Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer
File:                     2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.cer (raw, json)
Hash identifier:          yCJYkej4jlDCjOPmvXpgv9y05yc9FgqLSvFmH+wC/so=
Subject key identifier:   2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AF5D6F08EB8C0C53EF4EB711BF72EAF71D84808
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 22:24:41 +0000
Certificate not after:    Fri 06 Dec 2024 22:29:41 +0000
Subordinate resources:    AS: 266359
                          IP: 170.239.216.0/22
                          IP: 2804:369c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f5:d6:f0:8e:b8:c0:c5:3e:f4:eb:71:1b:f7:2e:af:71:d8:48:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 22:24:41 2023 GMT
            Not After : Dec  6 22:29:41 2024 GMT
        Subject: CN=2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:d3:62:4c:45:e8:fd:9c:0d:fb:75:cf:e7:
                    89:8e:b6:e1:07:ff:10:76:9d:7f:76:f9:13:1f:76:
                    47:f1:1e:46:9c:92:d8:bb:a6:6d:b0:6f:3c:8d:1c:
                    da:39:e1:e1:e8:60:46:f3:22:f9:3d:7a:2e:1e:f2:
                    79:80:82:8a:15:3f:6a:00:c8:cf:00:bf:05:83:57:
                    0d:04:55:57:7c:ea:9e:6f:2a:58:a3:e2:94:89:48:
                    12:a9:2d:1f:bc:f7:45:80:dd:85:e6:10:84:04:1a:
                    3e:5b:3d:05:5c:53:97:33:55:93:38:f8:c8:62:31:
                    27:50:1a:83:47:94:4f:c0:9b:bf:4e:bd:a2:98:5f:
                    64:05:11:f3:78:a2:66:0b:ea:e9:a3:09:af:ad:92:
                    db:3d:af:ad:43:15:a6:d9:91:8e:f3:88:4d:9c:ec:
                    d6:6e:ab:4a:e0:6d:2f:32:32:81:c1:ee:32:92:bb:
                    c0:1b:ae:44:92:ff:2b:49:a1:7e:be:76:0d:b8:7e:
                    81:dc:e5:78:6c:b5:43:92:b1:6d:10:68:30:0f:39:
                    3d:aa:9a:99:0f:08:25:9a:b0:bc:d0:d1:96:9f:82:
                    51:f0:5d:11:1d:14:0b:30:93:72:c0:2a:f4:c2:cf:
                    f1:be:98:87:41:8f:87:a7:68:16:49:e7:44:57:e6:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:FD:1C:0D:88:F6:3F:76:95:AF:E2:D4:FB:06:46:BE:3A:61:D2:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6n2UGHMcYHjkCsPpAAhhpGcS9uiVgC3vex1RTXKxrLW6/0/2BFD1C0D88F63F7695AFE2D4FB0646BE3A61D2BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.216.0/22
                IPv6:
                  2804:369c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266359

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:3e:a1:e0:69:eb:d6:71:9d:b5:4f:87:ec:9f:6f:0d:1d:
         92:b3:d6:2c:dc:ca:88:d6:0c:57:fd:9c:09:e5:93:85:4b:62:
         f6:f8:41:04:c5:80:1e:dc:b6:ba:75:5c:7b:9d:06:91:fe:fd:
         41:23:5f:8d:db:89:00:c6:e4:84:c3:b5:36:d0:84:86:28:9a:
         04:1b:12:45:52:0a:ee:a6:9e:a5:2b:0f:7c:2c:cf:43:2b:69:
         fb:f8:a0:ce:1c:ee:c1:31:e2:a0:3e:69:2e:3c:73:63:e4:98:
         19:3f:dc:65:2c:16:a2:b5:20:e2:bd:95:60:d8:3e:8f:09:a4:
         55:57:b1:63:87:36:08:78:ce:46:fb:a7:07:37:56:ec:29:82:
         a0:02:99:78:d3:70:38:80:82:cd:e4:dd:36:d1:81:14:f8:90:
         bd:73:59:ab:84:c8:15:c8:0a:9f:54:75:85:bf:3b:25:87:c3:
         79:98:87:81:bb:07:0e:e4:b9:1a:4e:55:fb:aa:35:8f:54:f1:
         dc:47:e0:ff:cc:0f:a5:cf:12:b9:b9:02:ed:fb:1f:c3:df:fc:
         f1:57:e8:bb:2b:4a:f4:46:3b:29:b4:9b:21:85:05:fb:13:54:
         88:6f:90:ed:1f:fd:cd:82:9b:ea:f4:d3:53:53:ac:a6:bf:d3:
         06:f8:53:2a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSvXW8I64wMU+9OtxG/cur3HYSAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDgyMjI0NDFaFw0yNDEyMDYyMjI5NDFaMDMxMTAvBgNV
BAMTKDJCRkQxQzBEODhGNjNGNzY5NUFGRTJENEZCMDY0NkJFM0E2MUQyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4dNiTEXo/ZwN+3XP54mOtuEH
/xB2nX92+RMfdkfxHkackti7pm2wbzyNHNo54eHoYEbzIvk9ei4e8nmAgooVP2oA
yM8AvwWDVw0EVVd86p5vKlij4pSJSBKpLR+890WA3YXmEIQEGj5bPQVcU5czVZM4
+MhiMSdQGoNHlE/Am79OvaKYX2QFEfN4omYL6umjCa+tkts9r61DFabZkY7ziE2c
7NZuq0rgbS8yMoHB7jKSu8AbrkSS/ytJoX6+dg24foHc5XhstUOSsW0QaDAPOT2q
mpkPCCWasLzQ0ZafglHwXREdFAswk3LAKvTCz/G+mIdBj4enaBZJ50RX5k/3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQr/RwNiPY/dpWv
4tT7Bka+OmHSvjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bjJVR0hNY1lIamtDc1BwQUFoaHBHY1M5dWlWZ0MzdmV4
MVJUWEt4ckxXNi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82bjJVR0hNY1lIamtDc1BwQUFoaHBHY1M5dWlWZ0MzdmV4
MVJUWEt4ckxXNi8wLzJCRkQxQzBEODhGNjNGNzY5NUFGRTJENEZCMDY0NkJFM0E2
MUQyQkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrv2DANBAIAAjAHAwUA
KAQ2nDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEHcwDQYJKoZIhvcNAQELBQAD
ggEBAGT2PqHgaevWcZ21T4fsn28NHZKz1izcyojWDFf9nAnlk4VLYvb4QQTFgB7c
trp1XHudBpH+/UEjX43biQDG5ITDtTbQhIYomgQbEkVSCu6mnqUrD3wsz0Mrafv4
oM4c7sEx4qA+aS48c2PkmBk/3GUsFqK1IOK9lWDYPo8JpFVXsWOHNgh4zkb7pwc3
VuwpgqACmXjTcDiAgs3k3TbRgRT4kL1zWauEyBXICp9UdYW/OyWHw3mYh4G7Bw7k
uRpOVfuqNY9U8dxH4P/MD6XPErm5Au37H8Pf/PFX6LsrSvRGOym0myGFBfsTVIhv
kO0f/c2Cm+r001NTrKa/0wb4Uyo=
-----END CERTIFICATE-----