Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.cer
File:                     8A67FEA35F6B7A8F572B358C90868F56046743DD.cer (raw, json)
Hash identifier:          vL2HDOwGXMJ0eRcjFG3pfzwi+v2Qbmtur5aUnuALkxU=
Subject key identifier:   8A:67:FE:A3:5F:6B:7A:8F:57:2B:35:8C:90:86:8F:56:04:67:43:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B184FE510A325450A89D70E88FB5AAF5A26FC29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 17:53:10 +0000
Certificate not after:    Tue 24 Sep 2024 17:58:10 +0000
Subordinate resources:    AS: 273796
                          IP: 2804:8c54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:4f:e5:10:a3:25:45:0a:89:d7:0e:88:fb:5a:af:5a:26:fc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 17:53:10 2023 GMT
            Not After : Sep 24 17:58:10 2024 GMT
        Subject: CN=8A67FEA35F6B7A8F572B358C90868F56046743DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:c2:53:ce:11:bd:d9:70:65:9a:4c:48:6e:
                    57:bf:d9:8a:6b:0d:3a:1c:18:9e:75:2d:aa:e4:3a:
                    7a:d0:2e:2d:f1:06:ed:cc:e4:cd:c7:2b:c0:92:d8:
                    a3:cd:1b:7d:60:a0:83:93:df:bf:4c:2d:e2:4d:e6:
                    3e:54:4d:dd:e2:b4:11:b6:de:17:44:7a:d1:95:5d:
                    1e:6a:57:ce:6a:66:11:41:27:19:b2:be:6d:d6:37:
                    f0:25:14:d8:d1:e2:43:85:73:9c:0d:1d:20:09:5a:
                    ff:f5:38:a7:83:d9:3c:9c:a0:ee:59:b2:5b:fc:35:
                    20:f1:5b:27:46:d8:59:8c:e0:59:cd:17:e4:ec:2d:
                    30:bc:16:50:31:32:0f:9e:a0:a8:78:98:37:3f:bb:
                    6f:1d:e7:fb:32:51:c7:21:36:f5:02:2a:b1:be:af:
                    26:ed:53:c2:bd:b4:c7:e1:e2:61:3f:26:f7:d0:9e:
                    6e:06:dd:d8:68:e2:aa:8a:f9:4b:50:42:83:46:c2:
                    9d:ab:51:b1:c6:52:96:2f:de:9c:50:c6:8d:8b:1c:
                    eb:36:ff:5f:0a:d3:b8:e3:3b:ea:58:2a:d7:d1:85:
                    45:61:e0:52:e4:a2:b8:42:6e:6c:90:41:56:36:7a:
                    6c:2a:8c:0c:fc:0c:d1:0b:37:94:fa:f5:1e:32:52:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:67:FE:A3:5F:6B:7A:8F:57:2B:35:8C:90:86:8F:56:04:67:43:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/8A67FEA35F6B7A8F572B358C90868F56046743DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273796

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:08:10:7d:83:94:68:37:48:e5:f0:8d:28:cb:57:eb:d9:
         72:48:b2:db:99:9e:2d:e6:0b:a6:22:6d:3a:89:c3:1d:9d:fb:
         6a:35:4d:89:95:75:91:be:18:20:5d:be:e9:8b:1f:79:78:3e:
         d2:cc:5d:d9:a5:16:e1:45:d8:ae:ca:e3:5c:b0:6b:79:a5:20:
         b2:39:a1:6b:57:02:03:fe:cc:b5:d2:73:e7:44:9e:81:30:b0:
         87:de:a1:7a:32:4d:c0:46:86:8f:de:6d:4d:b7:ce:65:a9:55:
         ea:f7:5d:df:69:d8:33:72:a8:15:6f:ed:48:6b:3b:00:a0:db:
         3b:a7:4c:42:12:26:09:88:b6:f2:6c:43:fd:67:5a:93:8c:78:
         e2:9c:ce:1a:46:56:84:b8:27:1f:83:bc:27:c2:a2:22:4d:5c:
         6b:a3:34:3e:20:8e:01:43:e6:2b:79:b3:29:51:3a:b3:86:bc:
         62:83:df:1a:18:eb:cd:38:6e:90:a2:d7:ea:6b:38:ab:60:80:
         c4:0f:34:7b:e7:b6:06:be:3c:41:37:31:17:64:ee:2e:70:b8:
         21:52:db:61:77:5c:e6:0e:c2:d0:2f:f3:76:e3:40:f2:f6:b1:
         f4:0f:b3:0a:a2:89:1c:df:35:d1:e8:40:69:a9:da:03:3a:94:
         af:19:df:13
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUGxhP5RCjJUUKidcOiPtar1om/CkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjYxNzUzMTBaFw0yNDA5MjQxNzU4MTBaMDMxMTAvBgNV
BAMTKDhBNjdGRUEzNUY2QjdBOEY1NzJCMzU4QzkwODY4RjU2MDQ2NzQzREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubMJTzhG92XBlmkxIble/2Ypr
DTocGJ51LarkOnrQLi3xBu3M5M3HK8CS2KPNG31goIOT379MLeJN5j5UTd3itBG2
3hdEetGVXR5qV85qZhFBJxmyvm3WN/AlFNjR4kOFc5wNHSAJWv/1OKeD2TycoO5Z
slv8NSDxWydG2FmM4FnNF+TsLTC8FlAxMg+eoKh4mDc/u28d5/syUcchNvUCKrG+
rybtU8K9tMfh4mE/JvfQnm4G3dho4qqK+UtQQoNGwp2rUbHGUpYv3pxQxo2LHOs2
/18K07jjO+pYKtfRhUVh4FLkorhCbmyQQVY2emwqjAz8DNELN5T69R4yUo8VAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKZ/6jX2t6j1cr
NYyQho9WBGdD3TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Hc3NXTVRZeUt3SlB6SzRWSGdWeHBhYUxvUGpURW1ZZ05D
OTVycTlUYmYxaS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vR3NzV01UWXlLd0pQeks0VkhnVnhwYWFMb1BqVEVtWWdO
Qzk1cnE5VGJmMWkvMC84QTY3RkVBMzVGNkI3QThGNTcyQjM1OEM5MDg2OEY1NjA0
Njc0M0RELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIxUMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQthDANBgkqhkiG9w0BAQsFAAOCAQEAO3oIEH2DlGg3
SOXwjSjLV+vZckiy25meLeYLpiJtOonDHZ37ajVNiZV1kb4YIF2+6YsfeXg+0sxd
2aUW4UXYrsrjXLBreaUgsjmha1cCA/7MtdJz50SegTCwh96hejJNwEaGj95tTbfO
ZalV6vdd32nYM3KoFW/tSGs7AKDbO6dMQhImCYi28mxD/Wdak4x44pzOGkZWhLgn
H4O8J8KiIk1ca6M0PiCOAUPmK3mzKVE6s4a8YoPfGhjrzThukKLX6ms4q2CAxA80
e+e2Br48QTcxF2TuLnC4IVLbYXdc5g7C0C/zduNA8vax9A+zCqKJHN810ehAaana
AzqUrxnfEw==
-----END CERTIFICATE-----