Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer
File:                     8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.cer (raw, json)
Hash identifier:          BGzC7j2jSU3VCE7ORnat25GEoUxl3NOk3fNq8Ifgzdo=
Subject key identifier:   86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51B46ECD5DA0647F9D8B70584BA8DC9C5D52685A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 21:45:09 +0000
Certificate not after:    Thu 18 Jul 2024 21:50:09 +0000
Subordinate resources:    AS: 272182
                          IP: 2804:8330::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:6e:cd:5d:a0:64:7f:9d:8b:70:58:4b:a8:dc:9c:5d:52:68:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 21:45:09 2023 GMT
            Not After : Jul 18 21:50:09 2024 GMT
        Subject: CN=8676DCF1D873533AB6D8D41ADF1DB8078DE7F289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:47:07:88:aa:bd:7f:a8:3a:12:a1:98:cc:
                    d3:fb:28:c4:a4:dc:27:92:f7:86:29:4c:87:79:e3:
                    84:ec:3a:09:6a:68:24:4b:42:c1:50:53:ff:06:3b:
                    09:6d:b0:33:1d:95:95:fe:0c:37:40:24:52:df:bf:
                    f5:b0:7e:4e:73:b8:1f:a1:02:9c:62:6a:03:16:94:
                    54:34:5e:0a:74:3c:3a:6b:1f:4d:19:e5:57:64:2d:
                    80:99:49:d3:fb:58:52:c7:7f:45:12:64:a9:a4:81:
                    23:54:67:ce:b5:78:f1:62:a4:88:6b:84:3b:9d:2f:
                    56:e0:79:53:a5:9a:3d:1c:df:6d:31:9c:94:72:c9:
                    12:5b:df:27:35:13:57:64:c9:5e:bc:ce:04:9e:32:
                    dd:ed:31:67:e2:92:d7:f3:eb:5d:27:bf:49:74:b6:
                    f6:8d:1d:0f:dc:dd:af:49:76:d2:6b:5a:7a:a2:d6:
                    b7:50:e8:ac:1f:00:cf:73:6f:8f:73:1e:91:13:b8:
                    01:38:2d:78:3d:2e:ca:9b:ee:c6:34:9d:68:00:f1:
                    7f:95:58:97:e5:7a:20:7e:00:b8:32:0b:3f:ac:5f:
                    dc:6a:80:39:2e:60:2d:75:66:2f:ad:7b:27:ef:92:
                    e1:3a:ec:56:2a:71:ab:a0:5b:91:48:96:eb:ac:0e:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:76:DC:F1:D8:73:53:3A:B6:D8:D4:1A:DF:1D:B8:07:8D:E7:F2:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/8676DCF1D873533AB6D8D41ADF1DB8078DE7F289.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272182

    Signature Algorithm: sha256WithRSAEncryption
         13:20:e4:ff:84:d5:04:f9:3b:9c:79:69:c2:2d:4b:ad:3c:ed:
         36:a4:cc:9c:5a:33:3e:b5:56:3b:b3:2a:50:59:9a:96:2f:16:
         80:69:6c:d0:6e:0d:ca:3f:ce:d1:42:e7:d5:b0:2a:43:bb:d9:
         09:a7:e1:dd:84:41:53:19:a0:c9:d6:84:b1:b2:64:fd:ae:6d:
         50:9b:11:5a:9e:66:5c:a6:d6:0a:2b:0c:79:7b:28:03:f6:14:
         75:ac:e0:ad:90:60:39:47:9c:40:62:ea:b3:6d:56:f4:ea:e8:
         33:af:7c:df:7f:23:b5:52:b9:92:77:8e:b9:cb:a4:de:88:7a:
         d9:4d:a2:36:15:8c:d4:84:ac:7d:ae:e8:4d:31:46:d3:4d:9b:
         30:42:ad:39:c6:4e:24:55:53:24:f0:32:a2:88:2b:05:3e:ee:
         86:7e:66:7e:0f:e5:62:80:a3:e9:17:c0:40:4f:e3:78:fb:72:
         fd:78:f5:4c:a8:3a:5d:2b:e3:82:82:0e:99:48:ea:59:b5:13:
         96:8f:aa:6b:7b:1a:52:53:a0:b4:23:51:df:27:45:8a:bd:f0:
         cc:ca:82:55:47:6b:54:be:ab:7d:e5:d8:07:df:30:30:75:ac:
         6f:39:9a:ff:98:c6:84:21:67:e3:8d:39:23:e7:10:46:0b:d4:
         65:cf:16:3c
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUUbRuzV2gZH+di3BYS6jcnF1SaFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjAyMTQ1MDlaFw0yNDA3MTgyMTUwMDlaMDMxMTAvBgNV
BAMTKDg2NzZEQ0YxRDg3MzUzM0FCNkQ4RDQxQURGMURCODA3OERFN0YyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PEcHiKq9f6g6EqGYzNP7KMSk
3CeS94YpTId544TsOglqaCRLQsFQU/8GOwltsDMdlZX+DDdAJFLfv/Wwfk5zuB+h
ApxiagMWlFQ0Xgp0PDprH00Z5VdkLYCZSdP7WFLHf0USZKmkgSNUZ861ePFipIhr
hDudL1bgeVOlmj0c320xnJRyyRJb3yc1E1dkyV68zgSeMt3tMWfiktfz610nv0l0
tvaNHQ/c3a9JdtJrWnqi1rdQ6KwfAM9zb49zHpETuAE4LXg9Lsqb7sY0nWgA8X+V
WJfleiB+ALgyCz+sX9xqgDkuYC11Zi+teyfvkuE67FYqcaugW5FIluusDq+NAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSGdtzx2HNTOrbY
1BrfHbgHjefyiTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84VHpkR0tVU1o5dkJ2S1h2SjUxZ3hWcjljV1BHTUFQS1hG
M0hhYm9ja0ZQZy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtY
RjNIYWJvY2tGUGcvMC84Njc2RENGMUQ4NzM1MzNBQjZEOEQ0MUFERjFEQjgwNzhE
RTdGMjg5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIMwMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQnNjANBgkqhkiG9w0BAQsFAAOCAQEAEyDk/4TVBPk7
nHlpwi1LrTztNqTMnFozPrVWO7MqUFmali8WgGls0G4Nyj/O0ULn1bAqQ7vZCafh
3YRBUxmgydaEsbJk/a5tUJsRWp5mXKbWCisMeXsoA/YUdazgrZBgOUecQGLqs21W
9OroM698338jtVK5kneOucuk3oh62U2iNhWM1ISsfa7oTTFG002bMEKtOcZOJFVT
JPAyoogrBT7uhn5mfg/lYoCj6RfAQE/jePty/Xj1TKg6XSvjgoIOmUjqWbUTlo+q
a3saUlOgtCNR3ydFir3wzMqCVUdrVL6rfeXYB98wMHWsbzma/5jGhCFn4405I+cQ
RgvUZc8WPA==
-----END CERTIFICATE-----