Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer
File:                     583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer (raw, json)
Hash identifier:          CsmDr/yObfsX+NPdw3ISWQtEFPrY60aq6YvWIS0lh0A=
Subject key identifier:   58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43F7563E2C2C42F86787E2A4DF22F56C92EFF0F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 14:13:54 +0000
Certificate not after:    Sat 07 Dec 2024 14:18:54 +0000
Subordinate resources:    AS: 262872
                          IP: 177.11.64.0/21
                          IP: 2804:9b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f7:56:3e:2c:2c:42:f8:67:87:e2:a4:df:22:f5:6c:92:ef:f0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 14:13:54 2023 GMT
            Not After : Dec  7 14:18:54 2024 GMT
        Subject: CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:47:c3:1d:dd:75:1b:d0:d2:b7:47:62:01:
                    e5:7c:ca:ed:19:1d:4e:f3:ef:2e:22:85:f2:3f:09:
                    a4:6f:ef:6b:7f:81:c7:89:e5:30:d4:3f:71:21:82:
                    c6:42:cd:80:7e:12:27:bc:b4:35:ba:c1:22:40:45:
                    99:36:d7:a5:34:14:e7:b6:c7:cf:d9:95:85:8c:43:
                    fc:a3:c1:22:1e:ef:28:fa:28:cb:b4:f7:82:c1:ec:
                    15:04:40:b1:2c:3e:e6:d2:f3:47:b9:38:2d:53:af:
                    58:71:f2:af:22:11:fe:a5:e0:15:57:ca:ab:55:f8:
                    62:0a:2d:94:3e:6b:bd:e7:d8:f2:df:7a:02:6c:a7:
                    c4:62:db:05:8a:3a:56:22:5d:6f:b4:3e:e3:c1:5b:
                    fb:fc:00:a2:31:89:59:06:9e:8f:d6:23:84:7e:c3:
                    41:e2:cd:54:46:b0:bc:83:dc:7d:ae:6f:e5:ff:3f:
                    39:39:b0:1d:38:70:f1:53:67:84:5c:ce:a9:43:40:
                    15:4f:2d:83:62:37:c9:57:bf:13:1d:a6:53:46:41:
                    b5:c3:45:ba:23:13:b8:1e:77:43:0c:8c:8d:43:78:
                    62:54:65:bf:26:87:ce:7e:93:7b:f6:39:00:5a:4d:
                    08:df:0c:7b:fd:60:a9:e2:1d:5a:fd:f9:11:0a:a5:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.64.0/21
                IPv6:
                  2804:9b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262872

    Signature Algorithm: sha256WithRSAEncryption
         94:95:13:38:7d:22:9f:79:64:d6:f7:42:59:b2:4d:10:33:59:
         c2:b5:60:05:01:c1:1d:60:32:f1:b4:0a:b3:50:3e:3e:a1:43:
         0e:fe:11:93:bd:0d:70:69:f0:d4:59:b1:97:2c:f0:2f:52:8d:
         3c:d0:14:90:e0:31:b4:43:3d:3b:9f:b6:c4:3e:40:aa:a2:dd:
         69:bf:87:92:bb:4b:8a:2d:00:6d:fd:6d:f2:ce:8a:5d:6c:10:
         90:f2:c7:8d:70:7c:72:be:dc:8c:17:3d:5d:51:b1:f9:f6:06:
         fc:f1:41:26:48:cd:37:ff:27:b4:c0:13:5d:26:b7:3d:a4:25:
         29:cf:54:fa:ae:17:59:ed:64:19:36:b7:cf:f0:fc:26:dc:68:
         47:d8:eb:02:de:41:f7:4c:2c:64:42:1d:2b:95:38:43:cb:f5:
         a9:d0:22:f4:09:66:64:78:62:f9:9f:3b:f2:81:b3:49:e9:da:
         fe:8a:1b:24:54:6a:e9:37:ae:f7:a8:38:6d:09:f3:a7:ed:3d:
         07:01:73:7c:5c:aa:b0:56:c7:c1:23:1d:06:68:8d:9c:9a:7b:
         26:37:92:44:ee:24:d5:28:f9:36:43:13:52:67:b5:76:ab:ca:
         c2:d0:a7:80:ee:7f:e8:8b:35:06:18:3a:d0:e6:2e:e1:c7:22:
         f1:c3:b9:26
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUQ/dWPiwsQvhnh+Kk3yL1bJLv8PIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDkxNDEzNTRaFw0yNDEyMDcxNDE4NTRaMDMxMTAvBgNV
BAMTKDU4M0M1M0RGRERBQjNFQjA1MTMxM0U1OEU1QjgyRUU4NTRCOTYxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyC0fDHd11G9DSt0diAeV8yu0Z
HU7z7y4ihfI/CaRv72t/gceJ5TDUP3EhgsZCzYB+Eie8tDW6wSJARZk216U0FOe2
x8/ZlYWMQ/yjwSIe7yj6KMu094LB7BUEQLEsPubS80e5OC1Tr1hx8q8iEf6l4BVX
yqtV+GIKLZQ+a73n2PLfegJsp8Ri2wWKOlYiXW+0PuPBW/v8AKIxiVkGno/WI4R+
w0HizVRGsLyD3H2ub+X/Pzk5sB04cPFTZ4RczqlDQBVPLYNiN8lXvxMdplNGQbXD
RbojE7ged0MMjI1DeGJUZb8mh85+k3v2OQBaTQjfDHv9YKniHVr9+REKpTf9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRYPFPf3as+sFEx
PljluC7oVLlhxzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNVFzRXJGVTRzTnRHNmlKeGhaeXgxZGo0MnMxaGtjVUNH
OHNnTWs2c3dQTS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KNVFzRXJGVTRzTnRHNmlKeGhaeXgxZGo0MnMxaGtjVUNH
OHNnTWs2c3dQTS8wLzU4M0M1M0RGRERBQjNFQjA1MTMxM0U1OEU1QjgyRUU4NTRC
OTYxQzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7ELQDANBAIAAjAHAwUA
KAQJtDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAtgwDQYJKoZIhvcNAQELBQAD
ggEBAJSVEzh9Ip95ZNb3QlmyTRAzWcK1YAUBwR1gMvG0CrNQPj6hQw7+EZO9DXBp
8NRZsZcs8C9SjTzQFJDgMbRDPTuftsQ+QKqi3Wm/h5K7S4otAG39bfLOil1sEJDy
x41wfHK+3IwXPV1Rsfn2BvzxQSZIzTf/J7TAE10mtz2kJSnPVPquF1ntZBk2t8/w
/CbcaEfY6wLeQfdMLGRCHSuVOEPL9anQIvQJZmR4YvmfO/KBs0np2v6KGyRUauk3
rveoOG0J86ftPQcBc3xcqrBWx8EjHQZojZyaeyY3kkTuJNUo+TZDE1JntXarysLQ
p4Duf+iLNQYYOtDmLuHHIvHDuSY=
-----END CERTIFICATE-----