Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/96A377F256D1AB0181C969BAE2C09882F8E9D736.cer
File:                     96A377F256D1AB0181C969BAE2C09882F8E9D736.cer (raw, json)
Hash identifier:          m+/0tQ/VUm9av8FIfvV7BqAb/6N+Ex55ZX6Kmi71oak=
Subject key identifier:   96:A3:77:F2:56:D1:AB:01:81:C9:69:BA:E2:C0:98:82:F8:E9:D7:36
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6595551C5379C75023103B9B39D9C5DD904C4FE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/96A377F256D1AB0181C969BAE2C09882F8E9D736.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 17:09:58 +0000
Certificate not after:    Fri 07 Feb 2025 17:14:58 +0000
Subordinate resources:    AS: 272619
                          IP: 2804:8614::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:95:55:1c:53:79:c7:50:23:10:3b:9b:39:d9:c5:dd:90:4c:4f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 17:09:58 2024 GMT
            Not After : Feb  7 17:14:58 2025 GMT
        Subject: CN=96A377F256D1AB0181C969BAE2C09882F8E9D736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:76:95:9f:0e:9f:93:04:58:2d:46:69:60:
                    3c:df:12:fc:35:01:eb:a1:67:3b:5d:52:e9:79:cb:
                    25:ab:71:0b:17:40:df:2f:2f:d6:31:43:ae:fa:34:
                    25:a3:95:08:50:ea:1b:b5:57:ea:ee:ce:b4:25:87:
                    17:e9:97:ce:2e:43:c5:ba:fe:bc:b2:6d:ad:1d:bc:
                    a2:eb:c5:99:41:de:53:b8:5b:8b:38:cb:c0:0d:29:
                    34:85:bf:02:ed:59:0c:be:46:cf:58:12:60:6d:1f:
                    05:4d:0e:fa:53:71:06:07:43:15:bc:e0:1c:0e:f2:
                    48:5a:e8:46:91:f5:39:3d:a3:09:6c:c3:94:94:a1:
                    74:a6:84:42:63:45:19:20:e4:31:44:82:7c:15:8b:
                    05:40:7b:07:1c:46:2c:25:64:7b:1c:67:54:ba:94:
                    81:c6:9b:1e:63:69:32:e0:3d:c1:4f:af:40:0e:91:
                    33:5f:fa:0c:42:92:db:b3:b7:a1:26:14:c0:31:1f:
                    1f:4c:0a:3f:91:93:fc:8d:ee:b4:b2:3f:d7:5e:1e:
                    bd:e0:22:f6:e5:63:00:07:45:01:c6:2a:95:1d:4f:
                    bd:8f:93:17:d2:41:b0:7e:da:bf:65:eb:16:ea:8c:
                    91:fc:18:2c:40:0f:aa:f8:9f:53:4a:06:12:27:c3:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:A3:77:F2:56:D1:AB:01:81:C9:69:BA:E2:C0:98:82:F8:E9:D7:36
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/96A377F256D1AB0181C969BAE2C09882F8E9D736.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272619

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:61:6d:7c:40:a3:e9:5d:fc:21:22:b1:55:19:13:7a:6a:
         06:a0:bf:4d:9e:21:23:dd:29:7a:71:1a:f3:99:fe:73:05:46:
         f0:05:b1:3a:45:fc:9c:20:5d:75:41:b0:1e:fd:bb:9c:c6:8d:
         30:02:1f:0b:74:d9:c5:e8:ef:46:a1:e2:e3:66:7f:c3:76:ff:
         1b:71:6a:36:3e:a4:14:8c:7b:af:c9:e4:20:2c:d9:a7:c8:9a:
         96:26:32:09:e3:dd:2f:e2:b5:15:1d:fd:6c:4a:69:49:a7:af:
         79:c0:76:8b:fa:f4:47:47:16:ae:a1:5b:6d:5d:ce:76:5e:0c:
         d0:b2:1b:e1:c4:d5:4b:42:b1:e3:5a:83:23:6f:f3:55:49:95:
         e9:61:54:85:03:c3:f2:10:b4:a0:39:a2:71:1c:5f:f8:6e:a8:
         82:e5:a6:74:ef:c1:f3:e2:4e:cd:7e:f7:73:06:a1:8e:0f:a0:
         3e:2d:27:ce:71:39:c3:26:f4:0f:37:89:a8:ec:94:62:e4:b6:
         6d:4c:f8:74:8e:15:6f:26:52:12:07:2f:60:83:2b:d9:ec:7a:
         44:74:17:c4:fb:94:99:e2:0a:57:25:ea:8f:1c:2d:39:8c:05:
         bb:5b:a7:f5:c9:11:ec:4a:a8:fb:f5:be:bd:60:3c:6d:da:e5:
         38:62:9e:4d
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUZZVVHFN5x1AjEDubOdnF3ZBMT+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDkxNzA5NThaFw0yNTAyMDcxNzE0NThaMDMxMTAvBgNV
BAMTKDk2QTM3N0YyNTZEMUFCMDE4MUM5NjlCQUUyQzA5ODgyRjhFOUQ3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKT3aVnw6fkwRYLUZpYDzfEvw1
AeuhZztdUul5yyWrcQsXQN8vL9YxQ676NCWjlQhQ6hu1V+ruzrQlhxfpl84uQ8W6
/ryyba0dvKLrxZlB3lO4W4s4y8ANKTSFvwLtWQy+Rs9YEmBtHwVNDvpTcQYHQxW8
4BwO8kha6EaR9Tk9owlsw5SUoXSmhEJjRRkg5DFEgnwViwVAewccRiwlZHscZ1S6
lIHGmx5jaTLgPcFPr0AOkTNf+gxCktuzt6EmFMAxHx9MCj+Rk/yN7rSyP9deHr3g
IvblYwAHRQHGKpUdT72PkxfSQbB+2r9l6xbqjJH8GCxAD6r4n1NKBhInw56tAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWo3fyVtGrAYHJ
abriwJiC+OnXNjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydVpWclpnS1N4cnQyWUJpa1pTM2ZFN0VjUEh3blRhOUV3
dndyYjczOVQxci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydVpWclpnS1N4cnQyWUJpa1pTM2ZFN0VjUEh3blRhOUV3
dndyYjczOVQxci8wLzk2QTM3N0YyNTZEMUFCMDE4MUM5NjlCQUUyQzA5ODgyRjhF
OUQ3MzYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEhhQwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCjrMA0GCSqGSIb3DQEBCwUAA4IBAQCC1WFtfECj6V38
ISKxVRkTemoGoL9NniEj3Sl6cRrzmf5zBUbwBbE6RfycIF11QbAe/bucxo0wAh8L
dNnF6O9GoeLjZn/Ddv8bcWo2PqQUjHuvyeQgLNmnyJqWJjIJ490v4rUVHf1sSmlJ
p695wHaL+vRHRxauoVttXc52XgzQshvhxNVLQrHjWoMjb/NVSZXpYVSFA8PyELSg
OaJxHF/4bqiC5aZ078Hz4k7NfvdzBqGOD6A+LSfOcTnDJvQPN4mo7JRi5LZtTPh0
jhVvJlISBy9ggyvZ7HpEdBfE+5SZ4gpXJeqPHC05jAW7W6f1yRHsSqj79b69YDxt
2uU4Yp5N
-----END CERTIFICATE-----