Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.cer
File:                     479E06F5B6EE099F824DB92D356B4DBA466A88B2.cer (raw, json)
Hash identifier:          XeOielP6V8bNJUloBQ8/MLgla1u5KEOy6lVroZDmG7s=
Subject key identifier:   47:9E:06:F5:B6:EE:09:9F:82:4D:B9:2D:35:6B:4D:BA:46:6A:88:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0960239DB206F5E5E6B5BDC47EB98B848F2399C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 08:27:05 +0000
Certificate not after:    Fri 14 Jun 2024 08:32:05 +0000
Subordinate resources:    AS: 61872
                          IP: 201.149.100.0/22
                          IP: 2804:1aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:60:23:9d:b2:06:f5:e5:e6:b5:bd:c4:7e:b9:8b:84:8f:23:99:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 16 08:27:05 2023 GMT
            Not After : Jun 14 08:32:05 2024 GMT
        Subject: CN=479E06F5B6EE099F824DB92D356B4DBA466A88B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:fe:a5:a1:7f:ed:04:0f:08:7e:65:21:28:
                    be:88:66:39:d0:20:40:5d:fc:db:33:ad:14:a1:de:
                    20:32:3a:ae:03:9e:03:a2:09:e7:b5:8a:70:9c:bb:
                    3e:75:ba:76:f2:5c:e0:69:b2:4f:72:cf:00:97:98:
                    1f:65:2d:8a:62:45:67:51:06:8b:3c:ca:ea:41:85:
                    73:c1:a9:2d:bb:1a:05:d7:9b:08:d9:51:04:15:e7:
                    dc:53:15:2c:d0:4a:b3:dd:a0:ad:00:b6:4b:77:2a:
                    5d:00:31:27:69:14:f9:18:c8:a0:33:d9:e3:2b:1e:
                    6a:fb:3b:51:ee:88:95:c8:04:0f:4b:46:30:1e:dc:
                    ee:d6:f1:cb:1c:ab:4d:01:0c:ce:6c:5b:9c:b3:5d:
                    9d:c4:4f:14:6f:8e:61:25:3b:4f:34:ab:04:1d:d7:
                    0f:61:fb:19:0c:d0:26:bc:48:47:b3:e4:9a:51:3e:
                    d5:2f:32:f3:38:92:3b:94:1d:29:d1:1e:98:46:22:
                    a0:3c:9a:6a:0a:6c:7e:16:3e:3f:f3:49:e4:fa:89:
                    48:4f:be:b7:de:10:d0:4d:e9:cd:8a:f0:f8:e9:27:
                    5a:67:99:14:12:96:1b:bb:64:df:38:5c:68:b7:f6:
                    f7:e4:04:82:97:83:5a:e4:d6:09:e1:9b:9e:f1:e0:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:9E:06:F5:B6:EE:09:9F:82:4D:B9:2D:35:6B:4D:BA:46:6A:88:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bnmu7YWSCmfoaFek32KR7FU8PfrJo33AgDDuJ7K9xU9N/0/479E06F5B6EE099F824DB92D356B4DBA466A88B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.100.0/22
                IPv6:
                  2804:1aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61872

    Signature Algorithm: sha256WithRSAEncryption
         9f:92:0a:fd:53:a2:02:31:8a:c9:ad:de:02:bf:89:c3:f7:a4:
         5a:5a:58:9f:a5:43:53:d2:47:31:39:75:b7:f3:16:88:92:2a:
         bf:0a:ab:d5:25:18:2e:fe:e1:cd:9a:8d:f2:1f:35:28:5e:85:
         1a:8b:ad:69:c8:c5:f9:1f:39:0f:6a:4f:68:f8:0e:3b:1d:3b:
         ea:bc:2f:5a:5a:96:1c:03:85:9a:8a:59:57:31:c4:45:5a:c9:
         60:e2:bf:66:92:b6:14:2f:b5:fc:8c:5b:17:7e:d7:24:5b:26:
         62:27:2a:33:c3:69:2c:93:d6:bd:b4:71:76:f7:b0:6f:ea:22:
         2a:75:ae:a2:17:ad:5c:d8:23:f1:d2:92:f5:df:9e:9f:06:4c:
         cf:08:a6:fc:0c:33:d0:ba:15:d5:61:54:4b:ef:de:e2:17:a4:
         bf:1f:dd:f2:f1:67:e3:9e:26:e6:ee:7d:69:dc:83:99:bd:16:
         3d:9b:ad:ff:7f:5b:ba:3d:c2:51:c4:f7:f3:5f:da:90:b8:ba:
         61:39:40:16:2c:0b:9d:cd:bb:a6:8c:4c:01:90:18:ab:f6:5d:
         6e:07:1b:0b:d1:f1:77:3f:0d:ea:e6:eb:f1:29:40:01:68:4a:
         68:63:b9:4a:5b:db:4f:10:58:6a:4f:9e:b1:94:dd:c9:e8:06:
         c2:3b:3c:d7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCWAjnbIG9eXmtb3EfrmLhI8jmcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MTYwODI3MDVaFw0yNDA2MTQwODMyMDVaMDMxMTAvBgNV
BAMTKDQ3OUUwNkY1QjZFRTA5OUY4MjREQjkyRDM1NkI0REJBNDY2QTg4QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79/6loX/tBA8IfmUhKL6IZjnQ
IEBd/NszrRSh3iAyOq4DngOiCee1inCcuz51unbyXOBpsk9yzwCXmB9lLYpiRWdR
Bos8yupBhXPBqS27GgXXmwjZUQQV59xTFSzQSrPdoK0Atkt3Kl0AMSdpFPkYyKAz
2eMrHmr7O1HuiJXIBA9LRjAe3O7W8cscq00BDM5sW5yzXZ3ETxRvjmElO080qwQd
1w9h+xkM0Ca8SEez5JpRPtUvMvM4kjuUHSnRHphGIqA8mmoKbH4WPj/zSeT6iUhP
vrfeENBN6c2K8PjpJ1pnmRQSlhu7ZN84XGi39vfkBIKXg1rk1gnhm57x4IT9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHngb1tu4Jn4JN
uS01a026RmqIsjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Cbm11N1lXU0NtZm9hRmVrMzJLUjdGVThQZnJKbzMzQWdE
RHVKN0s5eFU5Ti8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Cbm11N1lXU0NtZm9hRmVrMzJLUjdGVThQZnJKbzMzQWdE
RHVKN0s5eFU5Ti8wLzQ3OUUwNkY1QjZFRTA5OUY4MjREQjkyRDM1NkI0REJBNDY2
QTg4QjIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsmVZDANBAIAAjAHAwUA
KAQaoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8bAwDQYJKoZIhvcNAQELBQAD
ggEBAJ+SCv1TogIxismt3gK/icP3pFpaWJ+lQ1PSRzE5dbfzFoiSKr8Kq9UlGC7+
4c2ajfIfNShehRqLrWnIxfkfOQ9qT2j4DjsdO+q8L1palhwDhZqKWVcxxEVayWDi
v2aSthQvtfyMWxd+1yRbJmInKjPDaSyT1r20cXb3sG/qIip1rqIXrVzYI/HSkvXf
np8GTM8IpvwMM9C6FdVhVEvv3uIXpL8f3fLxZ+OeJubufWncg5m9Fj2brf9/W7o9
wlHE9/Nf2pC4umE5QBYsC53Nu6aMTAGQGKv2XW4HGwvR8Xc/Derm6/EpQAFoSmhj
uUpb208QWGpPnrGU3cnoBsI7PNc=
-----END CERTIFICATE-----