Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
File:                     FCD7E8134A54BC69039878FDD2365C466F86B95F.cer (raw, json)
Hash identifier:          yYDtOcNZQX8rLxp1l3+PbicSbtSm1oPx4DsnR3d3Vnk=
Subject key identifier:   FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EE53680FC986E2A55D582B1C8047610BF16D4CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 16:46:34 +0000
Certificate not after:    Tue 04 Mar 2025 16:51:34 +0000
Subordinate resources:    AS: 264392
                          IP: 131.161.188.0/22
                          IP: 2804:1dc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e5:36:80:fc:98:6e:2a:55:d5:82:b1:c8:04:76:10:bf:16:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 16:46:34 2024 GMT
            Not After : Mar  4 16:51:34 2025 GMT
        Subject: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:75:9f:4f:aa:0a:0d:e3:f1:07:8e:be:cc:
                    27:6e:d9:df:05:66:fa:fb:8c:c4:08:cc:dd:ff:ec:
                    fe:da:45:3e:b7:23:a9:e6:7a:6b:41:d1:d7:c7:5c:
                    78:ce:53:b8:d3:37:de:cb:14:fe:9f:59:bf:2d:72:
                    82:fc:18:8b:37:25:ae:25:e2:2f:97:86:1e:9e:95:
                    99:73:6a:9a:4f:a6:33:6a:3a:75:93:71:5a:0c:75:
                    21:dd:63:65:58:19:c8:67:cf:00:58:af:4c:ef:c8:
                    d2:48:08:02:f3:31:b3:82:34:f1:eb:d8:06:bc:83:
                    51:a4:bd:8b:e8:4c:aa:92:b0:3d:cd:55:76:c9:95:
                    c3:be:57:fa:4c:08:5d:b7:b0:ab:5d:1b:f0:41:df:
                    b1:5e:6a:69:7d:9a:ab:6f:73:15:ce:96:65:1c:df:
                    8c:8f:9b:fd:25:0d:2e:7c:40:3e:aa:4c:69:ea:5e:
                    4f:cf:5d:ee:4d:70:97:35:65:f7:72:41:a0:41:4e:
                    6f:46:7c:1d:f2:87:fa:c2:05:de:ce:ec:51:c4:00:
                    b6:45:6e:d9:65:e9:2d:31:f0:a5:3b:0a:5c:e5:1b:
                    16:20:74:b2:94:72:d5:48:2c:62:fc:f4:b3:52:23:
                    c8:20:43:6a:44:6d:9d:2e:3d:69:ae:dc:56:05:94:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/22
                IPv6:
                  2804:1dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264392

    Signature Algorithm: sha256WithRSAEncryption
         6f:e9:29:b4:99:56:d3:44:df:46:02:1c:38:1b:00:eb:8c:9b:
         fb:6c:89:ab:1a:c8:47:b6:c7:6f:2c:4d:1d:93:8f:4a:ed:69:
         52:ac:99:99:12:6e:9a:5d:74:a3:67:ed:df:da:25:3e:35:e8:
         74:1e:67:01:7b:bd:c8:0e:7f:7f:79:45:28:c7:a5:2a:bc:53:
         29:9c:36:40:fb:66:0e:a4:33:e1:56:e2:dc:27:26:e4:7a:31:
         bc:f6:8e:ea:65:24:0f:e7:9a:9f:83:bb:43:e2:d4:2d:ed:aa:
         8e:51:42:63:60:38:4b:fd:a2:96:ca:70:74:7a:23:38:bf:a5:
         b0:f0:50:48:f0:3c:7b:5d:1e:33:6c:55:51:8b:08:2c:d6:22:
         8d:cf:af:85:fa:52:cb:96:30:0c:b2:ad:a2:57:06:ad:0f:db:
         ad:4f:c7:46:43:f2:7a:a5:7f:d2:22:60:76:14:d8:7d:ba:e6:
         4d:6c:9e:82:10:37:2a:9a:c7:cc:8d:8f:11:c5:62:95:c3:7c:
         db:e3:4b:7e:05:19:31:5c:41:d5:b2:31:ce:b5:54:ae:f2:10:
         06:5a:c9:e0:7c:c1:8a:e9:dc:a2:74:5d:a6:67:af:59:64:05:
         83:cd:88:ea:ae:00:a1:19:39:28:37:d0:5d:69:7e:ca:54:c8:
         b8:39:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----