Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.cer
File:                     0AC039FE3EFA5C55EA405C3032F87347095F5ED8.cer (raw, json)
Hash identifier:          0iqBDqdavY2KZC4EIi2gsIbSIa6YrKu+w+hJqxyUleI=
Subject key identifier:   0A:C0:39:FE:3E:FA:5C:55:EA:40:5C:30:32:F8:73:47:09:5F:5E:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6467298A57FDD7BEBD7D303C698B7415B5884AF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Mar 2024 00:58:34 +0000
Certificate not after:    Fri 21 Mar 2025 01:03:34 +0000
Subordinate resources:    AS: 263004
                          IP: 143.208.228.0/22
                          IP: 186.237.16.0/21
                          IP: 2804:2be4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:67:29:8a:57:fd:d7:be:bd:7d:30:3c:69:8b:74:15:b5:88:4a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 00:58:34 2024 GMT
            Not After : Mar 21 01:03:34 2025 GMT
        Subject: CN=0AC039FE3EFA5C55EA405C3032F87347095F5ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:78:15:7c:2b:fa:0e:5b:41:44:cd:1c:cb:
                    15:08:d9:75:b6:4e:3c:08:ec:6d:b2:10:2d:54:a5:
                    bd:72:ca:0e:32:06:03:94:62:f5:00:86:32:8a:6c:
                    31:75:04:fb:99:ed:55:5c:b7:3e:74:d1:60:74:fc:
                    6e:08:95:37:b2:cf:79:49:ae:11:65:5d:55:55:30:
                    de:c3:e0:3e:65:62:b5:b7:7b:4f:1b:31:95:70:bb:
                    69:7c:f8:16:30:07:2b:48:40:f6:5f:24:3e:bf:d1:
                    f4:11:07:8d:56:bb:40:4d:0d:fb:12:e5:67:51:05:
                    8b:7d:c0:51:1c:af:54:3c:7e:97:2f:91:fb:3e:91:
                    1e:54:13:e1:53:53:50:72:b1:85:25:56:c0:71:7a:
                    12:e2:d0:c4:52:21:03:21:82:36:be:31:fc:19:ea:
                    ca:ae:5e:9a:d7:a2:dc:a1:aa:9c:f6:3a:b6:26:f3:
                    1a:de:25:05:ae:67:d6:9a:f9:75:d5:19:32:72:27:
                    40:a8:e0:7f:5e:79:30:97:8f:10:09:9d:e0:3e:73:
                    ae:90:88:93:64:a5:52:a4:70:d1:0e:32:4d:d1:82:
                    b2:76:6b:5c:03:af:41:31:b3:2d:27:39:ce:33:bc:
                    62:ae:b7:d3:06:5e:2b:5b:b0:32:0d:9d:61:27:b7:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:C0:39:FE:3E:FA:5C:55:EA:40:5C:30:32:F8:73:47:09:5F:5E:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/0/0AC039FE3EFA5C55EA405C3032F87347095F5ED8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.228.0/22
                  186.237.16.0/21
                IPv6:
                  2804:2be4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263004

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:a0:1c:4f:87:29:0a:18:b9:88:24:20:d1:87:b2:d7:3c:
         68:5a:4e:16:87:5a:2e:4f:ff:d1:02:5f:9b:b8:1d:56:4b:2b:
         44:32:9e:eb:bb:f0:4a:1e:37:11:c5:b8:03:80:d6:27:cb:fe:
         b1:0c:22:dc:6d:52:9d:fc:73:3a:9d:d2:64:22:15:be:f3:36:
         51:0d:5f:45:18:6f:2d:54:4a:8d:d5:82:9c:c7:c7:83:c3:5b:
         6d:ef:73:5a:e5:64:d0:d7:b6:68:43:f1:43:3e:6e:d5:94:e6:
         eb:e9:f7:2f:3c:df:ec:89:b5:ed:76:a5:88:55:3b:8a:af:8c:
         94:6a:55:d3:f8:04:90:92:e7:b5:c9:e6:c1:27:9f:5c:ed:23:
         84:b2:29:97:84:bf:f3:38:f2:3c:8c:c8:6a:6c:bf:99:0c:99:
         56:73:4f:98:69:b7:fa:42:91:67:34:72:36:da:99:59:fe:df:
         15:43:1a:23:0d:d8:51:bd:46:e0:cc:5f:29:d5:e2:18:88:0e:
         e7:cf:a0:e9:22:ae:f2:00:bb:c4:af:40:cc:b9:17:0c:0a:66:
         e1:ae:5d:e1:9c:f0:d9:fc:5a:2d:4a:3c:6d:02:28:10:87:95:
         24:1c:5b:54:33:c7:18:6f:6b:7d:4a:e7:74:14:14:ab:e8:82:
         6d:6e:7a:d2
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUZGcpilf91769fTA8aYt0FbWISvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjIwMDU4MzRaFw0yNTAzMjEwMTAzMzRaMDMxMTAvBgNV
BAMTKDBBQzAzOUZFM0VGQTVDNTVFQTQwNUMzMDMyRjg3MzQ3MDk1RjVFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzXgVfCv6DltBRM0cyxUI2XW2
TjwI7G2yEC1Upb1yyg4yBgOUYvUAhjKKbDF1BPuZ7VVctz500WB0/G4IlTeyz3lJ
rhFlXVVVMN7D4D5lYrW3e08bMZVwu2l8+BYwBytIQPZfJD6/0fQRB41Wu0BNDfsS
5WdRBYt9wFEcr1Q8fpcvkfs+kR5UE+FTU1BysYUlVsBxehLi0MRSIQMhgja+MfwZ
6squXprXotyhqpz2OrYm8xreJQWuZ9aa+XXVGTJyJ0Co4H9eeTCXjxAJneA+c66Q
iJNkpVKkcNEOMk3RgrJ2a1wDr0Exsy0nOc4zvGKut9MGXitbsDINnWEnt+Y3AgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKwDn+PvpcVepA
XDAy+HNHCV9e2DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85RzZod25YY3hvR1ZqTjFZa2ZVV3JiM1V5aEtBcHRHTDlw
WWozd0I5ajlDdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5
cFlqM3dCOWo5Q3QvMC8wQUMwMzlGRTNFRkE1QzU1RUE0MDVDMzAzMkY4NzM0NzA5
NUY1RUQ4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKP0OQDBAO67RAwDQQC
AAIwBwMFACgEK+QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBANcMA0GCSqGSIb3
DQEBCwUAA4IBAQAlxqAcT4cpChi5iCQg0Yey1zxoWk4Wh1ouT//RAl+buB1WSytE
Mp7ru/BKHjcRxbgDgNYny/6xDCLcbVKd/HM6ndJkIhW+8zZRDV9FGG8tVEqN1YKc
x8eDw1tt73Na5WTQ17ZoQ/FDPm7VlObr6fcvPN/sibXtdqWIVTuKr4yUalXT+ASQ
kue1yebBJ59c7SOEsimXhL/zOPI8jMhqbL+ZDJlWc0+Yabf6QpFnNHI22plZ/t8V
QxojDdhRvUbgzF8p1eIYiA7nz6DpIq7yALvEr0DMuRcMCmbhrl3hnPDZ/FotSjxt
AigQh5UkHFtUM8cYb2t9Sud0FBSr6IJtbnrS
-----END CERTIFICATE-----