Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer
File:                     35F6CB498D4B581CD56EFC2125053A8C6BF1D329.cer (raw, json)
Hash identifier:          5eGq2bSAOP6KtYtG42h8pVrgUMGnZi/vfsaLAbYvd1Q=
Subject key identifier:   35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A44A92B720016A0A0D510C0958966CA4C2677E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 16:25:16 +0000
Certificate not after:    Mon 23 Sep 2024 16:30:16 +0000
Subordinate resources:    AS: 270514
                          IP: 177.11.128.0/22
                          IP: 2804:6d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:44:a9:2b:72:00:16:a0:a0:d5:10:c0:95:89:66:ca:4c:26:77:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 16:25:16 2023 GMT
            Not After : Sep 23 16:30:16 2024 GMT
        Subject: CN=35F6CB498D4B581CD56EFC2125053A8C6BF1D329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:eb:87:1c:8d:a4:01:8c:57:4b:2a:b0:0d:
                    6f:dc:fa:eb:f8:3f:1c:d3:04:86:ec:7c:7f:b6:53:
                    21:05:0f:31:32:74:75:48:81:ee:b2:db:f1:77:47:
                    91:a4:08:c3:d8:94:de:ef:c2:fc:c7:d4:d7:d6:10:
                    8d:ba:d2:37:02:87:f6:b8:43:0d:96:bc:c0:6d:b1:
                    14:3f:44:5b:19:cd:7c:c1:42:31:cd:d3:b2:f0:43:
                    7a:75:6f:12:0a:8e:7a:4b:2f:0d:0e:2f:d1:43:17:
                    22:dc:92:29:84:ff:19:8a:67:8b:ea:f0:82:9e:ca:
                    15:2f:06:53:fb:b7:b5:07:44:6f:33:08:9e:6e:55:
                    8c:12:fd:35:78:85:d5:90:2e:9f:26:cf:60:8d:bb:
                    1a:ee:df:b5:44:f2:01:a6:e3:ef:e6:81:81:75:e8:
                    95:03:9d:63:63:ff:89:4d:34:fb:11:5f:5f:46:2c:
                    b4:e5:4e:4b:2b:34:d3:81:68:25:16:c7:92:4f:61:
                    ab:d9:af:53:6f:d8:12:92:31:18:bb:ab:c9:ab:95:
                    ad:15:22:eb:7e:a3:3a:94:20:bb:08:42:2a:54:bc:
                    08:8f:74:82:69:31:dd:07:64:9b:63:ae:53:b4:dd:
                    90:7f:40:a0:a1:6b:64:80:19:96:1e:3f:5b:15:c5:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:F6:CB:49:8D:4B:58:1C:D5:6E:FC:21:25:05:3A:8C:6B:F1:D3:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/35F6CB498D4B581CD56EFC2125053A8C6BF1D329.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/22
                IPv6:
                  2804:6d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270514

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:5d:c9:0a:de:1d:09:50:bc:7b:bf:d0:78:db:90:23:a7:
         f0:77:9b:f1:9e:bc:07:8d:be:cb:a4:04:45:f0:23:0a:aa:fe:
         ad:d0:24:30:8b:b9:e1:91:d1:b7:91:07:e5:c6:b1:cb:bf:79:
         42:37:e6:85:cb:34:2a:a4:49:43:6e:9d:b8:0c:7b:e1:d3:1d:
         89:85:5d:8b:53:9b:12:d9:dd:f5:1d:76:52:f6:1c:06:5a:61:
         99:19:64:f4:e2:4a:df:d5:0e:42:48:b5:76:b0:e5:6d:6f:55:
         cc:e5:1f:6f:9b:24:bd:e0:dd:be:5e:25:fd:69:06:95:d9:94:
         83:2a:5e:98:75:d1:e6:99:54:3a:03:10:a8:29:c1:9c:e4:cd:
         fb:1d:5c:94:f9:1c:e3:3d:75:0c:55:0f:80:87:7f:d9:80:7c:
         95:c1:4b:3e:49:11:c3:df:ee:ee:05:53:fd:52:67:8b:82:4e:
         c0:2d:7a:46:5d:2b:b6:9e:ef:61:f4:51:2c:15:44:2c:be:b8:
         77:ee:f1:a2:ff:6b:d9:2c:7e:de:18:55:54:1f:30:c4:bb:bd:
         df:d2:a0:53:9e:9e:81:01:ee:59:81:57:82:a6:bb:5b:70:24:
         e2:57:18:c1:66:6b:bc:be:0e:36:62:1a:5e:92:6b:29:cb:82:
         62:6a:16:ba
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUOkSpK3IAFqCg1RDAlYlmykwmd+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjUxNjI1MTZaFw0yNDA5MjMxNjMwMTZaMDMxMTAvBgNV
BAMTKDM1RjZDQjQ5OEQ0QjU4MUNENTZFRkMyMTI1MDUzQThDNkJGMUQzMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlOuHHI2kAYxXSyqwDW/c+uv4
PxzTBIbsfH+2UyEFDzEydHVIge6y2/F3R5GkCMPYlN7vwvzH1NfWEI260jcCh/a4
Qw2WvMBtsRQ/RFsZzXzBQjHN07LwQ3p1bxIKjnpLLw0OL9FDFyLckimE/xmKZ4vq
8IKeyhUvBlP7t7UHRG8zCJ5uVYwS/TV4hdWQLp8mz2CNuxru37VE8gGm4+/mgYF1
6JUDnWNj/4lNNPsRX19GLLTlTksrNNOBaCUWx5JPYavZr1Nv2BKSMRi7q8mrla0V
Iut+ozqUILsIQipUvAiPdIJpMd0HZJtjrlO03ZB/QKCha2SAGZYeP1sVxbCTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ19stJjUtYHNVu
/CElBTqMa/HTKTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81YVJzZUhNVDdiSHROUGlhUHY4UkZhQ3c1a1JFMVdHOXlz
akNHS05FYnd0cC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWFSc2VITVQ3Ykh0TlBpYVB2OFJGYUN3NWtSRTFXRzl5
c2pDR0tORWJ3dHAvMC8zNUY2Q0I0OThENEI1ODFDRDU2RUZDMjEyNTA1M0E4QzZC
RjFEMzI5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKxC4AwDQQCAAIwBwMF
ACgEbSAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCCyMA0GCSqGSIb3DQEBCwUA
A4IBAQBg4F3JCt4dCVC8e7/QeNuQI6fwd5vxnrwHjb7LpARF8CMKqv6t0CQwi7nh
kdG3kQflxrHLv3lCN+aFyzQqpElDbp24DHvh0x2JhV2LU5sS2d31HXZS9hwGWmGZ
GWT04krf1Q5CSLV2sOVtb1XM5R9vmyS94N2+XiX9aQaV2ZSDKl6YddHmmVQ6AxCo
KcGc5M37HVyU+RzjPXUMVQ+Ah3/ZgHyVwUs+SRHD3+7uBVP9UmeLgk7ALXpGXSu2
nu9h9FEsFUQsvrh37vGi/2vZLH7eGFVUHzDEu73f0qBTnp6BAe5ZgVeCprtbcCTi
VxjBZmu8vg42Yhpekmspy4Jiaha6
-----END CERTIFICATE-----