Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC7778CA6B8B49192185E8CAB2D3935C0A917BAA.cer
File:                     FC7778CA6B8B49192185E8CAB2D3935C0A917BAA.cer (raw, json)
Hash identifier:          n54TyOBCSaSwDtEJ7rICkS1bfGgDD7rxkDMVrA2Ejhg=
Subject key identifier:   FC:77:78:CA:6B:8B:49:19:21:85:E8:CA:B2:D3:93:5C:0A:91:7B:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       155D9DD3978F8087701E68EA81E321CDEA6F845E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/1/FC7778CA6B8B49192185E8CAB2D3935C0A917BAA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 13:26:22 +0000
Certificate not after:    Tue 22 Oct 2024 13:31:22 +0000
Subordinate resources:    AS: 271578
                          IP: 2804:7db8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5d:9d:d3:97:8f:80:87:70:1e:68:ea:81:e3:21:cd:ea:6f:84:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 13:26:22 2023 GMT
            Not After : Oct 22 13:31:22 2024 GMT
        Subject: CN=FC7778CA6B8B49192185E8CAB2D3935C0A917BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:67:69:d7:e9:fb:94:73:d2:74:64:34:e0:
                    50:1e:d2:62:59:ce:7c:b0:6c:65:4f:b3:bd:1a:76:
                    16:d6:11:10:07:d4:53:7e:3f:8e:b9:83:d9:3c:ae:
                    ba:b5:44:df:ad:ff:2c:33:de:21:c6:c0:28:f9:31:
                    48:95:64:f5:ad:95:f3:05:a8:e3:4b:df:60:0b:c5:
                    bc:f6:e4:e4:49:e3:7f:65:f8:88:6a:da:6c:1d:5b:
                    e8:8a:be:d5:0c:66:95:96:b8:13:d4:23:3a:7d:17:
                    7d:c3:2e:c5:68:b5:86:60:b4:b2:11:d7:0e:d9:a5:
                    c4:41:1f:4e:e7:ff:b2:aa:e5:2f:9c:62:db:e4:af:
                    d8:d9:9d:d4:28:84:bd:e6:fb:60:92:38:c1:e2:97:
                    d5:5a:01:a8:f6:3d:29:a1:4d:e9:8d:20:8c:4c:e8:
                    e7:97:fd:28:34:08:5e:a1:c2:12:59:d5:0e:fa:5a:
                    66:92:fd:eb:c4:98:53:4a:33:78:eb:58:6e:b4:89:
                    c3:96:e2:7c:3c:77:00:f5:5e:ea:ae:c2:31:67:5c:
                    22:2b:d2:55:6f:2b:08:0c:fe:07:42:44:77:8c:8d:
                    f3:04:b1:2c:a4:e3:1e:03:69:c6:c6:32:38:5b:02:
                    3a:0a:5f:32:89:00:fb:45:e9:dc:a8:ce:d8:45:f8:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:77:78:CA:6B:8B:49:19:21:85:E8:CA:B2:D3:93:5C:0A:91:7B:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHTEcZxWriVWwwXs86nmWKrUp6aNapzsBn4WatXUNxe9/1/FC7778CA6B8B49192185E8CAB2D3935C0A917BAA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271578

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:3f:98:29:97:9d:b6:13:68:cf:3a:e3:af:32:de:e0:f4:
         ed:b2:f5:04:fc:ba:47:74:7e:07:f1:e8:2b:74:ba:2f:4e:2b:
         94:65:e3:d7:8b:8c:ca:c5:01:2e:09:b4:36:8e:6b:91:d0:08:
         9b:81:40:40:76:8b:42:67:db:9c:61:a4:b6:40:d3:88:1f:5d:
         77:19:c8:ad:1e:04:3d:83:fd:4a:09:9e:b1:82:66:d0:d4:3a:
         a7:3f:b3:97:b6:36:70:99:21:f3:10:09:2f:f8:51:ae:ba:84:
         2f:71:1f:5c:78:5f:94:05:57:8c:38:0d:0c:90:30:a4:e9:4f:
         39:01:3d:d3:8e:a5:ef:ac:8c:5a:99:d1:db:f0:5a:52:f8:10:
         18:13:da:d0:80:64:25:70:1f:09:2a:5e:bb:20:ed:92:4c:dc:
         b1:38:52:65:e1:37:6d:25:88:b4:e9:bf:a1:f5:82:5d:29:78:
         b4:6b:ae:9b:b8:13:58:58:d0:ce:dd:17:2a:fd:d1:84:8b:64:
         75:e7:05:80:41:fe:ef:66:86:2f:1f:ee:54:fd:74:bb:6d:cd:
         b4:c1:c3:2d:e0:57:dc:26:90:92:d0:35:93:d0:1d:e2:0a:c4:
         20:2c:c4:e5:6f:79:38:bf:8a:73:a6:5b:65:45:47:f1:dc:27:
         42:53:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----