Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.cer
File:                     3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.cer (raw, json)
Hash identifier:          EALXQEUZYy2KleQ4ImJQC04MEaGE4qQDkDacsgSt/FM=
Subject key identifier:   30:25:A4:E1:7E:83:76:B9:C6:D8:48:C4:82:15:B1:A8:1F:D1:DF:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CC8AC532315DD8FB7C725DC6C3055608D43E913
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 13:49:53 +0000
Certificate not after:    Tue 14 May 2024 13:54:53 +0000
Subordinate resources:    AS: 262312
                          IP: 177.124.16.0/22
                          IP: 2804:3700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c8:ac:53:23:15:dd:8f:b7:c7:25:dc:6c:30:55:60:8d:43:e9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 13:49:53 2023 GMT
            Not After : May 14 13:54:53 2024 GMT
        Subject: CN=3025A4E17E8376B9C6D848C48215B1A81FD1DFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1e:59:c3:42:0d:f1:13:9a:c8:65:0e:55:c6:
                    39:f1:d0:9a:da:d1:23:da:50:41:00:7b:3f:3b:db:
                    3b:34:5a:26:08:df:f9:08:91:9c:71:5f:ce:59:d5:
                    85:cb:a6:ea:b4:51:64:db:a0:b2:f2:e9:ff:ee:1b:
                    98:03:fd:d4:d6:33:e3:70:04:1e:29:4c:e6:ec:13:
                    64:f8:4c:01:ae:6c:11:9d:7e:6b:e6:ae:01:a8:eb:
                    9f:58:d5:da:09:e8:e9:0a:ce:72:1d:55:b5:1e:3e:
                    f1:16:3b:e4:fa:cf:bb:ad:9e:cb:51:23:61:98:6b:
                    8a:68:8c:40:3f:db:dd:c3:56:09:7b:a0:dd:83:dc:
                    90:5d:92:bd:3e:ce:9d:03:02:d4:39:cf:83:95:f1:
                    f2:f6:e1:1d:2e:bb:07:62:4e:30:43:01:de:53:cb:
                    84:da:c3:ea:56:8a:27:6e:cb:b7:51:60:c7:bd:e1:
                    47:8d:72:87:9d:1f:d7:ac:b6:ce:f3:8e:47:d4:a9:
                    19:d7:3c:d9:68:85:6a:08:af:e6:4c:80:21:b9:16:
                    a5:e9:96:26:80:19:fa:bd:00:87:57:ea:8f:ca:c7:
                    75:08:27:54:3a:ae:e8:7a:ab:3c:8b:ba:bb:36:2a:
                    b9:e1:b5:63:16:f1:04:81:5d:b8:94:67:2e:1c:37:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:25:A4:E1:7E:83:76:B9:C6:D8:48:C4:82:15:B1:A8:1F:D1:DF:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/3025A4E17E8376B9C6D848C48215B1A81FD1DFE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.16.0/22
                IPv6:
                  2804:3700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262312

    Signature Algorithm: sha256WithRSAEncryption
         67:be:f8:d4:b9:35:98:5f:6a:2a:5f:9e:13:2e:e3:82:33:30:
         c7:e2:d2:8e:32:85:fb:ac:11:58:83:26:07:c4:af:b6:e6:91:
         5a:36:82:18:b9:fc:65:72:5d:31:30:20:ed:76:77:7c:38:e9:
         f2:8d:8b:2b:85:d7:13:05:c2:4e:d3:d2:ec:f4:bd:50:23:64:
         7c:8f:a2:8d:05:bf:30:67:04:8e:4a:b1:eb:0f:e6:29:c0:74:
         42:c6:b1:d9:20:7e:f7:17:af:48:28:db:94:82:9a:07:7b:dd:
         8e:5f:1d:5d:66:62:bd:56:61:24:c0:4c:6c:16:34:68:29:97:
         6e:90:1d:29:95:75:32:4d:b2:c8:fa:b4:16:64:54:44:ca:b9:
         f1:eb:66:0c:fe:c3:75:f5:7f:88:b2:77:ad:68:d0:0c:e9:43:
         97:cb:21:29:bb:7a:3c:e3:39:63:24:27:2f:70:2c:45:75:20:
         40:c4:03:7f:71:a1:d7:d5:ae:f3:49:af:55:2b:ac:d2:7c:61:
         78:a4:ac:6d:64:00:d8:33:b7:60:d0:c1:95:fa:11:0b:67:d5:
         21:21:28:19:53:cc:d8:a2:11:90:66:1c:98:f1:9f:0f:6d:02:
         af:48:3b:46:b4:7a:9d:b1:66:30:ae:33:3e:04:67:9e:3c:c0:
         1b:04:2c:d1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULMisUyMV3Y+3xyXcbDBVYI1D6RMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTYxMzQ5NTNaFw0yNDA1MTQxMzU0NTNaMDMxMTAvBgNV
BAMTKDMwMjVBNEUxN0U4Mzc2QjlDNkQ4NDhDNDgyMTVCMUE4MUZEMURGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHlnDQg3xE5rIZQ5Vxjnx0Jra
0SPaUEEAez872zs0WiYI3/kIkZxxX85Z1YXLpuq0UWTboLLy6f/uG5gD/dTWM+Nw
BB4pTObsE2T4TAGubBGdfmvmrgGo659Y1doJ6OkKznIdVbUePvEWO+T6z7utnstR
I2GYa4pojEA/293DVgl7oN2D3JBdkr0+zp0DAtQ5z4OV8fL24R0uuwdiTjBDAd5T
y4Taw+pWiiduy7dRYMe94UeNcoedH9ests7zjkfUqRnXPNlohWoIr+ZMgCG5FqXp
liaAGfq9AIdX6o/Kx3UIJ1Q6ruh6qzyLurs2KrnhtWMW8QSBXbiUZy4cN6rTAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwJaThfoN2ucbY
SMSCFbGoH9Hf5DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HelQzUmRyakRXeXV0cjQxWUtyZ0dRS0dSZ0VFVGtXVjVo
WGhOSGcxWVZDUy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HelQzUmRyakRXeXV0cjQxWUtyZ0dRS0dSZ0VFVGtXVjVo
WGhOSGcxWVZDUy8wLzMwMjVBNEUxN0U4Mzc2QjlDNkQ4NDhDNDgyMTVCMUE4MUZE
MURGRTQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArF8EDANBAIAAjAHAwUA
KAQ3ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAKgwDQYJKoZIhvcNAQELBQAD
ggEBAGe++NS5NZhfaipfnhMu44IzMMfi0o4yhfusEViDJgfEr7bmkVo2ghi5/GVy
XTEwIO12d3w46fKNiyuF1xMFwk7T0uz0vVAjZHyPoo0FvzBnBI5KsesP5inAdELG
sdkgfvcXr0go25SCmgd73Y5fHV1mYr1WYSTATGwWNGgpl26QHSmVdTJNssj6tBZk
VETKufHrZgz+w3X1f4iyd61o0AzpQ5fLISm7ejzjOWMkJy9wLEV1IEDEA39xodfV
rvNJr1UrrNJ8YXikrG1kANgzt2DQwZX6EQtn1SEhKBlTzNiiEZBmHJjxnw9tAq9I
O0a0ep2xZjCuMz4EZ548wBsELNE=
-----END CERTIFICATE-----