Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer
File:                     35CEE36DC22B91A4269D126DB5171DB75C44C1FD.cer (raw, json)
Hash identifier:          1+Pp1Q64eS6YZmnrowm4Ywv8Ja0lpMAkFX1pJQgg7sw=
Subject key identifier:   35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       361E9A4E2FF27C28047C3682BC6FBB6A22529611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 18:17:33 +0000
Certificate not after:    Tue 13 Aug 2024 18:22:33 +0000
Subordinate resources:    AS: 268173
                          IP: 45.170.216.0/22
                          IP: 2804:592c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:9a:4e:2f:f2:7c:28:04:7c:36:82:bc:6f:bb:6a:22:52:96:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 15 18:17:33 2023 GMT
            Not After : Aug 13 18:22:33 2024 GMT
        Subject: CN=35CEE36DC22B91A4269D126DB5171DB75C44C1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:ea:5e:e9:41:8b:26:3d:5d:d9:66:d4:5a:
                    8a:a3:75:56:76:da:22:63:8a:b4:65:44:7c:df:c5:
                    e1:31:74:37:61:30:ad:fa:ac:ca:84:92:aa:27:17:
                    73:95:02:d3:a9:72:a8:cf:78:d5:19:f1:c9:44:d6:
                    a8:c0:fa:a4:2d:84:b8:f5:68:a4:c2:1b:71:00:6b:
                    7e:29:52:ea:00:a8:93:f9:c9:35:07:78:6c:a7:e5:
                    dd:6e:11:f6:0c:e5:15:f9:fc:60:88:0a:a0:8b:e5:
                    d5:ed:bf:22:b7:51:77:33:d1:9f:8f:f3:1d:5e:55:
                    dd:b2:96:4f:ac:a1:3e:84:c4:84:48:59:c2:fb:50:
                    c3:98:62:99:6c:97:b5:a0:b5:66:68:3a:01:79:dc:
                    ec:86:b0:53:f6:57:34:7e:2f:f3:b3:4f:e2:99:83:
                    7b:58:01:7b:b0:83:f4:fd:0c:6a:04:0b:5d:f3:0d:
                    b2:d7:46:c6:3c:45:e1:ca:39:a3:ae:c1:68:14:42:
                    51:c6:b3:64:d9:de:96:62:02:c3:16:5d:45:59:56:
                    8d:7c:31:ab:8f:23:34:a8:da:20:a3:a8:76:b4:34:
                    0d:42:c3:67:db:97:cf:3c:de:28:50:3b:eb:99:47:
                    28:8f:39:ec:b4:c7:72:59:b8:40:e9:ea:ff:f0:92:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:CE:E3:6D:C2:2B:91:A4:26:9D:12:6D:B5:17:1D:B7:5C:44:C1:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/35CEE36DC22B91A4269D126DB5171DB75C44C1FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/22
                IPv6:
                  2804:592c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268173

    Signature Algorithm: sha256WithRSAEncryption
         36:25:c2:a7:1a:1f:3b:d6:46:b7:cd:3d:bd:a2:59:48:2e:79:
         d3:8d:70:8d:2b:9a:10:91:ba:2d:d4:22:a6:63:26:81:74:3e:
         db:c0:0e:63:9e:97:ae:e3:5f:1c:b2:45:74:06:4c:5d:2f:8e:
         f6:6e:ce:b6:52:3d:bc:10:e4:e8:a8:dc:65:05:8b:a7:e9:24:
         6d:bc:d1:f6:02:69:ee:50:a1:d8:58:10:01:0f:ac:db:1e:8d:
         0a:38:2e:25:5e:6a:2e:57:34:79:dd:22:81:19:5e:9f:03:86:
         0d:4d:a3:54:fe:a8:d9:24:a8:03:32:74:08:20:4a:ed:bc:64:
         7b:6b:47:04:8a:20:c2:ca:11:85:72:fb:43:a4:25:87:7e:77:
         77:98:5f:34:f9:d5:02:35:39:a9:94:6f:b0:fd:12:d6:f7:cf:
         6b:d8:7b:01:b9:4b:b8:2b:c7:8e:09:35:a6:e1:4e:f3:22:29:
         94:e7:45:eb:28:95:6c:d2:6f:00:db:1e:91:b6:a2:61:c3:4c:
         a0:55:c3:a2:7c:80:af:02:1c:f4:fc:80:7a:ed:fa:c2:39:ec:
         17:69:68:07:70:ca:bc:e5:ae:af:2d:60:e7:3f:ca:58:35:7d:
         36:27:eb:4e:c6:07:fa:8c:73:c1:be:b1:1d:19:4f:52:9d:0c:
         14:1f:6c:78
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUNh6aTi/yfCgEfDaCvG+7aiJSlhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTUxODE3MzNaFw0yNDA4MTMxODIyMzNaMDMxMTAvBgNV
BAMTKDM1Q0VFMzZEQzIyQjkxQTQyNjlEMTI2REI1MTcxREI3NUM0NEMxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUp+pe6UGLJj1d2WbUWoqjdVZ2
2iJjirRlRHzfxeExdDdhMK36rMqEkqonF3OVAtOpcqjPeNUZ8clE1qjA+qQthLj1
aKTCG3EAa34pUuoAqJP5yTUHeGyn5d1uEfYM5RX5/GCICqCL5dXtvyK3UXcz0Z+P
8x1eVd2ylk+soT6ExIRIWcL7UMOYYplsl7WgtWZoOgF53OyGsFP2VzR+L/OzT+KZ
g3tYAXuwg/T9DGoEC13zDbLXRsY8ReHKOaOuwWgUQlHGs2TZ3pZiAsMWXUVZVo18
MauPIzSo2iCjqHa0NA1Cw2fbl8883ihQO+uZRyiPOey0x3JZuEDp6v/wkv7VAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1zuNtwiuRpCad
Em21Fx23XETB/TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYUJWeWljbnE3MTVoTGY5QWVrV1NZY2NSYWltZlFMeGJI
cFBaS3dBVUY4Ui8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GYUJWeWljbnE3MTVoTGY5QWVrV1NZY2NSYWltZlFMeGJI
cFBaS3dBVUY4Ui8wLzM1Q0VFMzZEQzIyQjkxQTQyNjlEMTI2REI1MTcxREI3NUM0
NEMxRkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2q2DANBAIAAjAHAwUA
KARZLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF40wDQYJKoZIhvcNAQELBQAD
ggEBADYlwqcaHzvWRrfNPb2iWUguedONcI0rmhCRui3UIqZjJoF0PtvADmOel67j
XxyyRXQGTF0vjvZuzrZSPbwQ5Oio3GUFi6fpJG280fYCae5QodhYEAEPrNsejQo4
LiVeai5XNHndIoEZXp8Dhg1No1T+qNkkqAMydAggSu28ZHtrRwSKIMLKEYVy+0Ok
JYd+d3eYXzT51QI1OamUb7D9Etb3z2vYewG5S7grx44JNabhTvMiKZTnResolWzS
bwDbHpG2omHDTKBVw6J8gK8CHPT8gHrt+sI57BdpaAdwyrzlrq8tYOc/ylg1fTYn
607GB/qMc8G+sR0ZT1KdDBQfbHg=
-----END CERTIFICATE-----