Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9CB06154825E1486A23172E298744A3EA86F88E8.cer
File:                     9CB06154825E1486A23172E298744A3EA86F88E8.cer (raw, json)
Hash identifier:          tsNut8fBrHBVVKx02mhEPSGJJoJRRxEPL2YFmeIEIhk=
Subject key identifier:   9C:B0:61:54:82:5E:14:86:A2:31:72:E2:98:74:4A:3E:A8:6F:88:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79D4AD8118E24CFA7C0102E5E3CFEFE4E01DE6EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/9CB06154825E1486A23172E298744A3EA86F88E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 19:06:36 +0000
Certificate not after:    Mon 24 Mar 2025 19:11:36 +0000
Subordinate resources:    AS: 271430
                          IP: 186.209.164.0/22
                          IP: 2804:7b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:ad:81:18:e2:4c:fa:7c:01:02:e5:e3:cf:ef:e4:e0:1d:e6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 19:06:36 2024 GMT
            Not After : Mar 24 19:11:36 2025 GMT
        Subject: CN=9CB06154825E1486A23172E298744A3EA86F88E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:07:68:be:2c:57:e2:2c:07:aa:7c:9a:4f:
                    aa:5c:3d:15:54:18:d0:cc:02:f4:a2:e3:93:38:ea:
                    16:17:dd:cb:d9:df:42:a8:bf:f4:cd:f2:b0:0e:52:
                    93:15:d3:eb:a6:fc:29:60:66:df:b9:68:68:1f:31:
                    21:20:b4:d9:49:a0:e2:eb:a2:12:83:ec:42:51:93:
                    3b:4b:54:96:43:27:aa:51:82:ff:e6:49:6f:11:61:
                    b5:b6:ff:06:e7:94:6b:f2:84:4f:94:46:67:3e:d2:
                    50:1e:fd:92:98:e5:5e:5a:f0:93:e2:b0:f6:46:c3:
                    35:3e:bb:b2:7a:bb:6f:80:a8:30:ae:9e:ea:36:11:
                    ce:4b:6b:13:fe:e3:0a:f0:45:1b:c2:af:c5:eb:33:
                    33:37:2a:cc:e6:27:da:c7:ff:d1:0f:13:0d:84:64:
                    1d:c0:35:2f:fb:a6:0e:7e:30:58:7d:2c:f7:75:cf:
                    f8:e2:84:aa:81:b6:bd:0e:6d:6d:55:9b:15:1d:82:
                    2a:2f:48:ca:7c:ba:27:3a:a4:a0:76:e3:74:c4:d0:
                    55:43:ed:42:47:eb:56:f0:a5:07:09:37:2c:1d:bf:
                    db:e5:85:6d:41:18:f5:7e:b0:50:14:55:aa:2a:6d:
                    81:8a:f3:5b:b6:47:c8:9a:8f:2d:f4:31:9f:88:a0:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:B0:61:54:82:5E:14:86:A2:31:72:E2:98:74:4A:3E:A8:6F:88:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YrTCJdNiPg4skYrtBotPzKFXjfveoccrjYjqqC6GuYW/0/9CB06154825E1486A23172E298744A3EA86F88E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.164.0/22
                IPv6:
                  2804:7b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271430

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:a2:cb:1b:af:db:79:9c:2a:ee:0a:8a:1f:04:2d:13:6d:
         87:c2:ce:c6:2d:03:60:60:76:ea:7d:83:ec:ad:f4:10:1d:bd:
         98:f7:e0:46:79:52:73:43:6e:b6:06:42:30:fb:d4:7a:2b:86:
         06:71:cd:b4:16:99:4b:46:ad:af:54:6f:1b:72:5b:60:e4:17:
         83:9e:0c:25:43:3b:c3:1c:e6:9a:b0:c0:02:34:10:fe:18:ca:
         23:47:1f:69:fd:63:2d:5d:4c:36:ba:9a:03:9b:af:8d:0b:3e:
         e5:81:da:30:52:c5:90:a5:76:ba:c2:cc:66:b8:6b:a1:07:eb:
         0e:0f:4a:34:d5:7f:cc:98:8b:10:e3:69:01:12:a9:47:21:d2:
         f3:38:5f:4f:c7:7f:02:50:46:84:c4:0f:23:6e:87:d1:15:a0:
         06:b4:bf:24:c5:85:13:86:97:b0:e5:7c:e9:07:5b:bf:28:04:
         cf:f6:ae:3e:ec:d3:5a:80:d9:91:db:c4:0d:20:ae:e5:ca:12:
         25:fe:17:6e:b4:d1:87:25:17:0e:59:b2:f3:7e:f9:a2:83:fd:
         38:9f:bc:04:87:84:85:37:26:27:4e:a5:51:3a:85:21:1c:81:
         b2:e3:99:a4:a4:e8:1f:eb:48:1c:51:4d:00:46:21:b8:16:7e:
         13:4e:19:27
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUedStgRjiTPp8AQLl48/v5OAd5u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjUxOTA2MzZaFw0yNTAzMjQxOTExMzZaMDMxMTAvBgNV
BAMTKDlDQjA2MTU0ODI1RTE0ODZBMjMxNzJFMjk4NzQ0QTNFQTg2Rjg4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdwdovixX4iwHqnyaT6pcPRVU
GNDMAvSi45M46hYX3cvZ30Kov/TN8rAOUpMV0+um/ClgZt+5aGgfMSEgtNlJoOLr
ohKD7EJRkztLVJZDJ6pRgv/mSW8RYbW2/wbnlGvyhE+URmc+0lAe/ZKY5V5a8JPi
sPZGwzU+u7J6u2+AqDCunuo2Ec5LaxP+4wrwRRvCr8XrMzM3KszmJ9rH/9EPEw2E
ZB3ANS/7pg5+MFh9LPd1z/jihKqBtr0ObW1VmxUdgiovSMp8uic6pKB243TE0FVD
7UJH61bwpQcJNywdv9vlhW1BGPV+sFAUVaoqbYGK81u2R8iajy30MZ+IoEljAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScsGFUgl4UhqIx
cuKYdEo+qG+I6DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WXJUQ0pkTmlQZzRza1lydEJvdFB6S0ZYamZ2ZW9jY3Jq
WWpxcUM2R3VZVy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WXJUQ0pkTmlQZzRza1lydEJvdFB6S0ZYamZ2ZW9jY3Jq
WWpxcUM2R3VZVy8wLzlDQjA2MTU0ODI1RTE0ODZBMjMxNzJFMjk4NzQ0QTNFQTg2
Rjg4RTgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArrRpDANBAIAAjAHAwUA
KAR7aDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJEYwDQYJKoZIhvcNAQELBQAD
ggEBAJ9hossbr9t5nCruCoofBC0TbYfCzsYtA2Bgdup9g+yt9BAdvZj34EZ5UnND
brYGQjD71HorhgZxzbQWmUtGra9UbxtyW2DkF4OeDCVDO8Mc5pqwwAI0EP4YyiNH
H2n9Yy1dTDa6mgObr40LPuWB2jBSxZCldrrCzGa4a6EH6w4PSjTVf8yYixDjaQES
qUch0vM4X0/HfwJQRoTEDyNuh9EVoAa0vyTFhROGl7DlfOkHW78oBM/2rj7s01qA
2ZHbxA0gruXKEiX+F2600YclFw5ZsvN++aKD/TifvASHhIU3JidOpVE6hSEcgbLj
maSk6B/rSBxRTQBGIbgWfhNOGSc=
-----END CERTIFICATE-----