Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer
File:                     91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.cer (raw, json)
Hash identifier:          I3Y6WQbQl4qJ1M/jsjzQYOOYhZ5pRjrhIVleIhM2Y3A=
Subject key identifier:   91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       792DB1C33051D791979975C7CA45DB55469DFA2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 16:12:24 +0000
Certificate not after:    Fri 26 Jul 2024 16:17:24 +0000
Subordinate resources:    AS: 263338
                          IP: 170.78.244.0/22
                          IP: 191.36.184.0/21
                          IP: 2804:1494::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2d:b1:c3:30:51:d7:91:97:99:75:c7:ca:45:db:55:46:9d:fa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 16:12:24 2023 GMT
            Not After : Jul 26 16:17:24 2024 GMT
        Subject: CN=91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:b5:cd:65:d6:3d:1f:45:66:26:bd:60:53:
                    3c:74:d6:77:9d:de:5a:bb:75:b7:52:76:29:36:e8:
                    20:77:bc:50:1a:44:16:f2:e7:08:a1:89:3f:dc:05:
                    92:4b:45:9e:60:2b:0e:9c:d9:5a:84:dc:2f:69:1c:
                    c7:20:ae:5e:b6:40:73:e6:b3:36:49:8d:49:4a:43:
                    d8:6e:70:a9:4c:48:49:9b:19:4f:63:a1:4d:fe:63:
                    1a:35:fb:4a:d6:d4:c4:52:7b:8f:92:a6:3e:16:04:
                    1f:be:f8:cb:1c:42:23:b2:1c:61:d1:4d:7d:c1:67:
                    96:66:bf:64:67:8e:25:e8:63:c8:3d:3e:2d:a9:d3:
                    67:88:84:0d:46:5d:46:80:a9:a1:32:4b:67:b4:88:
                    f5:55:05:c5:fa:d9:37:e9:9e:03:43:37:81:25:e4:
                    37:32:11:83:c3:2f:23:63:56:bf:e8:bd:a0:95:a8:
                    e5:d2:36:0e:67:bc:30:47:09:e3:6f:1f:f4:87:8c:
                    72:c3:1b:90:55:0c:73:77:e3:0c:26:34:a7:67:6f:
                    07:b8:69:de:0a:10:6b:22:ae:44:64:3f:91:ad:7e:
                    e4:f3:01:40:4a:f9:f3:8e:c7:b0:f0:0e:24:32:8a:
                    58:14:c6:2f:83:46:a3:54:5e:e5:b2:04:9b:54:76:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:A9:E6:C2:48:02:3A:A7:E8:9B:8B:2B:7D:09:50:ED:80:FD:54:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/91A9E6C248023AA7E89B8B2B7D0950ED80FD54AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/22
                  191.36.184.0/21
                IPv6:
                  2804:1494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263338

    Signature Algorithm: sha256WithRSAEncryption
         17:72:2e:d5:b9:b8:59:27:b4:c1:3e:68:26:e3:11:55:34:74:
         04:dc:16:15:16:2a:66:b6:35:e7:74:da:2d:2e:cc:1b:de:d2:
         ba:5e:52:09:22:bf:c8:3f:83:55:50:2c:4d:da:79:ba:71:f5:
         6f:12:e0:3b:40:93:52:b1:58:13:0b:6d:c6:b5:a3:8c:77:66:
         3c:76:ac:aa:90:d4:53:34:a7:9c:a2:c6:dd:fc:09:23:1b:f1:
         b4:eb:a3:e7:a6:01:41:2f:16:70:36:90:33:3a:f2:81:4e:bc:
         96:18:81:9d:e8:31:2c:02:82:fe:75:34:56:c8:50:41:17:f9:
         5f:20:20:93:58:f1:14:0a:b9:52:a1:39:db:2d:e6:07:79:06:
         c1:c3:6f:b3:54:3b:f6:dc:5c:60:fe:8b:e8:eb:e6:08:07:33:
         e9:42:ac:32:08:a3:0f:c4:c8:47:c6:76:d7:2f:63:28:79:50:
         c7:ee:f6:ab:1e:13:51:a9:20:d6:c0:9f:4b:b8:8c:d8:81:58:
         99:9b:aa:45:f9:43:74:c6:dc:61:78:a1:59:3f:97:64:98:b5:
         d7:f1:d3:75:bd:9c:3e:96:3d:be:31:f1:97:a5:37:36:66:91:
         66:0b:f3:ce:f0:6b:f5:c5:95:b4:5f:60:9e:9c:c6:ea:7d:8e:
         1a:13:06:fc
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUeS2xwzBR15GXmXXHykXbVUad+iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjgxNjEyMjRaFw0yNDA3MjYxNjE3MjRaMDMxMTAvBgNV
BAMTKDkxQTlFNkMyNDgwMjNBQTdFODlCOEIyQjdEMDk1MEVEODBGRDU0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUbXNZdY9H0VmJr1gUzx01ned
3lq7dbdSdik26CB3vFAaRBby5wihiT/cBZJLRZ5gKw6c2VqE3C9pHMcgrl62QHPm
szZJjUlKQ9hucKlMSEmbGU9joU3+Yxo1+0rW1MRSe4+Spj4WBB+++MscQiOyHGHR
TX3BZ5Zmv2RnjiXoY8g9Pi2p02eIhA1GXUaAqaEyS2e0iPVVBcX62TfpngNDN4El
5DcyEYPDLyNjVr/ovaCVqOXSNg5nvDBHCeNvH/SHjHLDG5BVDHN34wwmNKdnbwe4
ad4KEGsirkRkP5GtfuTzAUBK+fOOx7DwDiQyilgUxi+DRqNUXuWyBJtUdiTZAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRqebCSAI6p+ib
iyt9CVDtgP1UqjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BdnA5dzhnaFljYlZlRGVmdk1EQ0NoYllUR29lcHVYRW5r
WU1xZVFaUDFQRC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVu
a1lNcWVRWlAxUEQvMC85MUE5RTZDMjQ4MDIzQUE3RTg5QjhCMkI3RDA5NTBFRDgw
RkQ1NEFBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKqTvQDBAO/JLgwDQQC
AAIwBwMFACgEFJQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBASqMA0GCSqGSIb3
DQEBCwUAA4IBAQAXci7VubhZJ7TBPmgm4xFVNHQE3BYVFipmtjXndNotLswb3tK6
XlIJIr/IP4NVUCxN2nm6cfVvEuA7QJNSsVgTC23GtaOMd2Y8dqyqkNRTNKecosbd
/AkjG/G066PnpgFBLxZwNpAzOvKBTryWGIGd6DEsAoL+dTRWyFBBF/lfICCTWPEU
CrlSoTnbLeYHeQbBw2+zVDv23Fxg/ovo6+YIBzPpQqwyCKMPxMhHxnbXL2MoeVDH
7varHhNRqSDWwJ9LuIzYgViZm6pF+UN0xtxheKFZP5dkmLXX8dN1vZw+lj2+MfGX
pTc2ZpFmC/PO8Gv1xZW0X2CenMbqfY4aEwb8
-----END CERTIFICATE-----