Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
File:                     FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer (raw, json)
Hash identifier:          z7qIej+c3DgBHZq/u/FxemgYKshdo2KElJJ+E5DSBzY=
Subject key identifier:   FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BE5F1224BD7CBAD40BBF726127444E7E33D4EAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 10:43:15 +0000
Certificate not after:    Thu 12 Sep 2024 10:48:15 +0000
Subordinate resources:    AS: 28139
                          IP: 186.235.176.0/21
                          IP: 187.49.16.0/20
                          IP: 2804:994::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e5:f1:22:4b:d7:cb:ad:40:bb:f7:26:12:74:44:e7:e3:3d:4e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 10:43:15 2023 GMT
            Not After : Sep 12 10:48:15 2024 GMT
        Subject: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:1c:2a:54:d9:e4:d7:a0:ca:5b:d3:97:5c:
                    13:93:bd:5c:8b:7b:c8:b8:38:7b:f3:f7:4c:ee:1e:
                    a5:08:c4:05:d7:4a:7f:c9:7b:cb:f5:c4:54:46:09:
                    48:51:a8:b9:1d:01:32:57:0b:49:2e:57:c7:24:55:
                    87:56:93:62:27:e9:4b:d9:7e:01:1a:81:47:6f:31:
                    77:73:5b:29:27:ff:75:18:e7:d6:db:d3:87:89:b7:
                    4e:b5:17:73:88:bf:1e:28:8f:25:b8:05:93:fd:74:
                    7e:0c:bf:2c:ea:d2:ca:e9:ca:a4:6d:91:97:fe:65:
                    01:99:c3:c5:f8:06:32:23:6c:f0:9a:f9:37:4c:81:
                    21:11:54:e3:35:9f:63:d8:11:56:b7:ef:bb:b1:a8:
                    b4:35:cb:9a:d0:c6:73:9c:2b:60:b0:6f:33:b9:83:
                    09:10:aa:8c:08:de:28:75:2b:58:0d:51:26:63:0c:
                    bc:8a:fb:14:07:af:17:24:ff:d5:74:54:1f:42:0b:
                    4e:16:6a:0d:54:36:18:c8:55:dc:59:fb:44:fd:13:
                    26:9b:f5:69:32:f5:f3:a5:91:cb:a6:70:7f:68:5c:
                    8b:a4:cf:50:a9:03:08:b3:10:62:97:8e:41:56:a6:
                    73:70:d0:bf:f7:57:7a:12:17:5f:de:2e:f0:21:38:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21
                  187.49.16.0/20
                IPv6:
                  2804:994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28139

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:fe:3b:36:c9:9f:33:12:27:8a:57:65:42:f8:22:69:b2:
         d4:ec:09:a7:f8:6c:61:a8:6a:52:3a:87:20:de:ae:9e:73:97:
         2e:73:ae:0c:a4:1f:09:35:4c:54:dd:79:df:57:df:e9:79:ad:
         9f:4b:11:af:9c:90:ae:2e:88:3e:21:9d:03:34:fa:7e:03:00:
         93:b5:8f:65:aa:36:23:da:12:f7:ed:2a:f3:4a:ed:73:92:13:
         d9:ad:7f:99:be:b8:b7:82:a8:34:f2:c0:51:59:21:9e:73:82:
         96:99:c4:0f:5b:08:0c:02:66:28:5b:b4:9b:1a:38:ba:62:e1:
         ed:75:a8:0b:c1:99:fa:48:44:bb:f3:32:95:c9:fb:bb:8d:26:
         b1:4b:81:e7:81:e0:1b:88:df:88:9f:d7:22:ca:eb:87:63:cf:
         dc:ef:ec:1a:d1:4b:5f:0e:21:3f:4f:6f:aa:58:c2:32:b5:94:
         10:6e:0b:8f:d6:16:0d:ca:2d:17:09:0d:f7:48:08:b5:9f:2e:
         50:7a:c4:11:c2:f8:72:dd:ad:d0:ee:9a:26:32:d5:94:ac:05:
         6e:91:e4:3c:4c:67:96:9a:2f:34:1c:5c:36:86:b4:78:6f:b4:
         5d:1a:65:5f:49:cb:3e:2f:cc:7a:69:1c:66:6d:11:0c:f6:90:
         e6:9a:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----