ff:d8:7b:ba:7f:99:e7:31:7d:ae:22:
         aa:0c:be:e4:12:f2:43:43:81:05:b6:48:21:bb:49:d0:dc:f2:
         57:90:b1:5b:03:96:79:88:d0:db:37:74:5c:ce:89:66:91:11:
         f2:81:0c:b8:5c:59:6a:36:f3:6b:4b:03:09:d8:5b:78:02:43:
         ad:20:07:6e:2d:2d:b5:4e:41:4b:b2:63:99:ad:b8:50:2b:0c:
         2c:81:d0:c1:6b:54:5f:99:f0:19:ca:9e:cf:bb:60:83:57:75:
         a6:90:9e:78:a2:5e:03:6d:22:c3:37:8f:2d:e2:f0:4e:ef:a6:
         51:b0:ad:18:7e:cb:13:cc:6b:23:cd:09:1a:8f:07:15:65:7d:
         64:9d:16:23:8b:5f:1a:43:f0:80:27:a0:77:35:fa:fb:01:aa:
         34:1a:24:4f:66:6a:07:45:15:38:09:ea:83:df:74:24:44:b8:
         1f:8f:a9:97:37:c2:65:58:a4:5a:92:0e:44:f6:1c:35:67:1c:
         e8:08:fb:1d:a6:93:d4:54:df:3e:8e:8c:01:f8:d3:6a:ab:e4:
         fd:4b:71:65:8c:90:9a:fd:b1:57:ab:65:7d:b4:90:4d:d2:a7:
         7f:dd:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----