Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F240E58D90E047C34933B303E800B88C0E9E9273.cer
File:                     F240E58D90E047C34933B303E800B88C0E9E9273.cer (raw, json)
Hash identifier:          Vdw7AG2geoNECOl2Hl7HtTpmQ+Ij1Vjs0SnAeY/ZuiA=
Subject key identifier:   F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       145D0C371270ADD3A430FFD222E5B3B65A5C24E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/F240E58D90E047C34933B303E800B88C0E9E9273.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 20:55:22 +0000
Certificate not after:    Tue 08 Oct 2024 21:00:22 +0000
Subordinate resources:    AS: 266210
                          IP: 160.238.108.0/22
                          IP: 2804:3c6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5d:0c:37:12:70:ad:d3:a4:30:ff:d2:22:e5:b3:b6:5a:5c:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 20:55:22 2023 GMT
            Not After : Oct  8 21:00:22 2024 GMT
        Subject: CN=F240E58D90E047C34933B303E800B88C0E9E9273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:a4:a5:9e:cc:dc:55:15:a1:d3:52:9f:9b:
                    a5:13:50:1f:b4:33:19:28:ea:fd:b7:6f:dd:01:d4:
                    98:20:d7:de:81:8f:f4:c0:7a:32:94:ad:07:62:70:
                    78:cc:1f:0b:d6:b0:66:da:4a:96:c5:c3:e1:54:24:
                    53:04:ed:fd:ad:4a:6e:ae:93:5b:3a:ca:5d:44:89:
                    96:96:b2:07:93:3f:a7:26:27:64:29:f2:93:8a:b4:
                    a9:d8:22:fb:5c:3d:c6:88:63:4f:ae:1f:f3:06:d3:
                    70:be:ae:51:40:6c:5c:7d:06:6e:a0:b3:f9:3c:32:
                    66:1b:9d:ec:6d:05:5a:ae:8c:34:c8:62:ef:8d:b2:
                    53:6a:22:07:da:90:76:0a:06:b5:7c:ce:6a:df:71:
                    5a:6d:cd:a8:69:61:68:43:1d:93:04:2c:fe:1f:44:
                    a0:6f:e8:2a:bd:85:6e:e9:b7:33:10:ae:fc:09:7c:
                    e4:3c:e7:e2:f4:3e:ea:ee:c7:c7:76:ca:5e:c8:3d:
                    a0:37:b4:fe:4e:38:b4:5a:45:6d:eb:ad:91:ce:72:
                    6a:4f:d0:60:30:dc:f0:14:79:1d:e6:c8:33:0e:9d:
                    33:18:52:c1:99:41:fc:75:b1:58:bc:8c:85:df:2b:
                    aa:0a:ff:fe:51:9f:48:61:df:0c:b3:6a:a5:67:08:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/F240E58D90E047C34933B303E800B88C0E9E9273.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.108.0/22
                IPv6:
                  2804:3c6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266210

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:31:ff:37:42:91:ee:e9:0b:2c:71:a5:fb:e6:7d:0b:cb:
         7f:95:2b:e6:08:6b:6d:32:55:b6:14:a6:00:9e:31:e5:1e:84:
         bf:84:a7:51:8e:d0:90:23:cc:e7:08:b7:70:a0:ca:e5:ce:e2:
         0c:6d:49:ac:3d:a6:f0:ab:20:0f:84:5a:f1:83:b2:2b:a6:99:
         75:6e:49:e6:e3:5c:b6:dd:31:de:41:68:2e:d0:64:6d:0c:ee:
         f6:d5:7a:0a:a2:f8:f1:ea:e6:6b:dd:dd:9d:79:72:e6:a7:3e:
         21:1c:a5:5e:ce:fb:33:cf:4e:b1:3c:2c:53:e4:51:14:dc:90:
         a9:fb:0f:48:0a:ba:33:b9:ca:51:b3:84:cf:c6:1c:82:16:ca:
         15:f3:b1:01:33:4e:36:53:7e:74:12:b5:4a:f6:23:4f:f7:2e:
         af:d8:c3:81:a6:dc:53:6d:6c:8c:4c:0d:6c:85:42:c4:c2:aa:
         7f:50:97:df:f3:ae:93:34:2d:27:03:29:29:11:fe:cf:3d:c3:
         72:df:4b:15:fc:2f:ee:d0:19:a9:8b:e5:fb:d2:87:2e:60:e3:
         cf:80:4d:d8:e8:53:e0:8b:c1:e6:1d:9e:0a:06:44:2d:57:38:
         fd:0f:1a:53:72:eb:ab:79:79:af:03:89:5b:76:32:2d:40:9a:
         4b:54:e4:69
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFF0MNxJwrdOkMP/SIuWztlpcJOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTAyMDU1MjJaFw0yNDEwMDgyMTAwMjJaMDMxMTAvBgNV
BAMTKEYyNDBFNThEOTBFMDQ3QzM0OTMzQjMwM0U4MDBCODhDMEU5RTkyNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mKSlnszcVRWh01Kfm6UTUB+0
Mxko6v23b90B1Jgg196Bj/TAejKUrQdicHjMHwvWsGbaSpbFw+FUJFME7f2tSm6u
k1s6yl1EiZaWsgeTP6cmJ2Qp8pOKtKnYIvtcPcaIY0+uH/MG03C+rlFAbFx9Bm6g
s/k8MmYbnextBVqujDTIYu+NslNqIgfakHYKBrV8zmrfcVptzahpYWhDHZMELP4f
RKBv6Cq9hW7ptzMQrvwJfOQ85+L0Purux8d2yl7IPaA3tP5OOLRaRW3rrZHOcmpP
0GAw3PAUeR3myDMOnTMYUsGZQfx1sVi8jIXfK6oK//5Rn0hh3wyzaqVnCLZ1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyQOWNkOBHw0kz
swPoALiMDp6SczAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80cUFuYVhCd2tZeExodVJMUTg4c2VreGp1RkgybndtVndw
ZTN1WmRBRGoxeS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80cUFuYVhCd2tZeExodVJMUTg4c2VreGp1RkgybndtVndw
ZTN1WmRBRGoxeS8wL0YyNDBFNThEOTBFMDQ3QzM0OTMzQjMwM0U4MDBCODhDMEU5
RTkyNzMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDubDANBAIAAjAHAwUA
KAQ8bDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMED+IwDQYJKoZIhvcNAQELBQAD
ggEBAJVeMf83QpHu6QsscaX75n0Ly3+VK+YIa20yVbYUpgCeMeUehL+Ep1GO0JAj
zOcIt3CgyuXO4gxtSaw9pvCrIA+EWvGDsiummXVuSebjXLbdMd5BaC7QZG0M7vbV
egqi+PHq5mvd3Z15cuanPiEcpV7O+zPPTrE8LFPkURTckKn7D0gKujO5ylGzhM/G
HIIWyhXzsQEzTjZTfnQStUr2I0/3Lq/Yw4Gm3FNtbIxMDWyFQsTCqn9Ql9/zrpM0
LScDKSkR/s89w3LfSxX8L+7QGamL5fvShy5g48+ATdjoU+CLweYdngoGRC1XOP0P
GlNy66t5ea8DiVt2Mi1AmktU5Gk=
-----END CERTIFICATE-----