Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer
File:                     FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer (raw, json)
Hash identifier:          n8IQQgDCrpJrmG0EAhtcnmbEoznND8CKOOkL8lP3kLE=
Subject key identifier:   FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       607B457592CA25724E4FE851A20EEDD6652CB9E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 13:28:22 +0000
Certificate not after:    Wed 05 Mar 2025 13:33:22 +0000
Subordinate resources:    AS: 28262
                          IP: 2001:12c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7b:45:75:92:ca:25:72:4e:4f:e8:51:a2:0e:ed:d6:65:2c:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 13:28:22 2024 GMT
            Not After : Mar  5 13:33:22 2025 GMT
        Subject: CN=FE065568C2BF6018DC4CD6D9D669AB6DB63A901F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:91:94:3a:1b:28:d1:4c:0f:5c:ba:95:27:
                    9e:68:db:ea:2f:8f:da:1e:ed:c1:cc:3d:61:d7:f2:
                    25:a7:67:af:80:58:90:fc:6a:07:b4:16:d6:74:c3:
                    ef:46:76:0c:6f:8e:16:ce:e5:89:f5:78:0b:2e:7c:
                    84:40:98:46:84:4f:bb:19:6c:75:a4:ea:44:74:17:
                    fd:f7:56:34:cb:57:97:02:1b:4d:0f:9a:a6:a4:67:
                    55:f7:f4:41:9d:c2:81:37:e5:a8:ba:d3:52:d9:ee:
                    46:53:16:3e:25:a4:f9:c9:ed:13:da:7d:0a:ad:8d:
                    56:91:4a:b7:3e:dd:f7:39:88:6b:4f:ab:ad:49:ca:
                    2a:f3:f5:b2:6f:8f:ca:ef:c0:1b:2f:50:0d:db:2c:
                    57:34:68:a7:97:bf:d0:46:d9:42:52:9c:87:d6:e3:
                    d9:b1:3f:b5:6f:68:70:69:d5:e4:74:90:32:c7:7d:
                    36:ae:b3:c0:23:10:7a:87:ce:3a:3e:60:7e:fc:3e:
                    1a:48:17:6a:47:9d:cc:9e:11:06:05:5c:c4:b2:6c:
                    aa:04:e4:13:8a:eb:4d:f7:84:8b:4d:5f:14:1e:1a:
                    0b:bd:84:23:32:4b:71:9d:b8:cb:fc:7b:14:aa:0c:
                    39:82:c9:f0:78:0a:28:18:6a:dd:17:07:7f:a7:d6:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28262

    Signature Algorithm: sha256WithRSAEncryption
         52:10:16:8a:60:2b:8e:50:e5:32:a9:5c:f6:b7:06:f5:df:9a:
         4c:00:14:30:aa:8f:b0:09:be:a7:14:fe:16:a1:64:3c:18:d0:
         16:1f:0f:3c:be:21:01:10:bd:d8:cd:cb:f7:29:61:86:e2:74:
         17:c0:41:ed:e7:5a:9b:6a:da:fe:fe:40:9f:15:29:b0:19:93:
         32:1b:3c:04:2f:3a:cd:f5:9f:9e:6c:6d:f3:3d:15:f5:6a:d3:
         24:15:03:57:56:96:86:51:90:b2:96:d3:38:9f:70:50:3b:c2:
         d0:63:ae:d5:82:ed:2d:4e:44:55:cc:9f:ab:f3:04:63:11:0a:
         ee:67:c8:83:1f:c2:27:e8:d3:a4:52:2e:b1:d4:94:d8:9e:29:
         9b:f4:9f:ec:44:55:dd:8c:02:de:a1:4f:ab:d9:40:58:6e:46:
         b4:63:84:b5:13:17:6f:46:f0:d9:1a:46:1f:71:7f:80:4e:45:
         99:8d:41:a8:f0:2c:c2:e0:ae:2f:ca:99:de:d7:33:bf:58:d6:
         b8:f1:18:3c:82:c1:0f:f6:c4:a2:34:c4:87:1c:ab:34:4d:b8:
         53:2e:6a:40:ab:ef:62:79:5d:a0:ee:c9:f0:14:84:87:66:7d:
         40:9e:8e:89:66:ec:29:ce:8b:c8:2c:9b:73:3c:58:7b:bf:e3:
         5a:ad:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----