Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer
File:                     63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.cer (raw, json)
Hash identifier:          4VOaAiZRBf3FSCIuWPezOqDIAV3aitqx8/mDx/s1Qio=
Subject key identifier:   63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DC0C0466459EEF87E22FA964DE386EAD861E6FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 23:01:24 +0000
Certificate not after:    Tue 24 Dec 2024 23:06:24 +0000
Subordinate resources:    AS: 268998
                          IP: 45.177.148.0/22
                          IP: 2804:5de0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:c0:46:64:59:ee:f8:7e:22:fa:96:4d:e3:86:ea:d8:61:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 23:01:24 2023 GMT
            Not After : Dec 24 23:06:24 2024 GMT
        Subject: CN=63B0E3CA66D44E26679E4B62E4AA160AC0F42B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:97:7f:12:14:eb:06:de:17:23:42:cf:ba:
                    24:22:74:57:a0:e4:97:cb:98:24:4b:33:9c:24:e7:
                    96:8f:35:60:d9:60:59:34:91:d3:30:34:24:0e:66:
                    05:f2:42:ef:fb:52:c3:90:08:69:33:7a:30:eb:e8:
                    ba:59:04:a0:bc:1e:fb:6f:1f:11:c7:65:6b:7e:a3:
                    43:d4:71:91:8d:cb:98:ae:be:c9:e4:f2:06:c6:6b:
                    15:f8:cd:c6:a3:20:0c:d8:a7:09:e3:2f:07:b5:bb:
                    63:0b:9d:0c:51:97:c6:19:45:f5:8e:6e:9c:55:9d:
                    a1:d0:d7:07:df:55:a7:c7:8f:c2:0a:5d:6c:27:fc:
                    f4:7b:c4:1f:d2:69:5d:5d:41:f3:76:4c:05:99:1a:
                    97:35:fb:03:b2:d7:02:af:66:98:8e:63:fe:aa:ae:
                    2e:be:9d:49:38:dd:38:c8:98:a9:5c:1c:a0:4b:cb:
                    7a:33:f9:40:b7:4f:79:6f:ba:07:7e:03:37:d7:1c:
                    bc:32:c5:98:23:f0:9e:c2:23:87:1d:8b:6c:f6:5d:
                    f8:23:f0:4e:d6:2c:97:0d:8d:b4:49:b7:e5:ee:e4:
                    fc:51:53:56:b1:a8:73:a3:c2:c7:e2:af:60:dc:ac:
                    dd:21:a1:56:2f:27:16:87:49:ae:ca:b8:cf:a3:78:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                63:B0:E3:CA:66:D4:4E:26:67:9E:4B:62:E4:AA:16:0A:C0:F4:2B:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qjy6j3vvbkzsK5FaEM8KdVXgtnoGW7TUb8PNHryDQao/0/63B0E3CA66D44E26679E4B62E4AA160AC0F42B66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.148.0/22
                IPv6:
                  2804:5de0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268998

    Signature Algorithm: sha256WithRSAEncryption
         68:39:1b:77:1f:2e:b6:a8:d9:f0:32:21:c7:6b:ea:ff:8d:cc:
         4a:74:de:d1:30:89:08:2b:aa:9b:e6:9c:d9:4e:46:85:98:e3:
         e5:1b:65:8d:07:42:3b:42:f9:13:0c:67:c5:24:c9:81:e2:f3:
         39:02:82:69:83:93:9d:d9:b4:1a:81:4b:6b:68:32:cf:39:9e:
         08:3b:8d:2b:f7:b6:f9:9a:5c:1c:17:05:cd:0c:1c:df:d9:d2:
         4d:81:68:7c:ee:00:42:81:d9:55:80:a4:50:58:c4:30:c4:69:
         70:7d:cb:04:7e:63:5e:c8:4a:d3:e2:ca:49:10:1b:71:cf:98:
         2a:08:56:48:e4:0f:5f:07:5d:ef:52:73:9c:79:07:2a:2a:86:
         90:86:77:b8:62:63:7d:df:84:c4:4c:6b:06:59:48:47:de:f1:
         58:c9:ca:48:8d:6a:7a:7a:cb:a7:89:c0:14:80:93:a2:e6:d4:
         fc:6b:da:12:61:ef:e1:d4:9d:43:df:2e:f4:c7:1f:07:dc:73:
         8f:c5:d6:70:77:9c:c9:ee:76:3f:08:db:b4:51:f9:55:f7:2e:
         2c:c6:cb:0e:d9:02:3f:1d:0c:bc:71:b8:65:c4:ab:b7:d4:f7:
         6c:4c:e4:c5:68:0a:75:e8:7e:bd:d4:50:78:3c:2d:3c:71:d7:
         98:3e:ce:48
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPcDARmRZ7vh+IvqWTeOG6thh5vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjYyMzAxMjRaFw0yNDEyMjQyMzA2MjRaMDMxMTAvBgNV
BAMTKDYzQjBFM0NBNjZENDRFMjY2NzlFNEI2MkU0QUExNjBBQzBGNDJCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ipd/EhTrBt4XI0LPuiQidFeg
5JfLmCRLM5wk55aPNWDZYFk0kdMwNCQOZgXyQu/7UsOQCGkzejDr6LpZBKC8Hvtv
HxHHZWt+o0PUcZGNy5iuvsnk8gbGaxX4zcajIAzYpwnjLwe1u2MLnQxRl8YZRfWO
bpxVnaHQ1wffVafHj8IKXWwn/PR7xB/SaV1dQfN2TAWZGpc1+wOy1wKvZpiOY/6q
ri6+nUk43TjImKlcHKBLy3oz+UC3T3lvugd+AzfXHLwyxZgj8J7CI4cdi2z2Xfgj
8E7WLJcNjbRJt+Xu5PxRU1axqHOjwsfir2DcrN0hoVYvJxaHSa7KuM+jePSBAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjsOPKZtROJmee
S2LkqhYKwPQrZjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82cWp5NmozdnZia3pzSzVGYUVNOEtkVlhndG5vR1c3VFVi
OFBOSHJ5RFFhby8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82cWp5NmozdnZia3pzSzVGYUVNOEtkVlhndG5vR1c3VFVi
OFBOSHJ5RFFhby8wLzYzQjBFM0NBNjZENDRFMjY2NzlFNEI2MkU0QUExNjBBQzBG
NDJCNjYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2xlDANBAIAAjAHAwUA
KARd4DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGsYwDQYJKoZIhvcNAQELBQAD
ggEBAGg5G3cfLrao2fAyIcdr6v+NzEp03tEwiQgrqpvmnNlORoWY4+UbZY0HQjtC
+RMMZ8UkyYHi8zkCgmmDk53ZtBqBS2toMs85ngg7jSv3tvmaXBwXBc0MHN/Z0k2B
aHzuAEKB2VWApFBYxDDEaXB9ywR+Y17IStPiykkQG3HPmCoIVkjkD18HXe9Sc5x5
ByoqhpCGd7hiY33fhMRMawZZSEfe8VjJykiNanp6y6eJwBSAk6Lm1Pxr2hJh7+HU
nUPfLvTHHwfcc4/F1nB3nMnudj8I27RR+VX3LizGyw7ZAj8dDLxxuGXEq7fU92xM
5MVoCnXofr3UUHg8LTxx15g+zkg=
-----END CERTIFICATE-----