Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.cer
File:                     9F6A40DC353716AE0302F76B938D0911F63E3B06.cer (raw, json)
Hash identifier:          8Gd0NoQaAfhy1RbNibx+9RUIYIGm8IKmx/Rbgi3GZzM=
Subject key identifier:   9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B64DEC5977064CB54B5DACEE33A168F88E39F2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:49 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:49 +0000
Subordinate resources:    AS: 271305
                          IP: 177.124.80.0/22
                          IP: 2804:7970::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:64:de:c5:97:70:64:cb:54:b5:da:ce:e3:3a:16:8f:88:e3:9f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:49 2024 GMT
            Not After : Jan 15 18:54:49 2025 GMT
        Subject: CN=9F6A40DC353716AE0302F76B938D0911F63E3B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:28:df:a5:ed:74:1a:d5:8c:39:b5:ca:16:
                    6f:9d:5e:63:2a:b0:4b:38:1c:f6:28:6f:b6:67:5f:
                    4d:11:51:00:61:cc:c2:bf:87:53:17:15:3b:73:44:
                    24:66:db:60:b5:40:50:00:f5:30:bc:b0:2d:de:5a:
                    71:fb:bb:69:2b:26:5a:00:4d:a3:e2:95:bf:ef:c1:
                    28:5a:10:af:2b:44:01:a0:9f:ca:69:4c:11:10:63:
                    0d:37:71:77:19:98:34:e4:fb:6f:ac:66:c8:e3:97:
                    c3:9d:15:2a:bf:33:62:12:4e:a9:58:0c:b3:90:6c:
                    8f:07:fa:e4:a3:02:c2:fd:44:bb:af:ee:b3:0a:b5:
                    1a:2f:4f:69:99:bb:96:59:4c:2e:8d:94:44:48:ee:
                    8b:ad:d4:99:1c:09:d4:43:eb:52:b9:80:b5:8a:5c:
                    86:6f:dc:d1:8f:9f:a3:98:49:58:03:7f:79:ba:79:
                    d2:ad:94:b5:fd:53:2d:89:70:c7:cf:d7:7a:96:c3:
                    d4:27:c4:ab:44:3e:2a:a3:fa:55:fa:47:20:11:4b:
                    fd:78:82:0e:ee:11:2c:b2:c1:c7:1e:fc:c8:bc:22:
                    0c:51:a6:e1:dc:59:58:b4:5d:6d:3b:a0:20:91:60:
                    99:e9:39:a4:64:f0:dc:32:01:cd:35:8d:83:12:a2:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:6A:40:DC:35:37:16:AE:03:02:F7:6B:93:8D:09:11:F6:3E:3B:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5AytXKqz7C7BMo25kBqCzNiaoFGNJ8RaJnT3cpbead1w/0/9F6A40DC353716AE0302F76B938D0911F63E3B06.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.80.0/22
                IPv6:
                  2804:7970::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271305

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:3c:e6:b0:ee:19:69:02:0c:2b:e5:1b:d2:97:e9:34:21:
         99:e8:79:db:2f:d7:8f:1e:cf:05:62:2f:51:bc:02:f5:b2:c3:
         47:50:7e:88:58:46:95:fa:ff:e6:46:a0:f3:25:fb:37:9a:12:
         a2:f7:9e:70:0a:cf:66:49:e3:88:1e:a4:a4:e5:30:21:85:aa:
         8e:25:7e:38:0e:e0:90:99:dd:71:a9:98:3f:cd:6b:e2:30:88:
         67:9c:ac:3c:26:7f:f4:69:0d:cc:61:31:34:12:9e:c1:93:e4:
         fc:ce:ce:c9:30:48:41:b3:69:5f:05:53:87:32:01:2f:ee:8c:
         08:74:d2:04:e2:c3:63:4b:af:ca:0f:5e:5b:17:81:7d:b9:68:
         7b:e1:9c:e4:82:1f:63:3d:63:4c:0d:7c:ec:d0:4b:ad:80:b4:
         51:9f:3b:8e:f2:f5:29:d6:17:59:6a:b7:63:f3:60:b2:0a:23:
         a5:01:f3:ae:86:05:e2:0d:7a:ea:83:ba:b8:7f:06:0f:3f:8d:
         d4:c9:a5:01:08:33:97:ae:0d:e4:cd:1f:92:67:51:74:38:f5:
         c6:17:08:a9:ae:9e:96:e4:49:a4:93:da:71:c6:1c:97:85:80:
         2d:1e:38:31:7c:d4:ed:bf:16:c2:10:49:47:eb:34:63:d8:00:
         66:b9:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----