Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer
File:                     5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.cer (raw, json)
Hash identifier:          l1C0nlxXZhhuCmw4cUAXWzS2D7VXkjT2CXxA2+SFKWc=
Subject key identifier:   5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1207DDF040D3ABE447FB092FC86CF9534E5F8FA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 19:35:26 +0000
Certificate not after:    Mon 20 May 2024 19:40:26 +0000
Subordinate resources:    AS: 270711
                          IP: 189.127.128.0/22
                          IP: 2804:7030::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:07:dd:f0:40:d3:ab:e4:47:fb:09:2f:c8:6c:f9:53:4e:5f:8f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 19:35:26 2023 GMT
            Not After : May 20 19:40:26 2024 GMT
        Subject: CN=5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:0a:11:0a:db:cf:e4:68:65:ea:17:83:f6:
                    9c:c6:33:23:4b:a7:7c:50:a6:3a:b4:58:c5:5d:63:
                    d9:3a:93:d3:0e:15:a7:d6:95:b1:37:fd:e3:2c:c0:
                    53:39:78:1c:24:d3:a9:0c:33:92:73:7d:cb:44:7b:
                    2b:61:c8:ec:8c:2e:c1:94:26:87:ad:92:24:fe:e3:
                    a3:12:22:ca:9e:5b:b5:b4:75:26:f1:b7:51:1f:99:
                    0d:65:d3:ae:80:13:5f:93:1e:14:aa:aa:7b:48:ba:
                    b4:8e:61:5b:e7:dc:d4:1f:93:8f:5f:e2:82:49:7f:
                    c8:bb:4c:f7:f5:5b:e4:d0:a4:e7:ea:e5:43:42:f7:
                    7d:04:f4:6a:bf:f6:0d:81:09:e0:9e:df:74:b8:63:
                    44:18:f2:56:1e:91:3a:fd:0a:bc:0d:d8:37:ac:19:
                    be:08:8a:8a:6c:db:36:c4:33:4e:5e:9c:69:07:6a:
                    06:22:4b:83:60:48:a4:5e:e0:37:92:92:a9:f6:37:
                    2c:be:8d:15:b1:21:7c:65:73:76:e6:26:a9:86:6e:
                    f4:75:0c:b5:77:26:b2:b9:72:bf:3a:00:27:9d:1a:
                    af:df:8f:a6:85:1a:e4:f5:63:7e:38:2e:82:17:37:
                    cb:6a:e4:9e:d6:e6:93:ff:60:31:0b:23:4f:83:37:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:5C:B7:C7:5B:FD:D6:8A:C8:3C:42:B2:D1:4B:32:5F:C0:3D:B3:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/5B5CB7C75BFDD68AC83C42B2D14B325FC03DB33B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/22
                IPv6:
                  2804:7030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270711

    Signature Algorithm: sha256WithRSAEncryption
         a2:a5:68:2b:d2:c9:aa:11:b0:ac:5b:51:c2:85:db:26:cd:ab:
         5f:cb:45:b8:fc:db:c9:64:a8:c7:a8:03:25:62:20:71:01:b5:
         24:50:38:af:80:c7:3e:67:e8:94:c5:54:11:fb:3f:7d:9d:cd:
         5c:d7:21:ce:bd:ca:d8:5e:01:9e:d0:5e:c6:b9:f3:a2:5f:f9:
         5d:ae:25:59:75:59:f6:48:9c:34:c8:11:0a:99:4f:9c:d3:e6:
         c0:d4:4b:6f:32:96:e0:17:85:d3:a2:0f:4d:a2:73:78:ca:1d:
         08:1d:d1:32:58:99:00:5b:c6:09:a8:72:c8:c0:34:02:14:b9:
         d8:65:db:d4:9e:d7:8c:0a:be:11:bb:66:ee:bd:ae:8f:5a:2d:
         76:3e:e1:9a:0b:01:05:5e:f8:c2:dc:66:d9:b3:ac:73:d5:a7:
         e2:f1:bb:01:2c:b6:6b:52:dd:d4:f2:a4:58:b3:ef:27:99:eb:
         79:bd:6e:0b:13:23:db:9b:fd:dd:28:98:8c:13:68:7f:8a:26:
         62:22:2c:ca:8f:30:9b:77:a1:43:5e:2a:e8:1c:f9:fb:26:85:
         3b:54:4f:09:70:f4:e6:3d:8f:08:ad:bc:7e:1d:5a:cd:dc:fb:
         08:31:91:3a:ca:0c:d3:43:51:19:57:c6:86:45:72:30:7b:2a:
         16:79:8c:17
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEgfd8EDTq+RH+wkvyGz5U05fj6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjIxOTM1MjZaFw0yNDA1MjAxOTQwMjZaMDMxMTAvBgNV
BAMTKDVCNUNCN0M3NUJGREQ2OEFDODNDNDJCMkQxNEIzMjVGQzAzREIzM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FAoRCtvP5Ghl6heD9pzGMyNL
p3xQpjq0WMVdY9k6k9MOFafWlbE3/eMswFM5eBwk06kMM5JzfctEeythyOyMLsGU
JoetkiT+46MSIsqeW7W0dSbxt1EfmQ1l066AE1+THhSqqntIurSOYVvn3NQfk49f
4oJJf8i7TPf1W+TQpOfq5UNC930E9Gq/9g2BCeCe33S4Y0QY8lYekTr9CrwN2Des
Gb4Iiops2zbEM05enGkHagYiS4NgSKRe4DeSkqn2Nyy+jRWxIXxlc3bmJqmGbvR1
DLV3JrK5cr86ACedGq/fj6aFGuT1Y344LoIXN8tq5J7W5pP/YDELI0+DNx8VAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbXLfHW/3Wisg8
QrLRSzJfwD2zOzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GNHh0V3hjRjhzb1d1TDJ4UmlhM1dZMmZha1A5UkFDblJT
R3VmdW1EUldmaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRjR4dFd4Y0Y4c29XdUwyeFJpYTNXWTJmYWtQOVJBQ25S
U0d1ZnVtRFJXZmkvMC81QjVDQjdDNzVCRkRENjhBQzgzQzQyQjJEMTRCMzI1RkMw
M0RCMzNCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK9f4AwDQQCAAIwBwMF
ACgEcDAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCF3MA0GCSqGSIb3DQEBCwUA
A4IBAQCipWgr0smqEbCsW1HChdsmzatfy0W4/NvJZKjHqAMlYiBxAbUkUDivgMc+
Z+iUxVQR+z99nc1c1yHOvcrYXgGe0F7GufOiX/ldriVZdVn2SJw0yBEKmU+c0+bA
1EtvMpbgF4XTog9NonN4yh0IHdEyWJkAW8YJqHLIwDQCFLnYZdvUnteMCr4Ru2bu
va6PWi12PuGaCwEFXvjC3GbZs6xz1afi8bsBLLZrUt3U8qRYs+8nmet5vW4LEyPb
m/3dKJiME2h/iiZiIizKjzCbd6FDXiroHPn7JoU7VE8JcPTmPY8Irbx+HVrN3PsI
MZE6ygzTQ1EZV8aGRXIweyoWeYwX
-----END CERTIFICATE-----