Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer
File:                     DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer (raw, json)
Hash identifier:          sV7tjH4l4sbp0fCgySKfoA2+U/SGRhmhnkjLIeF2R88=
Subject key identifier:   DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1275082FF97A28142FB14B151B4F95043B016D75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 12:52:17 +0000
Certificate not after:    Tue 12 Nov 2024 12:57:17 +0000
Subordinate resources:    AS: 262317
                          IP: 177.91.120.0/21
                          IP: 177.124.64.0/21
                          IP: 2804:bac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:08:2f:f9:7a:28:14:2f:b1:4b:15:1b:4f:95:04:3b:01:6d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 12:52:17 2023 GMT
            Not After : Nov 12 12:57:17 2024 GMT
        Subject: CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:55:e4:68:da:5d:0e:0b:96:31:59:ce:73:
                    12:0e:ec:bc:c6:44:10:0c:eb:00:4b:b2:d8:75:3a:
                    1a:d6:87:c4:4b:7e:16:ea:a8:65:81:db:dc:e3:aa:
                    76:1b:86:af:2f:94:a4:2b:b4:10:8e:c5:44:81:e9:
                    0d:9d:32:7d:62:5b:89:30:86:e2:1a:f5:94:6b:4a:
                    ee:00:2a:ba:db:61:78:01:06:a9:01:3d:9b:35:bc:
                    70:a0:fc:6b:a0:e9:7e:1d:aa:78:3f:2b:dc:34:2b:
                    45:ad:7c:f5:40:ee:9e:ff:b0:d5:3a:7b:95:a1:ee:
                    37:73:82:ea:b5:df:25:54:79:15:64:28:f2:c4:ba:
                    a9:58:33:c2:d6:de:d8:26:8d:bc:e4:e4:0a:ce:5e:
                    82:07:3e:33:82:09:72:f6:46:ce:e4:c3:a7:8a:dd:
                    8b:1f:fa:71:d1:b9:7a:6c:bc:b9:b8:44:b8:39:0a:
                    8c:39:d2:74:63:e1:ba:35:f4:d7:14:59:59:f8:b4:
                    f5:7e:1f:55:d1:23:f1:d1:ed:5e:bd:f0:bd:01:3b:
                    aa:d2:12:f9:be:da:fb:a3:e0:c4:18:b6:7a:93:3a:
                    54:1a:0d:e4:24:c5:0b:c1:9d:09:26:61:e7:24:56:
                    03:52:26:c0:de:90:cc:65:94:46:1f:25:1e:ba:93:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.120.0/21
                  177.124.64.0/21
                IPv6:
                  2804:bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262317

    Signature Algorithm: sha256WithRSAEncryption
         9f:6e:21:41:c8:1b:b9:9f:df:23:35:6c:c5:35:3e:d7:26:e2:
         b3:20:0f:06:99:15:71:0c:16:26:11:69:e2:f6:4f:72:94:4a:
         e6:3d:19:b0:b6:85:35:18:18:5a:c1:8f:9b:10:24:81:22:91:
         0f:66:6d:7a:f5:a6:02:d5:ae:a2:2e:82:66:61:3f:dd:55:e9:
         ca:61:4d:f0:e5:95:25:0e:f1:cc:cc:f9:84:3f:14:00:22:c7:
         ef:ea:9b:88:0f:2a:e0:15:13:5a:b1:d8:8f:85:fc:42:73:a8:
         16:49:12:3a:d3:f3:78:7b:d7:dd:0f:dc:e3:ce:37:45:7c:b0:
         3e:2c:e1:f5:97:0a:c2:50:64:4a:6c:2e:f6:10:dc:54:22:00:
         cb:5d:75:d2:65:4f:4a:4a:83:f6:3d:33:ee:26:22:b1:df:96:
         7c:4d:bd:3f:8d:b5:79:db:d0:fe:e5:ea:d7:61:b4:6f:c8:98:
         cf:35:92:f8:ee:a0:ea:98:07:c1:ca:90:e7:9e:b4:35:1c:b2:
         81:6c:f6:1e:e1:17:5c:0a:8c:b1:c0:aa:a5:e3:13:a4:12:de:
         91:34:9a:41:70:17:05:90:cb:d2:4f:17:23:9d:ef:59:2c:7f:
         b5:34:fa:36:c6:b7:fb:4e:e4:4d:e0:05:9e:04:66:b5:7d:99:
         b5:37:8f:38
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUEnUIL/l6KBQvsUsVG0+VBDsBbXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTQxMjUyMTdaFw0yNDExMTIxMjU3MTdaMDMxMTAvBgNV
BAMTKERFOEIxRjk4QkQ2Q0QzMzI2MjYwOEZGMzhDMjQzQ0Y3RUM3ODNCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYlXkaNpdDguWMVnOcxIO7LzG
RBAM6wBLsth1OhrWh8RLfhbqqGWB29zjqnYbhq8vlKQrtBCOxUSB6Q2dMn1iW4kw
huIa9ZRrSu4AKrrbYXgBBqkBPZs1vHCg/Gug6X4dqng/K9w0K0WtfPVA7p7/sNU6
e5Wh7jdzguq13yVUeRVkKPLEuqlYM8LW3tgmjbzk5ArOXoIHPjOCCXL2Rs7kw6eK
3Ysf+nHRuXpsvLm4RLg5Cow50nRj4bo19NcUWVn4tPV+H1XRI/HR7V698L0BO6rS
Evm+2vuj4MQYtnqTOlQaDeQkxQvBnQkmYeckVgNSJsDekMxllEYfJR66kzg5AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeix+YvWzTMmJg
j/OMJDz37Hg7djAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bnMzRVhYWXp6eG9nOXdDTU1yYUZzU3gyZUNlTUpyNVZN
YnJHVm5QeUxvQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNG5zM0VYWFl6enhvZzl3Q01NcmFGc1N4MmVDZU1KcjVW
TWJyR1ZuUHlMb0IvMC9ERThCMUY5OEJENkNEMzMyNjI2MDhGRjM4QzI0M0NGN0VD
NzgzQjc2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAOxW3gDBAOxfEAwDQQC
AAIwBwMFACgEC6wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBACtMA0GCSqGSIb3
DQEBCwUAA4IBAQCfbiFByBu5n98jNWzFNT7XJuKzIA8GmRVxDBYmEWni9k9ylErm
PRmwtoU1GBhawY+bECSBIpEPZm169aYC1a6iLoJmYT/dVenKYU3w5ZUlDvHMzPmE
PxQAIsfv6puIDyrgFRNasdiPhfxCc6gWSRI60/N4e9fdD9zjzjdFfLA+LOH1lwrC
UGRKbC72ENxUIgDLXXXSZU9KSoP2PTPuJiKx35Z8Tb0/jbV529D+5erXYbRvyJjP
NZL47qDqmAfBypDnnrQ1HLKBbPYe4RdcCoyxwKql4xOkEt6RNJpBcBcFkMvSTxcj
ne9ZLH+1NPo2xrf7TuRN4AWeBGa1fZm1N484
-----END CERTIFICATE-----