Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer
File:                     328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.cer (raw, json)
Hash identifier:          qJjSWMJeJZ7XlHd8MiYlRwlLm9cY9fxeVp3CLzOLyfo=
Subject key identifier:   32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       154A946D9694DDA64B9A827F71FE07E43445FB94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 16:55:57 +0000
Certificate not after:    Thu 16 Jan 2025 17:00:57 +0000
Subordinate resources:    AS: 265483
                          IP: 168.197.148.0/22
                          IP: 2804:34d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4a:94:6d:96:94:dd:a6:4b:9a:82:7f:71:fe:07:e4:34:45:fb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 16:55:57 2024 GMT
            Not After : Jan 16 17:00:57 2025 GMT
        Subject: CN=328AA38E163EEBE8441252AEA3C2B4B6FF738DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:33:2a:d9:21:c6:89:0f:ae:c7:ed:e4:d8:
                    c7:46:71:8a:fd:ce:7d:9a:22:01:d9:76:0a:c6:1e:
                    d1:84:f0:46:4e:e4:e4:b9:0f:76:b1:b4:78:00:e3:
                    26:7b:fc:66:2a:9f:b0:37:bf:40:89:eb:06:bc:60:
                    d5:e2:08:b4:f8:0e:ef:d5:20:70:a7:da:48:41:00:
                    89:b3:ad:a0:d4:b9:fb:b1:1c:0e:1c:1d:08:44:64:
                    f2:5f:35:8f:50:e5:3f:2e:60:12:3b:65:8c:99:e7:
                    6c:d7:13:4f:d9:5f:94:70:c5:b4:44:aa:e5:40:e6:
                    fc:19:a7:bc:f4:6d:62:61:73:24:91:ae:07:aa:50:
                    0e:0c:91:80:99:44:16:ae:1c:c6:00:0d:d4:a7:8c:
                    b8:ec:b6:55:12:57:93:60:4c:4c:49:91:0d:28:46:
                    ed:da:81:cb:7d:a3:6d:84:8f:16:36:41:2e:7f:b8:
                    b6:b2:32:d3:1c:6d:53:bd:11:20:42:0f:40:80:b2:
                    e2:46:e7:a3:bb:d7:ca:21:a2:84:28:e8:e7:4c:c8:
                    c7:3f:be:6a:16:62:d9:17:4d:1b:fe:27:06:0e:ae:
                    89:a2:b2:35:5d:c2:8b:35:58:27:4b:3c:64:0b:38:
                    99:ab:a7:9c:8b:c0:5d:46:a4:52:04:3a:fa:fb:2b:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:8A:A3:8E:16:3E:EB:E8:44:12:52:AE:A3:C2:B4:B6:FF:73:8D:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BuKiLExJDfzSpp2UcUBZsSx2FkHuburd45jSGakkjKb4/0/328AA38E163EEBE8441252AEA3C2B4B6FF738DA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.148.0/22
                IPv6:
                  2804:34d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265483

    Signature Algorithm: sha256WithRSAEncryption
         9b:db:11:12:ea:d3:d4:41:5a:88:ad:56:e3:da:a7:a8:8c:d1:
         03:5a:ba:ec:d6:4f:e3:d8:77:f5:dc:23:17:5b:84:5b:e3:9c:
         99:85:a1:6c:74:ec:84:83:f4:2e:1f:35:40:1d:ca:6d:5b:b8:
         0d:14:d3:b7:e4:64:29:25:c7:75:ca:62:58:3b:9c:3d:c4:55:
         31:53:26:f5:ad:a2:cc:f1:67:a0:c4:25:d0:9f:ed:d4:87:35:
         e1:ed:5c:38:1b:b9:1d:77:0c:b2:5f:72:be:08:2a:fb:0e:19:
         c9:6f:49:1b:b5:b6:86:b7:cf:f8:47:f8:58:bc:a4:a9:4b:79:
         a3:81:f1:11:4c:25:65:56:c1:54:50:7b:3c:e8:03:06:c3:97:
         5a:00:07:f4:38:78:e9:0e:86:88:18:ae:70:af:d8:d8:1c:44:
         6b:9e:1e:ec:2c:a8:1f:ce:0b:a9:a4:a1:58:68:19:87:74:c7:
         90:9e:18:a8:ad:02:c1:51:86:e1:97:5f:dd:84:91:be:cc:1a:
         dd:1f:f2:e2:89:f8:38:7a:43:7f:46:45:7c:44:60:93:96:83:
         ad:f8:ec:a1:48:52:3e:88:21:33:04:35:35:6d:04:40:3a:c7:
         1a:aa:75:27:5e:0e:9c:b4:ac:2d:3f:7c:8c:e7:17:ee:f8:d4:
         2b:32:3f:33
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFUqUbZaU3aZLmoJ/cf4H5DRF+5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTgxNjU1NTdaFw0yNTAxMTYxNzAwNTdaMDMxMTAvBgNV
BAMTKDMyOEFBMzhFMTYzRUVCRTg0NDEyNTJBRUEzQzJCNEI2RkY3MzhEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcDMq2SHGiQ+ux+3k2MdGcYr9
zn2aIgHZdgrGHtGE8EZO5OS5D3axtHgA4yZ7/GYqn7A3v0CJ6wa8YNXiCLT4Du/V
IHCn2khBAImzraDUufuxHA4cHQhEZPJfNY9Q5T8uYBI7ZYyZ52zXE0/ZX5RwxbRE
quVA5vwZp7z0bWJhcySRrgeqUA4MkYCZRBauHMYADdSnjLjstlUSV5NgTExJkQ0o
Ru3agct9o22EjxY2QS5/uLayMtMcbVO9ESBCD0CAsuJG56O718ohooQo6OdMyMc/
vmoWYtkXTRv+JwYOromisjVdwos1WCdLPGQLOJmrp5yLwF1GpFIEOvr7K5V7AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyiqOOFj7r6EQS
Uq6jwrS2/3ONozAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CdUtpTEV4SkRmelNwcDJVY1VCWnNTeDJGa0h1YnVyZDQ1
alNHYWtraktiNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CdUtpTEV4SkRmelNwcDJVY1VCWnNTeDJGa0h1YnVyZDQ1
alNHYWtraktiNC8wLzMyOEFBMzhFMTYzRUVCRTg0NDEyNTJBRUEzQzJCNEI2RkY3
MzhEQTMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqjFlDANBAIAAjAHAwUA
KAQ01DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDQswDQYJKoZIhvcNAQELBQAD
ggEBAJvbERLq09RBWoitVuPap6iM0QNauuzWT+PYd/XcIxdbhFvjnJmFoWx07ISD
9C4fNUAdym1buA0U07fkZCklx3XKYlg7nD3EVTFTJvWtoszxZ6DEJdCf7dSHNeHt
XDgbuR13DLJfcr4IKvsOGclvSRu1toa3z/hH+Fi8pKlLeaOB8RFMJWVWwVRQezzo
AwbDl1oAB/Q4eOkOhogYrnCv2NgcRGueHuwsqB/OC6mkoVhoGYd0x5CeGKitAsFR
huGXX92Ekb7MGt0f8uKJ+Dh6Q39GRXxEYJOWg6347KFIUj6IITMENTVtBEA6xxqq
dSdeDpy0rC0/fIznF+741CsyPzM=
-----END CERTIFICATE-----