Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/310192A521EAB47DAAC874614ADECC0ED41466A5.cer
File:                     310192A521EAB47DAAC874614ADECC0ED41466A5.cer (raw, json)
Hash identifier:          IftwtfV87ME7Xa2GJiufdD/2UK9FWYrvEwjg9Hn9UTI=
Subject key identifier:   31:01:92:A5:21:EA:B4:7D:AA:C8:74:61:4A:DE:CC:0E:D4:14:66:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       CEEAF4532EECF39F5BF617BF25B6BC99A425D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:24 +0000
Certificate not after:    Tue 21 May 2024 09:25:24 +0000
Subordinate resources:    AS: 263847
                          IP: 138.185.196.0/22
                          IP: 2804:26a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:ea:f4:53:2e:ec:f3:9f:5b:f6:17:bf:25:b6:bc:99:a4:25:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:24 2023 GMT
            Not After : May 21 09:25:24 2024 GMT
        Subject: CN=310192A521EAB47DAAC874614ADECC0ED41466A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:5b:eb:bf:f2:32:3f:8b:89:37:8a:ee:a3:
                    1b:fa:aa:6a:09:28:db:d9:eb:a1:d1:b1:58:c4:f8:
                    91:bc:75:22:25:45:57:f3:54:81:6c:9f:9f:e4:ff:
                    fc:66:04:f7:e1:65:cf:fa:67:13:c4:77:4e:29:d4:
                    02:78:76:59:b5:ed:03:47:bb:9b:1a:c3:81:ef:86:
                    8d:d4:24:76:2a:f0:8c:6d:ee:62:e5:67:86:e5:9f:
                    a2:e1:c3:47:56:7d:e4:0f:26:1e:5e:1b:cc:38:3a:
                    00:95:9c:c5:24:82:fa:35:f6:ea:33:5c:91:2e:3a:
                    9c:e1:fb:84:59:27:f6:99:3d:c7:2a:9b:79:ae:63:
                    72:d8:4e:61:ab:32:5c:7b:d0:8d:62:77:26:53:1a:
                    5b:97:a7:1a:5b:b7:f4:1c:6e:c9:57:88:9c:30:e6:
                    56:8e:4c:88:1f:64:28:96:61:64:2f:8a:9d:94:1e:
                    be:ec:44:00:ff:ad:02:33:be:30:bf:92:b8:f8:96:
                    1b:58:41:93:6e:a3:8a:7c:f8:c2:75:fb:d7:6c:21:
                    2f:da:61:22:94:44:91:12:30:92:1e:d5:69:d6:21:
                    55:78:99:6b:8b:f2:46:7d:04:e3:c1:84:c5:b7:59:
                    d8:b4:fc:8b:29:6b:89:18:09:0f:df:2f:50:42:8f:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:01:92:A5:21:EA:B4:7D:AA:C8:74:61:4A:DE:CC:0E:D4:14:66:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/310192A521EAB47DAAC874614ADECC0ED41466A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.196.0/22
                IPv6:
                  2804:26a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263847

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:93:62:a7:0a:ea:25:b2:bc:a6:32:b0:ec:49:be:27:6d:
         19:05:d0:7b:39:ca:f4:da:d9:b8:44:d6:88:ae:50:1c:6a:8c:
         6f:30:3b:3c:a1:a5:de:71:00:42:fa:0b:e4:fc:6a:b8:91:49:
         88:95:33:ee:af:d9:6d:44:f6:f3:6a:97:1f:ba:26:d6:96:41:
         3f:7d:62:83:71:cd:5b:df:db:e2:68:ac:0f:88:7a:6b:b9:cc:
         1e:ce:cb:38:55:21:1a:84:f0:f7:94:5e:e8:4d:a9:19:a3:e8:
         15:f6:5b:fb:95:fd:98:58:48:d9:e9:35:a9:eb:f1:b2:a3:51:
         fd:d6:cc:d3:8e:33:86:53:60:e0:4a:b5:91:a3:c9:71:e0:32:
         c2:a6:37:72:ab:cb:10:6c:9e:14:41:c8:b7:c4:a5:c9:69:fe:
         42:c0:57:3e:ae:5a:05:19:e7:da:44:08:3c:b8:7b:4d:05:b9:
         42:57:e2:5e:b5:10:14:89:77:46:33:15:9a:e8:87:eb:6e:03:
         15:05:84:5e:49:35:3e:94:fa:04:87:7c:fd:f6:7b:1d:4c:8e:
         79:d5:56:af:ad:19:d3:44:62:66:28:a0:e1:4e:12:50:8d:5c:
         51:99:9e:39:61:e2:98:d5:8d:af:77:36:15:1d:e5:de:9a:d7:
         cb:75:73:f5
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAM7q9FMu7POfW/YXvyW2vJmkJdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjMwOTIwMjRaFw0yNDA1MjEwOTI1MjRaMDMxMTAvBgNV
BAMTKDMxMDE5MkE1MjFFQUI0N0RBQUM4NzQ2MTRBREVDQzBFRDQxNDY2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLFvrv/IyP4uJN4ruoxv6qmoJ
KNvZ66HRsVjE+JG8dSIlRVfzVIFsn5/k//xmBPfhZc/6ZxPEd04p1AJ4dlm17QNH
u5saw4Hvho3UJHYq8Ixt7mLlZ4bln6Lhw0dWfeQPJh5eG8w4OgCVnMUkgvo19uoz
XJEuOpzh+4RZJ/aZPccqm3muY3LYTmGrMlx70I1idyZTGluXpxpbt/QcbslXiJww
5laOTIgfZCiWYWQvip2UHr7sRAD/rQIzvjC/krj4lhtYQZNuo4p8+MJ1+9dsIS/a
YSKURJESMJIe1WnWIVV4mWuL8kZ9BOPBhMW3Wdi0/Ispa4kYCQ/fL1BCjynhAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxAZKlIeq0farI
dGFK3swO1BRmpTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DMjg4QXlEeDl6Z25VMzFyTktycmk5VmtuSHhZd3Z6WVFi
d3VqNzRLVkNWMi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzI4OEF5RHg5emduVTMxck5LcnJpOVZrbkh4WXd2ellR
Ynd1ajc0S1ZDVjIvMC8zMTAxOTJBNTIxRUFCNDdEQUFDODc0NjE0QURFQ0MwRUQ0
MTQ2NkE1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKucQwDQQCAAIwBwMF
ACgEJqgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAanMA0GCSqGSIb3DQEBCwUA
A4IBAQCOrZNipwrqJbK8pjKw7Em+J20ZBdB7Ocr02tm4RNaIrlAcaoxvMDs8oaXe
cQBC+gvk/Gq4kUmIlTPur9ltRPbzapcfuibWlkE/fWKDcc1b39viaKwPiHprucwe
zss4VSEahPD3lF7oTakZo+gV9lv7lf2YWEjZ6TWp6/Gyo1H91szTjjOGU2DgSrWR
o8lx4DLCpjdyq8sQbJ4UQci3xKXJaf5CwFc+rloFGefaRAg8uHtNBblCV+JetRAU
iXdGMxWa6IfrbgMVBYReSTU+lPoEh3z99nsdTI551VavrRnTRGJmKKDhThJQjVxR
mZ45YeKY1Y2vdzYVHeXemtfLdXP1
-----END CERTIFICATE-----