Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F58E583E9963E31931B98D04AF87252F51C22AB.cer
File:                     3F58E583E9963E31931B98D04AF87252F51C22AB.cer (raw, json)
Hash identifier:          TA5OoRQg/IbZ189GzOpIeNDyS64sleTM0O2kd8OB/lc=
Subject key identifier:   3F:58:E5:83:E9:96:3E:31:93:1B:98:D0:4A:F8:72:52:F5:1C:22:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       317B3BD5BE6081C2AB6E3F53C892B4630EA0E3D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 07:45:12 +0000
Certificate not after:    Wed 15 May 2024 07:50:12 +0000
Subordinate resources:    AS: 265344
                          IP: 168.181.200.0/22
                          IP: 2804:2e68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7b:3b:d5:be:60:81:c2:ab:6e:3f:53:c8:92:b4:63:0e:a0:e3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 07:45:12 2023 GMT
            Not After : May 15 07:50:12 2024 GMT
        Subject: CN=3F58E583E9963E31931B98D04AF87252F51C22AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:16:00:3a:da:c3:9b:49:0e:08:e7:f3:71:
                    17:17:6f:35:19:01:9d:1b:52:3c:8d:43:71:98:18:
                    45:bc:01:20:49:5f:25:f2:0a:d7:4e:f5:b2:21:85:
                    fd:d4:91:a1:f3:40:56:6c:93:41:b3:b1:7c:5b:8d:
                    f4:d8:0c:22:f8:c4:b3:61:ea:e2:b4:49:d5:af:2c:
                    47:d0:19:30:04:02:fb:8f:1e:15:d9:4d:0e:77:db:
                    6c:6a:61:91:fc:44:8e:f2:6b:11:2e:04:4d:56:cf:
                    3d:9d:5a:f6:5a:6c:18:2d:6c:ad:bc:9c:99:d5:00:
                    55:53:3e:a5:70:82:6c:40:a3:50:f6:8f:91:b7:a7:
                    05:48:6a:97:f5:30:13:f9:0a:97:cc:7b:43:70:d0:
                    b5:3f:15:12:44:93:14:83:63:e0:6f:58:f8:2c:13:
                    f1:6c:50:f9:e5:fa:84:d6:1a:31:66:d1:d5:8d:f5:
                    06:dd:40:ac:d3:df:b7:df:43:68:68:23:78:86:a9:
                    ad:75:99:a8:44:c1:1e:c7:99:b4:08:00:d7:be:95:
                    de:cd:76:60:89:87:9e:f1:6f:2b:56:aa:1d:77:86:
                    dc:99:da:b5:94:b4:db:94:cc:35:48:45:cb:3f:02:
                    c9:aa:75:53:40:4d:ab:85:68:f2:d3:cb:ac:a2:80:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:58:E5:83:E9:96:3E:31:93:1B:98:D0:4A:F8:72:52:F5:1C:22:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7jkfUhbhdxHvKqKhW2wND8HmY4sJQz7u27BEYy8EQwL5/0/3F58E583E9963E31931B98D04AF87252F51C22AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.200.0/22
                IPv6:
                  2804:2e68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265344

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:69:ae:8d:68:e3:53:b3:63:1f:44:f5:10:f2:17:5e:4e:
         e8:21:25:72:0e:a6:6e:0e:3d:1e:c6:0e:88:81:4f:0b:33:15:
         8f:d6:0a:0c:65:52:63:44:df:a7:2b:db:d2:dc:72:b2:01:94:
         73:68:9d:12:3a:10:1d:09:31:27:9e:8a:5f:8f:e8:ce:5d:4e:
         03:d8:c8:bc:e3:e6:63:02:7f:d1:9f:07:1a:22:42:95:eb:01:
         e8:e1:ff:72:59:5f:3a:0d:c0:88:6e:10:82:06:2a:30:78:8e:
         cc:d9:05:5a:c8:b5:0e:ff:70:ce:38:fa:8b:63:c6:7b:78:8c:
         1d:f6:2c:0b:39:99:17:95:4f:20:5d:61:a0:20:39:a9:43:3c:
         c5:2b:54:d7:ea:94:8e:15:46:56:2d:0f:84:05:5f:9c:06:d1:
         d5:eb:92:c9:a4:da:aa:af:a7:13:98:74:ca:6e:9c:50:bb:ac:
         4e:1b:7f:e9:60:48:b1:7b:9d:d8:4f:d1:c7:71:57:c8:29:28:
         96:a8:8c:d7:a3:1c:35:e2:1d:6a:8b:df:29:9e:6a:fd:4f:fa:
         e3:10:11:50:30:49:7a:f0:29:0c:66:4f:6e:62:ff:2e:ab:94:
         e7:35:f0:c5:44:31:4d:bb:4a:92:a6:5e:31:2b:6e:73:29:ae:
         a7:00:97:05
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMXs71b5ggcKrbj9TyJK0Yw6g49AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTcwNzQ1MTJaFw0yNDA1MTUwNzUwMTJaMDMxMTAvBgNV
BAMTKDNGNThFNTgzRTk5NjNFMzE5MzFCOThEMDRBRjg3MjUyRjUxQzIyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDliBYAOtrDm0kOCOfzcRcXbzUZ
AZ0bUjyNQ3GYGEW8ASBJXyXyCtdO9bIhhf3UkaHzQFZsk0GzsXxbjfTYDCL4xLNh
6uK0SdWvLEfQGTAEAvuPHhXZTQ5322xqYZH8RI7yaxEuBE1Wzz2dWvZabBgtbK28
nJnVAFVTPqVwgmxAo1D2j5G3pwVIapf1MBP5CpfMe0Nw0LU/FRJEkxSDY+BvWPgs
E/FsUPnl+oTWGjFm0dWN9QbdQKzT37ffQ2hoI3iGqa11mahEwR7HmbQIANe+ld7N
dmCJh57xbytWqh13htyZ2rWUtNuUzDVIRcs/AsmqdVNATauFaPLTy6yigCTLAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/WOWD6ZY+MZMb
mNBK+HJS9RwiqzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83amtmVWhiaGR4SHZLcUtoVzJ3TkQ4SG1ZNHNKUXo3dTI3
QkVZeThFUXdMNS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83amtmVWhiaGR4SHZLcUtoVzJ3TkQ4SG1ZNHNKUXo3dTI3
QkVZeThFUXdMNS8wLzNGNThFNTgzRTk5NjNFMzE5MzFCOThEMDRBRjg3MjUyRjUx
QzIyQUIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqi1yDANBAIAAjAHAwUA
KAQuaDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDIAwDQYJKoZIhvcNAQELBQAD
ggEBAAxaaa6NaONTs2MfRPUQ8hdeTughJXIOpm4OPR7GDoiBTwszFY/WCgxlUmNE
36cr29LccrIBlHNonRI6EB0JMSeeil+P6M5dTgPYyLzj5mMCf9GfBxoiQpXrAejh
/3JZXzoNwIhuEIIGKjB4jszZBVrItQ7/cM44+otjxnt4jB32LAs5mReVTyBdYaAg
OalDPMUrVNfqlI4VRlYtD4QFX5wG0dXrksmk2qqvpxOYdMpunFC7rE4bf+lgSLF7
ndhP0cdxV8gpKJaojNejHDXiHWqL3ymeav1P+uMQEVAwSXrwKQxmT25i/y6rlOc1
8MVEMU27SpKmXjErbnMprqcAlwU=
-----END CERTIFICATE-----