Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.cer
File:                     0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.cer (raw, json)
Hash identifier:          UCKv7KaiFFAJnVfMj8X0H+yaeEaszEb2OezlNx7MZCU=
Subject key identifier:   0C:A2:EA:A3:59:6B:92:4E:63:BD:BF:C0:99:7A:28:CA:F4:B2:6D:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13635D0E1AFF889BCB194310E063D3201BDB1F6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 11:39:34 +0000
Certificate not after:    Sat 29 Jun 2024 11:44:34 +0000
Subordinate resources:    AS: 263159
                          IP: 177.93.160.0/21
                          IP: 2804:179c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:5d:0e:1a:ff:88:9b:cb:19:43:10:e0:63:d3:20:1b:db:1f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 11:39:34 2023 GMT
            Not After : Jun 29 11:44:34 2024 GMT
        Subject: CN=0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:e4:2e:c7:c9:74:3b:46:71:83:53:2b:8b:
                    e0:0d:6a:8b:49:b3:7b:66:b6:cd:0c:8a:ff:d5:37:
                    19:62:79:78:e9:8f:7c:ec:e1:f2:52:15:67:81:4b:
                    c1:bc:e9:e5:6f:44:44:33:05:45:89:4f:80:d3:b7:
                    43:0e:d5:4d:b8:01:32:76:0b:38:c1:3e:c1:8f:bf:
                    f5:08:aa:16:17:72:4d:cf:1b:fd:78:99:68:f6:90:
                    8a:5a:b3:91:ed:8d:81:28:cc:50:63:8f:73:1c:fa:
                    f0:da:d5:f5:d9:12:c7:5f:2e:3b:b2:9d:4d:4d:fa:
                    29:8f:3a:72:a2:d5:b3:4e:bb:3e:99:78:e6:3c:4c:
                    8c:51:cf:aa:99:3f:b1:6a:cb:ed:da:9c:69:d3:3a:
                    11:7f:4e:99:0b:41:0a:6d:27:2b:29:a7:d9:a1:cd:
                    f6:46:aa:0a:37:03:c2:5f:20:72:99:91:78:85:0f:
                    65:22:4d:71:93:e2:94:94:76:0e:78:52:2e:c5:7a:
                    f2:13:0d:fe:4b:49:dc:0d:dc:5b:f5:90:7d:04:7a:
                    8a:51:d0:3f:d0:f6:f4:5e:b6:25:09:44:d7:c9:d3:
                    e7:b0:48:cc:b2:48:af:86:1a:e8:5d:73:62:d6:07:
                    18:ad:07:de:dc:0b:89:6e:01:de:d5:30:95:de:95:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:A2:EA:A3:59:6B:92:4E:63:BD:BF:C0:99:7A:28:CA:F4:B2:6D:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/0/0CA2EAA3596B924E63BDBFC0997A28CAF4B26D7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.160.0/21
                IPv6:
                  2804:179c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263159

    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:13:cd:69:30:2e:71:71:68:87:86:0f:82:06:aa:cf:b7:
         bd:d9:58:6e:2a:52:16:d3:45:f3:a2:2c:d8:79:ee:f3:af:d1:
         f7:a0:ee:3f:ee:a6:9b:1a:98:ca:86:82:cf:28:6e:6d:2e:39:
         58:93:18:28:1b:33:84:4e:1b:f1:f4:6e:f8:85:2b:9b:b0:c8:
         ca:51:37:b8:60:e1:59:0f:0d:ba:04:77:d4:a0:5f:b8:93:16:
         63:48:b4:39:b9:47:92:d1:a1:ac:7c:4a:53:c6:0d:76:76:78:
         26:1e:dd:9a:40:ad:db:3a:41:d4:98:35:2d:ff:da:20:77:f2:
         19:99:66:de:16:68:ae:c7:ef:09:71:8a:5f:90:1a:9a:56:79:
         0e:f6:c7:32:3c:a0:f3:76:fa:e8:3a:50:57:9b:51:28:ed:05:
         24:4e:85:13:a9:23:a2:7b:0d:8e:27:0f:be:32:24:33:07:8a:
         f3:46:0d:83:4e:42:44:fc:8a:7b:b4:a2:af:d9:79:da:71:90:
         4a:fe:e3:78:e5:f9:9c:71:09:35:a0:e9:b8:b5:67:5a:ae:af:
         46:49:6b:76:2d:de:e6:69:74:c4:59:82:96:3b:14:8c:bb:25:
         e6:e1:17:e5:9c:8e:e5:81:2c:79:05:15:2b:5a:5f:0e:d2:7a:
         d5:ec:f3:cc
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUE2NdDhr/iJvLGUMQ4GPTIBvbH20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDExMTM5MzRaFw0yNDA2MjkxMTQ0MzRaMDMxMTAvBgNV
BAMTKDBDQTJFQUEzNTk2QjkyNEU2M0JEQkZDMDk5N0EyOENBRjRCMjZEN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpt+Qux8l0O0Zxg1Mri+ANaotJ
s3tmts0Miv/VNxlieXjpj3zs4fJSFWeBS8G86eVvREQzBUWJT4DTt0MO1U24ATJ2
CzjBPsGPv/UIqhYXck3PG/14mWj2kIpas5HtjYEozFBjj3Mc+vDa1fXZEsdfLjuy
nU1N+imPOnKi1bNOuz6ZeOY8TIxRz6qZP7Fqy+3anGnTOhF/TpkLQQptJyspp9mh
zfZGqgo3A8JfIHKZkXiFD2UiTXGT4pSUdg54Ui7FevITDf5LSdwN3Fv1kH0EeopR
0D/Q9vRetiUJRNfJ0+ewSMyySK+GGuhdc2LWBxitB97cC4luAd7VMJXelcwNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMouqjWWuSTmO9
v8CZeijK9LJtfDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BMzFrUGVpWkxrTHU1S2RxRWU2RkVqWVpmMUpGZ2o2bmhj
UHRkNnkxU0N1VS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQTMxa1BlaVpMa0x1NUtkcUVlNkZFallaZjFKRmdqNm5o
Y1B0ZDZ5MVNDdVUvMC8wQ0EyRUFBMzU5NkI5MjRFNjNCREJGQzA5OTdBMjhDQUY0
QjI2RDdDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxXaAwDQQCAAIwBwMF
ACgEF5wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAP3MA0GCSqGSIb3DQEBCwUA
A4IBAQC05hPNaTAucXFoh4YPggaqz7e92VhuKlIW00XzoizYee7zr9H3oO4/7qab
GpjKhoLPKG5tLjlYkxgoGzOEThvx9G74hSubsMjKUTe4YOFZDw26BHfUoF+4kxZj
SLQ5uUeS0aGsfEpTxg12dngmHt2aQK3bOkHUmDUt/9ogd/IZmWbeFmiux+8JcYpf
kBqaVnkO9scyPKDzdvroOlBXm1Eo7QUkToUTqSOiew2OJw++MiQzB4rzRg2DTkJE
/Ip7tKKv2XnacZBK/uN45fmccQk1oOm4tWdarq9GSWt2Ld7maXTEWYKWOxSMuyXm
4RflnI7lgSx5BRUrWl8O0nrV7PPM
-----END CERTIFICATE-----