Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer
File:                     8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.cer (raw, json)
Hash identifier:          IhSmOShQjLQwng5627YnQAejzfDpMGGkZr5ED6UthMY=
Subject key identifier:   8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E1044B7719D2DB0E82392A93B05D67B254F9C6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 01:33:18 +0000
Certificate not after:    Tue 27 Aug 2024 01:38:18 +0000
Subordinate resources:    AS: 271503
                          IP: 181.233.140.0/22
                          IP: 2804:7c8c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:44:b7:71:9d:2d:b0:e8:23:92:a9:3b:05:d6:7b:25:4f:9c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 01:33:18 2023 GMT
            Not After : Aug 27 01:38:18 2024 GMT
        Subject: CN=8CAF265B3AFBDA95BC45DB4BC086681703F3A66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:59:40:02:df:cb:31:39:f5:32:04:7d:66:
                    df:62:7a:ba:39:33:cb:cc:ee:46:49:6a:2c:d5:1d:
                    35:b2:b4:f8:6b:08:a7:20:61:ef:64:f2:1b:75:c5:
                    ac:a2:c9:90:07:87:83:24:12:19:7f:7f:63:75:94:
                    2f:43:d1:1c:38:00:a7:dd:bd:96:96:c7:23:11:36:
                    43:2b:06:d5:e5:4c:63:26:71:7f:75:fe:64:b6:29:
                    ba:e8:5a:4e:7d:29:2f:85:1f:f5:05:dc:5d:0e:1d:
                    99:43:63:ec:d8:d5:8e:32:88:3d:c5:58:43:72:45:
                    6e:7c:25:b0:f5:22:a7:d6:3f:25:27:13:7f:fe:ce:
                    77:a1:2e:db:4b:4b:26:e1:db:8d:f2:89:26:95:eb:
                    9c:9d:5e:ee:73:c7:2c:a6:27:b0:1a:b0:e5:37:c6:
                    21:3b:7f:1b:01:e4:58:0e:12:5b:73:68:c5:9e:7a:
                    dc:b5:69:d3:1e:be:43:03:6b:b9:ff:a9:84:6d:79:
                    7f:5b:fb:14:20:0e:13:41:0d:36:73:77:51:8e:87:
                    5f:82:07:58:4f:70:c5:0d:1a:b1:7a:33:2d:a0:9d:
                    6f:39:f1:4a:35:13:70:da:88:21:76:1e:d9:4b:9b:
                    58:a6:06:ee:57:fd:e7:1a:7f:5d:36:ce:b3:da:25:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:AF:26:5B:3A:FB:DA:95:BC:45:DB:4B:C0:86:68:17:03:F3:A6:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGaHd24P3Dw81GNN7R7gzeBCQc6o3Q2Ax9QVC6dD7B6h/0/8CAF265B3AFBDA95BC45DB4BC086681703F3A66C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.140.0/22
                IPv6:
                  2804:7c8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271503

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:d8:e1:df:95:9e:4b:c3:8d:9c:25:85:5c:d2:89:e2:19:
         77:d9:ec:93:3f:1a:e0:03:ec:8e:54:94:cd:34:bd:ca:6d:e3:
         76:79:46:67:72:a5:68:35:9a:d3:25:fc:03:b6:a5:fd:cb:ae:
         ec:ac:72:41:57:b9:3a:40:be:c2:a0:48:6e:61:ab:b3:7d:20:
         0e:fa:3c:be:32:58:60:7b:53:a5:10:15:c6:64:db:82:83:90:
         51:67:99:40:b8:76:9c:3d:23:99:4d:ae:e7:af:5c:8a:e7:51:
         1f:37:51:02:59:cf:43:f4:1c:66:36:d9:43:06:1c:f1:51:1e:
         5c:96:1f:9f:3c:69:08:39:4b:af:79:8b:df:3e:cd:5b:4b:7e:
         3d:1b:98:0e:36:7c:e9:c9:23:88:6a:02:f7:d2:8f:5e:3b:4e:
         1d:c3:49:42:70:99:9d:fb:fa:5b:b4:cb:53:87:b1:ca:ab:75:
         c4:23:73:af:22:61:22:c4:49:b5:41:ca:f1:5e:df:8d:a8:f0:
         d8:0c:77:34:9d:7d:8a:75:7c:16:e6:84:3f:eb:c7:35:1b:4c:
         22:87:73:55:a5:be:ac:9e:f6:54:39:a8:20:0d:b3:53:86:43:
         a7:7b:5d:07:d6:b4:5d:62:ca:5b:3e:aa:75:1c:52:98:ea:e7:
         e2:e4:9e:11
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUPhBEt3GdLbDoI5KpOwXWeyVPnG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjkwMTMzMThaFw0yNDA4MjcwMTM4MThaMDMxMTAvBgNV
BAMTKDhDQUYyNjVCM0FGQkRBOTVCQzQ1REI0QkMwODY2ODE3MDNGM0E2NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+VlAAt/LMTn1MgR9Zt9iero5
M8vM7kZJaizVHTWytPhrCKcgYe9k8ht1xayiyZAHh4MkEhl/f2N1lC9D0Rw4AKfd
vZaWxyMRNkMrBtXlTGMmcX91/mS2KbroWk59KS+FH/UF3F0OHZlDY+zY1Y4yiD3F
WENyRW58JbD1IqfWPyUnE3/+znehLttLSybh243yiSaV65ydXu5zxyymJ7AasOU3
xiE7fxsB5FgOEltzaMWeety1adMevkMDa7n/qYRteX9b+xQgDhNBDTZzd1GOh1+C
B1hPcMUNGrF6My2gnW858Uo1E3DaiCF2HtlLm1imBu5X/ecaf102zrPaJeM9AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMryZbOvvalbxF
20vAhmgXA/OmbDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BR2FIZDI0UDNEdzgxR05ON1I3Z3plQkNRYzZvM1EyQXg5
UVZDNmREN0I2aC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUdhSGQyNFAzRHc4MUdOTjdSN2d6ZUJDUWM2bzNRMkF4
OVFWQzZkRDdCNmgvMC84Q0FGMjY1QjNBRkJEQTk1QkM0NURCNEJDMDg2NjgxNzAz
RjNBNjZDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK16YwwDQQCAAIwBwMF
ACgEfIwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCSPMA0GCSqGSIb3DQEBCwUA
A4IBAQAne9jh35WeS8ONnCWFXNKJ4hl32eyTPxrgA+yOVJTNNL3KbeN2eUZncqVo
NZrTJfwDtqX9y67srHJBV7k6QL7CoEhuYauzfSAO+jy+Mlhge1OlEBXGZNuCg5BR
Z5lAuHacPSOZTa7nr1yK51EfN1ECWc9D9BxmNtlDBhzxUR5clh+fPGkIOUuveYvf
Ps1bS349G5gONnzpySOIagL30o9eO04dw0lCcJmd+/pbtMtTh7HKq3XEI3OvImEi
xEm1QcrxXt+NqPDYDHc0nX2KdXwW5oQ/68c1G0wih3NVpb6snvZUOaggDbNThkOn
e10H1rRdYspbPqp1HFKY6ufi5J4R
-----END CERTIFICATE-----