Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3499771B5EB4066540F215449553AD5B4EB27176.cer
File:                     3499771B5EB4066540F215449553AD5B4EB27176.cer (raw, json)
Hash identifier:          piuW4eVJeSZbF3UzPRMA8Ap43jxYw/jAGh+ieYAnzsM=
Subject key identifier:   34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C7313C31A779D50CB64D268DA8F11A0AD9B81B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.mft
caRepository:             rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 12:31:19 +0000
Certificate not after:    Tue 13 Aug 2024 12:36:19 +0000
Subordinate resources:    AS: 271221
                          IP: 179.49.248.0/22
                          IP: 2804:781c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:13:c3:1a:77:9d:50:cb:64:d2:68:da:8f:11:a0:ad:9b:81:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 12:31:19 2023 GMT
            Not After : Aug 13 12:36:19 2024 GMT
        Subject: CN=3499771B5EB4066540F215449553AD5B4EB27176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:51:b8:90:f2:9e:09:81:30:77:92:ca:63:
                    e8:e5:12:00:fb:f5:88:70:62:e3:81:49:ef:82:19:
                    0c:2d:9d:12:8d:40:1f:9a:0a:a8:06:56:4f:d8:b3:
                    58:19:fa:17:3c:ff:9b:0a:19:ec:eb:0a:28:8d:b4:
                    65:2d:1e:5d:1c:98:02:54:99:c6:9e:ca:4b:ce:a6:
                    97:f2:c7:fd:1d:b0:fc:0a:28:ad:27:89:58:6f:0a:
                    1a:69:b8:63:a6:1f:65:17:ee:4e:41:ba:8c:7f:99:
                    3a:0f:1e:7d:f2:21:a4:aa:a5:18:62:ea:93:70:96:
                    b5:8a:17:dd:64:49:ef:9f:eb:ab:b3:c1:34:7e:23:
                    46:ce:a9:ec:63:f2:eb:58:4c:35:3d:15:d2:9f:7d:
                    e2:a1:b7:13:ac:d7:db:13:92:e6:23:42:1f:53:de:
                    60:72:8c:26:25:fe:d7:1a:f3:17:2f:b4:a6:0d:55:
                    14:2d:7f:97:85:31:9e:4f:45:fd:63:94:9f:54:33:
                    00:6d:57:72:1d:36:13:e5:f9:c8:76:ab:02:05:13:
                    29:56:5d:58:e5:8e:77:ca:fc:e0:dd:3f:6f:70:fe:
                    36:1b:99:19:c1:db:8d:95:14:e9:14:07:aa:98:6d:
                    ea:c5:ad:3c:25:ac:7a:a2:15:59:4e:08:fa:66:2e:
                    21:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:99:77:1B:5E:B4:06:65:40:F2:15:44:95:53:AD:5B:4E:B2:71:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99xhFhoZyZiFuSdGLCSBFTSD1XzsyDRp49ATJJjE2big/0/3499771B5EB4066540F215449553AD5B4EB27176.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.248.0/22
                IPv6:
                  2804:781c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271221

    Signature Algorithm: sha256WithRSAEncryption
         48:1e:45:f1:e1:58:b5:0b:52:7b:dd:73:55:ea:40:be:ab:90:
         83:e6:5b:79:10:09:ef:ce:73:bf:5b:88:90:4e:db:9a:81:b5:
         b9:54:2a:af:17:c1:6c:3a:de:d8:d8:f2:a5:a3:d6:4f:49:57:
         6a:44:59:6f:46:0d:9d:ed:4a:e8:1b:6d:1a:2b:2a:c4:ee:2a:
         5a:a2:e8:55:98:42:73:ee:81:28:ba:46:b5:30:21:d4:68:65:
         a6:15:da:c4:c9:02:f8:46:3d:19:39:4c:9e:d9:8e:fd:08:7e:
         20:07:2a:46:9c:b0:82:14:0e:51:24:09:ae:dd:44:b8:c3:55:
         d7:30:49:5b:3f:50:bc:9e:8d:f3:d5:14:1f:c3:6c:e3:03:36:
         93:42:28:91:95:26:9b:6f:cb:1f:90:76:92:56:a5:32:18:73:
         e1:3d:24:40:03:51:40:d5:e6:6d:43:99:cc:b4:cc:8b:12:0c:
         40:2c:e4:4a:98:1b:12:4d:2e:77:ee:cf:63:72:48:3d:96:a3:
         4b:b4:3b:45:6a:25:64:a2:df:10:d8:04:14:a4:f9:f5:50:f5:
         20:ea:19:32:2a:0d:5c:a1:0d:04:33:f6:0e:ea:fe:24:76:fa:
         e8:35:39:c9:02:78:4e:49:f3:df:c1:a7:e3:14:a9:e8:76:cb:
         33:97:36:06
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUPHMTwxp3nVDLZNJo2o8RoK2bgbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTUxMjMxMTlaFw0yNDA4MTMxMjM2MTlaMDMxMTAvBgNV
BAMTKDM0OTk3NzFCNUVCNDA2NjU0MEYyMTU0NDk1NTNBRDVCNEVCMjcxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/lG4kPKeCYEwd5LKY+jlEgD7
9YhwYuOBSe+CGQwtnRKNQB+aCqgGVk/Ys1gZ+hc8/5sKGezrCiiNtGUtHl0cmAJU
mcaeykvOppfyx/0dsPwKKK0niVhvChppuGOmH2UX7k5Buox/mToPHn3yIaSqpRhi
6pNwlrWKF91kSe+f66uzwTR+I0bOqexj8utYTDU9FdKffeKhtxOs19sTkuYjQh9T
3mByjCYl/tca8xcvtKYNVRQtf5eFMZ5PRf1jlJ9UMwBtV3IdNhPl+ch2qwIFEylW
XVjljnfK/ODdP29w/jYbmRnB242VFOkUB6qYberFrTwlrHqiFVlOCPpmLiG7AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0mXcbXrQGZUDy
FUSVU61bTrJxdjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85OXhoRmhvWnlaaUZ1U2RHTENTQkZUU0QxWHpzeURScDQ5
QVRKSmpFMmJpZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOTl4aEZob1p5WmlGdVNkR0xDU0JGVFNEMVh6c3lEUnA0
OUFUSkpqRTJiaWcvMC8zNDk5NzcxQjVFQjQwNjY1NDBGMjE1NDQ5NTUzQUQ1QjRF
QjI3MTc2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMfgwDQQCAAIwBwMF
ACgEeBwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCN1MA0GCSqGSIb3DQEBCwUA
A4IBAQBIHkXx4Vi1C1J73XNV6kC+q5CD5lt5EAnvznO/W4iQTtuagbW5VCqvF8Fs
Ot7Y2PKlo9ZPSVdqRFlvRg2d7UroG20aKyrE7ipaouhVmEJz7oEouka1MCHUaGWm
FdrEyQL4Rj0ZOUye2Y79CH4gBypGnLCCFA5RJAmu3US4w1XXMElbP1C8no3z1RQf
w2zjAzaTQiiRlSabb8sfkHaSVqUyGHPhPSRAA1FA1eZtQ5nMtMyLEgxALORKmBsS
TS537s9jckg9lqNLtDtFaiVkot8Q2AQUpPn1UPUg6hkyKg1coQ0EM/YO6v4kdvro
NTnJAnhOSfPfwafjFKnodsszlzYG
-----END CERTIFICATE-----