Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCCBD837036ADE7B38B10649839BD321150BFAE1.cer
File:                     FCCBD837036ADE7B38B10649839BD321150BFAE1.cer (raw, json)
Hash identifier:          EAcCqCcePsmFQ+r0QndpIjp+8qjx39AbT5zRchOCJE0=
Subject key identifier:   FC:CB:D8:37:03:6A:DE:7B:38:B1:06:49:83:9B:D3:21:15:0B:FA:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5297636AD6E82ECEADDB2DDD7F0F59561B65600C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/FCCBD837036ADE7B38B10649839BD321150BFAE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 13:44:43 +0000
Certificate not after:    Mon 24 Mar 2025 13:49:43 +0000
Subordinate resources:    AS: 269606
                          IP: 45.190.0.0/22
                          IP: 2804:6724::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:97:63:6a:d6:e8:2e:ce:ad:db:2d:dd:7f:0f:59:56:1b:65:60:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 13:44:43 2024 GMT
            Not After : Mar 24 13:49:43 2025 GMT
        Subject: CN=FCCBD837036ADE7B38B10649839BD321150BFAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:f5:75:1c:ae:6a:27:fe:9d:e9:89:9e:a1:
                    45:95:db:f3:56:40:4e:46:34:49:2d:c0:1a:70:57:
                    bb:c0:ad:08:d5:e3:56:24:7f:9a:4d:28:97:ba:27:
                    1f:01:a1:db:68:65:d1:7e:ac:96:18:18:30:89:41:
                    3f:89:54:b9:fb:52:10:34:19:21:17:2c:1f:f2:fa:
                    a0:ee:d9:4b:8c:24:2a:2f:c3:f3:dc:fe:63:50:ff:
                    98:6b:68:cf:c0:8a:e1:9c:00:06:3c:96:90:0b:69:
                    79:3b:cf:f6:dc:6b:38:6c:10:f0:00:d7:b4:da:d2:
                    c8:26:c7:b2:61:31:25:00:9f:a9:12:00:74:ad:bc:
                    52:bd:7a:b9:e9:3d:ea:43:68:8e:5b:fc:bd:0a:1d:
                    eb:cc:4d:5e:eb:0f:72:fd:f0:4a:cb:e1:37:35:63:
                    86:b6:bb:69:a6:38:71:72:92:e0:5a:fe:fb:81:ca:
                    64:21:26:dc:86:71:9c:4b:31:b3:26:e4:06:0e:c3:
                    f1:6a:c2:81:80:41:df:b3:a0:36:70:11:6b:3c:82:
                    b6:e7:ad:bf:08:23:9a:f8:62:83:0c:4b:e3:1a:36:
                    d3:d1:a9:3e:84:db:f6:68:0d:a1:3a:3f:03:ef:98:
                    86:66:56:3c:69:9c:91:95:b3:af:25:7e:d5:36:dd:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:CB:D8:37:03:6A:DE:7B:38:B1:06:49:83:9B:D3:21:15:0B:FA:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/FCCBD837036ADE7B38B10649839BD321150BFAE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22
                IPv6:
                  2804:6724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269606

    Signature Algorithm: sha256WithRSAEncryption
         86:33:47:7f:ac:ee:c1:53:5c:e6:9d:bb:9b:ce:f1:dd:e5:5b:
         54:79:71:80:6d:22:93:15:8b:ab:97:a0:b2:95:83:4a:93:1b:
         ad:02:f3:c5:d5:1e:a6:c5:47:37:a6:92:ae:af:1e:0e:a0:b1:
         96:7d:d2:26:91:66:92:78:0b:91:17:9a:2e:a1:4f:91:e7:fb:
         5d:a6:56:00:ae:ab:28:90:ca:b9:a6:47:45:09:77:d9:4f:e4:
         5b:ce:e6:79:ef:08:d9:db:8a:98:cb:1c:76:8c:f7:1b:9e:47:
         f0:e1:61:84:05:2e:9b:84:b6:b9:53:d3:5d:b0:91:b9:98:53:
         0c:5b:ec:7a:7a:83:ef:b6:ef:e1:95:5a:d2:5b:df:70:05:26:
         77:dc:98:fb:06:20:ab:db:81:18:a8:97:fb:7f:01:4e:38:a2:
         8c:29:1c:73:ef:a4:91:ca:ee:e9:5d:40:a4:b0:a6:15:c5:59:
         b5:ac:ca:42:30:ba:f6:bc:bb:2c:07:c2:54:ed:f7:e7:b0:7d:
         bc:bb:59:f6:70:9e:d8:17:b4:a4:c8:d2:b0:57:c5:d6:e2:e6:
         fc:86:ee:7b:89:ff:dc:23:91:50:5e:d2:e1:b3:6c:34:b8:99:
         57:cc:87:04:61:2d:19:22:0d:ad:ae:58:42:3b:56:78:ca:de:
         32:e1:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----