Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer
File:                     19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.cer (raw, json)
Hash identifier:          lXacQmnlaFydHsDDJtNN1dxstag1lwd//UxVxZNsIek=
Subject key identifier:   19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E6A972A2E07ED02A6B5565F0BAEAF501178BC94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:43 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:43 +0000
Subordinate resources:    AS: 271579
                          IP: 190.9.88.0/22
                          IP: 2804:7dbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:97:2a:2e:07:ed:02:a6:b5:56:5f:0b:ae:af:50:11:78:bc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:43 2023 GMT
            Not After : Nov  5 03:58:43 2024 GMT
        Subject: CN=19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:9b:84:3d:f0:97:3a:64:9e:e0:de:6b:9b:
                    9b:08:59:39:2f:cc:58:39:00:eb:0a:73:34:e1:91:
                    a7:86:fe:85:07:bf:e4:1e:54:97:2b:22:44:1d:28:
                    5b:17:dc:ed:49:6d:cd:69:ef:ba:9b:0e:12:3a:05:
                    2c:e3:0c:c0:af:b6:2d:76:89:85:0d:12:16:be:0c:
                    10:7c:83:6d:b0:27:40:5a:a2:f4:6d:48:cd:69:c5:
                    2a:50:ba:53:38:23:17:b3:8c:6a:eb:c0:f7:2f:5f:
                    1c:4e:fb:f2:f9:7e:7c:f0:a0:b0:3b:bd:92:ca:ba:
                    e8:b7:6d:a4:70:f5:68:1b:6d:75:17:b3:66:e7:d3:
                    4c:2b:c3:b9:9f:6c:a7:9d:1c:aa:fe:6d:f0:cc:e0:
                    b2:78:f3:9c:2d:88:e8:a5:e3:26:9c:29:ff:77:7c:
                    2a:65:48:47:fd:fc:9f:cb:3c:2f:06:42:42:0f:fe:
                    62:de:44:a3:ff:ff:9a:fa:be:92:b3:3f:3d:8c:fb:
                    28:bb:07:7f:9c:8f:55:48:2c:6c:76:9c:3e:61:50:
                    ff:f5:b4:b9:41:d5:9b:67:2a:48:3f:9f:cf:45:eb:
                    dd:4d:15:71:c8:c4:2b:17:49:4a:4b:ae:b7:d4:4d:
                    2b:23:7b:af:6c:31:62:7a:10:14:ec:80:d9:c8:55:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:A3:45:8C:9F:AA:FC:C0:A2:B5:BB:21:5E:21:AC:E7:1C:7E:F1:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/19A3458C9FAAFCC0A2B5BB215E21ACE71C7EF1BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22
                IPv6:
                  2804:7dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271579

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:40:e1:1c:f0:be:97:79:9a:26:02:99:d6:c9:10:1d:78:
         0f:98:8b:2d:ac:49:61:29:ba:49:30:43:9c:67:02:f3:78:65:
         63:4b:21:cc:05:a4:50:62:81:b0:73:b3:94:84:13:18:66:ca:
         c1:78:c5:e8:f3:f1:98:34:49:6b:89:f8:a7:98:15:05:e7:9b:
         b6:99:a2:4f:c2:b4:3f:9b:98:4f:cf:d1:41:30:a3:8b:00:6f:
         ed:f0:cf:ec:1b:65:66:9c:0c:d4:fb:ae:82:6a:e1:c5:74:35:
         f7:0f:dc:3d:28:b1:b1:ad:76:2f:69:e6:06:ae:f8:37:9f:ad:
         f6:d5:89:06:7f:64:a6:b5:46:77:68:8b:de:a0:f8:bc:27:33:
         a9:2a:dc:4a:7e:82:98:4e:94:d8:63:b4:b5:13:2a:59:60:67:
         d6:7d:8e:81:f8:e4:9d:14:27:a6:9f:0c:46:e4:cd:73:06:6a:
         ae:12:1a:cb:dc:11:09:7d:cd:16:b5:64:93:c4:39:0c:98:1b:
         fd:6f:5f:c0:51:8f:67:27:50:5e:3a:f4:ba:25:92:1c:f4:7f:
         bb:0c:b7:3f:15:a5:c6:50:10:20:15:42:a2:a3:ee:d3:91:e0:
         e6:45:a0:32:56:e5:49:4d:ce:d5:68:5c:13:9d:dd:30:a4:71:
         40:15:64:3b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUfmqXKi4H7QKmtVZfC66vUBF4vJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDcwMzUzNDNaFw0yNDExMDUwMzU4NDNaMDMxMTAvBgNV
BAMTKDE5QTM0NThDOUZBQUZDQzBBMkI1QkIyMTVFMjFBQ0U3MUM3RUYxQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq5uEPfCXOmSe4N5rm5sIWTkv
zFg5AOsKczThkaeG/oUHv+QeVJcrIkQdKFsX3O1Jbc1p77qbDhI6BSzjDMCvti12
iYUNEha+DBB8g22wJ0BaovRtSM1pxSpQulM4IxezjGrrwPcvXxxO+/L5fnzwoLA7
vZLKuui3baRw9WgbbXUXs2bn00wrw7mfbKedHKr+bfDM4LJ485wtiOil4yacKf93
fCplSEf9/J/LPC8GQkIP/mLeRKP//5r6vpKzPz2M+yi7B3+cj1VILGx2nD5hUP/1
tLlB1ZtnKkg/n89F691NFXHIxCsXSUpLrrfUTSsje69sMWJ6EBTsgNnIVc0ZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZo0WMn6r8wKK1
uyFeIaznHH7xvzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DM01aNXlQdjlUaUZXVG9GNlYxaGdWTFQ1ZUg1Nk1TMk0z
bUV6SDZycmM5ZC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzNNWjV5UHY5VGlGV1RvRjZWMWhnVkxUNWVINTZNUzJN
M21Fekg2cnJjOWQvMC8xOUEzNDU4QzlGQUFGQ0MwQTJCNUJCMjE1RTIxQUNFNzFD
N0VGMUJGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+CVgwDQQCAAIwBwMF
ACgEfbwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCTbMA0GCSqGSIb3DQEBCwUA
A4IBAQCiREDhHPC+l3maJgKZ1skQHXgPmIstrElhKbpJMEOcZwLzeGVjSyHMBaRQ
YoGwc7OUhBMYZsrBeMXo8/GYNElrifinmBUF55u2maJPwrQ/m5hPz9FBMKOLAG/t
8M/sG2VmnAzU+66CauHFdDX3D9w9KLGxrXYvaeYGrvg3n6321YkGf2SmtUZ3aIve
oPi8JzOpKtxKfoKYTpTYY7S1EypZYGfWfY6B+OSdFCemnwxG5M1zBmquEhrL3BEJ
fc0WtWSTxDkMmBv9b1/AUY9nJ1BeOvS6JZIc9H+7DLc/FaXGUBAgFUKio+7TkeDm
RaAyVuVJTc7VaFwTnd0wpHFAFWQ7
-----END CERTIFICATE-----