Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer
File:                     61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.cer (raw, json)
Hash identifier:          E78bKaMG6rm+Forz4Y/Vw6O7jfZUXHP/y/a630WXQBQ=
Subject key identifier:   61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18BD3AD4D49A66EAC47AEC342CE9897DB0B1C095
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 13:00:29 +0000
Certificate not after:    Fri 28 Jun 2024 13:05:29 +0000
Subordinate resources:    AS: 265207
                          IP: 167.250.160.0/22
                          IP: 179.0.68.0/22
                          IP: 2804:2c44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bd:3a:d4:d4:9a:66:ea:c4:7a:ec:34:2c:e9:89:7d:b0:b1:c0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 13:00:29 2023 GMT
            Not After : Jun 28 13:05:29 2024 GMT
        Subject: CN=61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:0a:0a:7e:5f:c2:0e:94:81:bd:ad:9d:ca:
                    1d:24:8d:cf:70:eb:e4:14:7a:00:ce:1a:ce:23:06:
                    44:aa:d7:60:a2:ef:19:a7:91:71:3c:59:bc:48:05:
                    12:25:54:74:2e:4e:07:68:51:ba:fe:fa:3c:4c:cd:
                    b2:bd:93:32:e7:7a:3a:1d:ef:1b:3c:1c:9e:a6:c5:
                    92:d0:06:9d:c5:8e:26:5e:c0:1e:f8:38:16:a5:b5:
                    bb:a1:43:ae:27:c8:17:97:b6:99:88:8c:cf:da:6e:
                    f4:0c:65:bb:1e:fa:5b:bd:6f:09:95:15:63:5b:ff:
                    03:69:f7:65:c4:ce:cc:c2:71:ff:75:ed:5f:89:36:
                    a2:de:b5:fd:62:08:f6:0c:9b:33:df:14:17:b6:83:
                    7a:3b:f1:a2:c0:85:33:6d:fb:b5:b4:9f:8e:7e:df:
                    21:b4:cf:fc:91:11:04:20:09:61:ed:d1:a0:81:0e:
                    8d:11:a3:c7:0f:1d:86:c5:41:c7:8d:4d:77:a9:93:
                    ed:e8:ec:11:bf:37:9a:2c:18:a0:74:98:d4:2a:98:
                    b1:33:32:34:cf:00:c8:98:a5:51:0d:0d:c9:7e:52:
                    96:c4:96:0a:0c:5f:a8:f8:b3:9e:88:d1:54:8c:86:
                    67:30:0c:97:4d:b1:81:da:ce:3f:61:2c:91:95:54:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:E4:6A:B8:6B:31:64:E8:2D:DF:72:DD:CF:60:7F:FC:C4:FA:C2:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/0/61E46AB86B3164E82DDF72DDCF607FFCC4FAC22B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.160.0/22
                  179.0.68.0/22
                IPv6:
                  2804:2c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265207

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:23:3d:2e:9b:ac:7d:7a:25:2c:6e:33:0d:96:0d:93:69:
         3c:0c:ad:8f:72:03:52:ab:5f:96:ff:d0:f2:fd:53:4d:8e:18:
         eb:a3:a6:11:b9:6a:b8:c7:f5:11:b0:d4:f6:08:e0:8c:93:e3:
         2e:77:69:35:60:56:9f:bd:2f:2a:65:c7:1d:7f:49:4c:62:e8:
         9f:ca:7e:a1:ec:20:06:d4:0b:8a:b6:f0:53:c9:36:83:da:96:
         ba:7e:47:20:29:f0:31:27:18:1b:50:0c:da:1b:8d:0e:72:6e:
         08:d3:72:bf:7a:00:28:ed:0a:86:b3:2f:29:c0:25:7f:69:48:
         e7:01:55:16:59:1b:f6:62:67:59:5d:e0:24:6a:92:88:a8:61:
         90:dc:07:64:59:5d:9c:d9:30:bb:c7:4b:9c:3a:e0:67:97:ed:
         f8:3b:f7:f5:6d:2d:d2:82:d4:30:ac:40:21:48:fb:cf:a1:bd:
         3b:32:b8:7e:d4:4c:36:5b:16:bd:b4:22:78:b8:bb:13:78:8d:
         b4:4e:15:4e:3f:d0:3c:0e:86:40:33:d8:ad:d7:89:11:76:04:
         42:04:40:39:cd:e7:f9:b0:8f:e9:b7:95:be:99:3f:bf:5f:9d:
         3e:bd:d2:19:e6:6e:61:71:12:2c:a4:ed:83:6d:2e:37:ba:d1:
         80:90:0f:eb
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUGL061NSaZurEeuw0LOmJfbCxwJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MzAxMzAwMjlaFw0yNDA2MjgxMzA1MjlaMDMxMTAvBgNV
BAMTKDYxRTQ2QUI4NkIzMTY0RTgyRERGNzJERENGNjA3RkZDQzRGQUMyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1woKfl/CDpSBva2dyh0kjc9w
6+QUegDOGs4jBkSq12Ci7xmnkXE8WbxIBRIlVHQuTgdoUbr++jxMzbK9kzLnejod
7xs8HJ6mxZLQBp3FjiZewB74OBaltbuhQ64nyBeXtpmIjM/abvQMZbse+lu9bwmV
FWNb/wNp92XEzszCcf917V+JNqLetf1iCPYMmzPfFBe2g3o78aLAhTNt+7W0n45+
3yG0z/yREQQgCWHt0aCBDo0Ro8cPHYbFQceNTXepk+3o7BG/N5osGKB0mNQqmLEz
MjTPAMiYpVENDcl+UpbElgoMX6j4s56I0VSMhmcwDJdNsYHazj9hLJGVVLLxAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRh5Gq4azFk6C3f
ct3PYH/8xPrCKzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EUHB6a296eDdEVlVrY2VOeTNjTTQ0cTZac0dBaFBVTjJL
MVRGMlNjVldqUi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRFBwemtveng3RFZVa2NlTnkzY000NHE2WnNHQWhQVU4y
SzFURjJTY1ZXalIvMC82MUU0NkFCODZCMzE2NEU4MkRERjcyRERDRjYwN0ZGQ0M0
RkFDMjJCLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKn+qADBAKzAEQwDQQC
AAIwBwMFACgELEQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAv3MA0GCSqGSIb3
DQEBCwUAA4IBAQBYrCM9LpusfXolLG4zDZYNk2k8DK2PcgNSq1+W/9Dy/VNNjhjr
o6YRuWq4x/URsNT2COCMk+Mud2k1YFafvS8qZccdf0lMYuifyn6h7CAG1AuKtvBT
yTaD2pa6fkcgKfAxJxgbUAzaG40Ocm4I03K/egAo7QqGsy8pwCV/aUjnAVUWWRv2
YmdZXeAkapKIqGGQ3AdkWV2c2TC7x0ucOuBnl+34O/f1bS3SgtQwrEAhSPvPob07
Mrh+1Ew2Wxa9tCJ4uLsTeI20ThVOP9A8DoZAM9it14kRdgRCBEA5zef5sI/pt5W+
mT+/X50+vdIZ5m5hcRIspO2DbS43utGAkA/r
-----END CERTIFICATE-----