Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
File:                     8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer (raw, json)
Hash identifier:          WFVwRPkdHp6SvpuIZP6hbwXHO2KgX5zsCxgDV4Of3fk=
Subject key identifier:   8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5928B7129709F91D52F5C3C3F2394E58443241E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 21:45:31 +0000
Certificate not after:    Thu 02 Jan 2025 21:50:31 +0000
Subordinate resources:    AS: 263512
                          IP: 191.243.200.0/21
                          IP: 2804:130c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:28:b7:12:97:09:f9:1d:52:f5:c3:c3:f2:39:4e:58:44:32:41:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 21:45:31 2024 GMT
            Not After : Jan  2 21:50:31 2025 GMT
        Subject: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:0b:23:1a:5b:47:63:a5:95:3d:15:28:03:
                    55:92:b6:1b:c8:2b:46:f6:9f:ab:0e:cf:bf:cd:d3:
                    57:43:12:6c:0e:71:b7:d1:8c:61:e4:ff:f6:ea:7b:
                    8d:1e:e8:5c:61:7b:1b:12:73:c0:76:92:34:73:d3:
                    f5:62:d4:f8:a6:fb:d1:3b:65:aa:a7:3d:69:4f:a2:
                    64:22:4a:c3:67:cb:d3:1c:df:12:a8:66:11:ab:8c:
                    28:a2:ef:c1:b4:13:4a:35:99:2f:ef:6d:2f:4e:1f:
                    66:33:f0:dc:cb:3c:75:e0:da:c6:fb:a2:0e:b3:d9:
                    84:3b:82:99:b0:b3:7e:f2:59:b0:60:95:8b:42:e6:
                    a5:d1:82:10:6b:b7:3b:c2:f1:33:bb:b0:e1:d4:42:
                    3c:2e:29:fa:53:d0:bd:ef:87:8a:c9:ee:63:d4:b2:
                    bd:e2:f2:9c:b1:5e:8c:67:e6:b2:7d:76:56:d4:10:
                    45:76:06:ba:8e:ea:5c:62:6e:3e:74:8e:6c:c3:3f:
                    84:aa:31:6a:9a:f6:f6:ed:72:79:79:98:70:e3:d2:
                    74:ff:06:29:c1:2e:7a:cc:49:87:55:cd:a3:92:30:
                    d0:e3:19:3d:05:62:02:4c:9f:c5:1c:2e:aa:57:45:
                    d0:78:7c:32:cb:57:55:84:da:b5:37:96:65:df:bb:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/21
                IPv6:
                  2804:130c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263512

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:6e:80:56:7a:1e:5f:29:af:1f:64:f4:e6:fb:b1:bb:a3:
         77:c0:3e:5c:a2:2e:79:42:ba:f4:d4:a1:da:d0:f7:00:8d:0a:
         ff:63:1c:e6:ce:df:60:c7:88:69:15:51:20:87:c8:5e:55:1c:
         21:1d:fa:b2:a9:97:e8:67:94:cf:fa:c8:76:e2:d1:0e:1b:0b:
         f0:8d:22:17:c0:4d:42:19:f4:e5:e4:dd:3c:8f:12:e5:8e:24:
         28:45:38:e6:b9:86:7c:44:e2:00:3f:67:85:ef:01:c0:b7:5a:
         f4:60:4f:6f:ec:0a:49:a6:cc:67:66:1e:6d:59:ad:05:a9:59:
         ae:78:bd:06:5c:da:73:12:45:12:6c:53:30:d3:07:d9:00:2a:
         8d:0f:da:6a:6f:0b:e0:7f:3a:b9:18:2f:77:93:59:c5:1a:f2:
         31:8a:1d:70:c5:cd:35:fb:80:0f:0f:1f:80:12:01:1e:10:db:
         d9:b7:2f:c1:de:74:81:62:97:0d:de:71:14:83:08:c8:06:54:
         f9:c5:58:9c:2f:82:cf:fc:08:b3:93:1d:ca:93:40:2f:4d:22:
         1c:7a:64:d7:51:a5:a8:b8:16:bc:9e:d3:ea:ce:c1:2b:8f:77:
         03:a9:b4:c1:f4:05:db:23:6a:f1:3a:14:00:ad:42:1e:00:4f:
         72:96:1f:98
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUWSi3EpcJ+R1S9cPD8jlOWEQyQeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDQyMTQ1MzFaFw0yNTAxMDIyMTUwMzFaMDMxMTAvBgNV
BAMTKDhBNUY2NjgwRTI5REM4ODZCNTJBREJFMzkzQzAzMTNFM0MzMTBEMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZAsjGltHY6WVPRUoA1WSthvI
K0b2n6sOz7/N01dDEmwOcbfRjGHk//bqe40e6FxhexsSc8B2kjRz0/Vi1Pim+9E7
ZaqnPWlPomQiSsNny9Mc3xKoZhGrjCii78G0E0o1mS/vbS9OH2Yz8NzLPHXg2sb7
og6z2YQ7gpmws37yWbBglYtC5qXRghBrtzvC8TO7sOHUQjwuKfpT0L3vh4rJ7mPU
sr3i8pyxXoxn5rJ9dlbUEEV2BrqO6lxibj50jmzDP4SqMWqa9vbtcnl5mHDj0nT/
BinBLnrMSYdVzaOSMNDjGT0FYgJMn8UcLqpXRdB4fDLLV1WE2rU3lmXfu+E5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKX2aA4p3IhrUq
2+OTwDE+PDENMjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZnFCZG5XVFVVUDFyWnB4cHZubWJUc0tCUEVVTmp6MWZT
TXdWVTk4ZnJOZC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85ZnFCZG5XVFVVUDFyWnB4cHZubWJUc0tCUEVVTmp6MWZT
TXdWVTk4ZnJOZC8wLzhBNUY2NjgwRTI5REM4ODZCNTJBREJFMzkzQzAzMTNFM0Mz
MTBEMzIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7/zyDANBAIAAjAHAwUA
KAQTDDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBVgwDQYJKoZIhvcNAQELBQAD
ggEBAB4YboBWeh5fKa8fZPTm+7G7o3fAPlyiLnlCuvTUodrQ9wCNCv9jHObO32DH
iGkVUSCHyF5VHCEd+rKpl+hnlM/6yHbi0Q4bC/CNIhfATUIZ9OXk3TyPEuWOJChF
OOa5hnxE4gA/Z4XvAcC3WvRgT2/sCkmmzGdmHm1ZrQWpWa54vQZc2nMSRRJsUzDT
B9kAKo0P2mpvC+B/OrkYL3eTWcUa8jGKHXDFzTX7gA8PH4ASAR4Q29m3L8HedIFi
lw3ecRSDCMgGVPnFWJwvgs/8CLOTHcqTQC9NIhx6ZNdRpai4Frye0+rOwSuPdwOp
tMH0BdsjavE6FACtQh4AT3KWH5g=
-----END CERTIFICATE-----