Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer
File:                     FC43B2BCCAC255474D6E14420AD8458F1319AC96.cer (raw, json)
Hash identifier:          Us2bBHMSDc1JbhlzG5XyKOAXc+BayPr3Gs9+PNRsCT8=
Subject key identifier:   FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F8B9166FE47F0509C62A6BEAAE3F47E342E0404
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 15:55:17 +0000
Certificate not after:    Mon 14 Oct 2024 16:00:17 +0000
Subordinate resources:    AS: 264342
                          IP: 138.185.156.0/22
                          IP: 170.245.136.0/22
                          IP: 2804:2678::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8b:91:66:fe:47:f0:50:9c:62:a6:be:aa:e3:f4:7e:34:2e:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 15:55:17 2023 GMT
            Not After : Oct 14 16:00:17 2024 GMT
        Subject: CN=FC43B2BCCAC255474D6E14420AD8458F1319AC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:73:4f:9f:a4:ec:8d:c1:66:a5:fb:69:bb:
                    0d:6b:e7:da:0a:4b:6d:10:c7:a0:de:97:6e:95:63:
                    90:4d:b4:89:9a:c9:11:0b:cb:d4:94:af:50:87:25:
                    51:db:68:fe:1d:c1:f7:14:bd:89:9b:38:fd:b7:1a:
                    8c:a3:78:8c:83:3e:a8:3e:70:f2:14:5f:65:9b:31:
                    c0:d9:67:48:24:3d:15:cf:66:22:f0:bb:68:f9:34:
                    f1:66:8f:82:51:ec:e9:18:3e:5e:22:0e:1c:26:df:
                    49:9e:85:b9:63:c2:a5:d8:36:21:44:93:7c:31:80:
                    92:42:62:c3:e0:f5:b5:b2:ae:6e:52:1d:15:17:77:
                    35:c7:20:4e:34:c0:f9:89:16:81:70:97:1f:71:18:
                    68:78:8b:69:3d:61:ae:18:58:a8:c5:5c:84:5b:56:
                    c5:14:8f:db:5b:e6:3c:83:dd:f9:fb:9c:96:fe:c2:
                    4d:6c:96:28:33:54:3b:cf:88:17:06:57:55:fe:42:
                    29:d7:f6:82:92:af:b1:12:9a:29:9e:e5:45:8b:90:
                    50:3e:a1:27:6c:9b:85:d4:d4:23:5f:5f:41:d3:55:
                    db:58:ff:9d:4a:57:71:90:33:7b:7e:2c:72:1f:0f:
                    3c:5e:81:63:69:ae:72:78:64:64:a6:bf:ed:df:d4:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:43:B2:BC:CA:C2:55:47:4D:6E:14:42:0A:D8:45:8F:13:19:AC:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/0/FC43B2BCCAC255474D6E14420AD8458F1319AC96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.156.0/22
                  170.245.136.0/22
                IPv6:
                  2804:2678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264342

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:c0:a1:e3:37:ee:47:e4:0e:06:6c:e5:a6:8a:fa:62:5e:
         fa:00:f2:8d:70:00:5e:c7:35:0d:b3:4c:a7:92:a3:a1:46:9a:
         dd:08:23:12:e0:0a:eb:0d:41:5b:c2:c3:f5:cd:c1:01:0d:c1:
         be:e7:50:26:05:87:eb:7a:9d:db:a3:75:00:0c:79:11:4a:22:
         5f:18:46:a9:d0:b5:86:fe:88:df:94:75:9b:18:7b:82:1d:21:
         8a:13:1a:63:68:cb:c3:c2:2e:25:20:96:60:bd:31:f8:6d:9e:
         24:96:f9:da:6d:ec:96:0a:ba:e5:45:64:d2:61:71:7a:9e:9b:
         41:55:d3:2c:e3:4c:b8:44:2f:d4:6b:e3:d8:71:1d:ed:19:78:
         e3:31:b5:3a:ea:0e:a5:45:d1:83:9c:33:76:d7:27:97:21:93:
         61:d3:1a:20:cb:ad:b4:d0:3b:1a:af:eb:03:34:ae:2e:51:d8:
         df:f7:4e:35:3b:2d:bb:4c:f2:70:cc:84:c6:de:32:c6:0d:42:
         0b:43:d9:10:48:45:8d:ee:52:49:eb:98:df:5c:67:aa:14:6b:
         f8:bb:77:39:15:d7:f2:96:82:e5:f5:54:22:20:2a:c9:e1:a8:
         41:26:8f:af:9b:54:f2:85:68:5a:51:dc:06:49:07:00:0a:d2:
         c4:2f:67:17
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUT4uRZv5H8FCcYqa+quP0fjQuBAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTYxNTU1MTdaFw0yNDEwMTQxNjAwMTdaMDMxMTAvBgNV
BAMTKEZDNDNCMkJDQ0FDMjU1NDc0RDZFMTQ0MjBBRDg0NThGMTMxOUFDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n3NPn6TsjcFmpftpuw1r59oK
S20Qx6Del26VY5BNtImayRELy9SUr1CHJVHbaP4dwfcUvYmbOP23GoyjeIyDPqg+
cPIUX2WbMcDZZ0gkPRXPZiLwu2j5NPFmj4JR7OkYPl4iDhwm30mehbljwqXYNiFE
k3wxgJJCYsPg9bWyrm5SHRUXdzXHIE40wPmJFoFwlx9xGGh4i2k9Ya4YWKjFXIRb
VsUUj9tb5jyD3fn7nJb+wk1sligzVDvPiBcGV1X+QinX9oKSr7ESmime5UWLkFA+
oSdsm4XU1CNfX0HTVdtY/51KV3GQM3t+LHIfDzxegWNprnJ4ZGSmv+3f1CqFAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8Q7K8ysJVR01u
FEIK2EWPExmsljAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BdHlGczlrRzdaanRiS2RVeldVbXVzU0ZuZzl5VEgxRndD
S2ZLazVtV1hMYy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BdHlGczlrRzdaanRiS2RVeldVbXVzU0ZuZzl5VEgxRndD
S2ZLazVtV1hMYy8wL0ZDNDNCMkJDQ0FDMjU1NDc0RDZFMTQ0MjBBRDg0NThGMTMx
OUFDOTYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoq5nAMEAqr1iDANBAIA
AjAHAwUAKAQmeDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECJYwDQYJKoZIhvcN
AQELBQADggEBAE58wKHjN+5H5A4GbOWmivpiXvoA8o1wAF7HNQ2zTKeSo6FGmt0I
IxLgCusNQVvCw/XNwQENwb7nUCYFh+t6ndujdQAMeRFKIl8YRqnQtYb+iN+UdZsY
e4IdIYoTGmNoy8PCLiUglmC9MfhtniSW+dpt7JYKuuVFZNJhcXqem0FV0yzjTLhE
L9Rr49hxHe0ZeOMxtTrqDqVF0YOcM3bXJ5chk2HTGiDLrbTQOxqv6wM0ri5R2N/3
TjU7LbtM8nDMhMbeMsYNQgtD2RBIRY3uUknrmN9cZ6oUa/i7dzkV1/KWguX1VCIg
KsnhqEEmj6+bVPKFaFpR3AZJBwAK0sQvZxc=
-----END CERTIFICATE-----