Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer
File:                     9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.cer (raw, json)
Hash identifier:          oYOUEEbP0bighNjy+75FvdQ9aQFc8Rn9cZnorxoSwDs=
Subject key identifier:   9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63D6F1BCD48475473BD39FE8B70F559DE0A4CDC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 19:09:51 +0000
Certificate not after:    Fri 14 Feb 2025 19:14:51 +0000
Subordinate resources:    AS: 270282
                          IP: 201.71.4.0/22
                          IP: 2804:69a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:f1:bc:d4:84:75:47:3b:d3:9f:e8:b7:0f:55:9d:e0:a4:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 19:09:51 2024 GMT
            Not After : Feb 14 19:14:51 2025 GMT
        Subject: CN=9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:86:bf:9c:2d:3f:88:9d:5e:2e:b2:f4:60:
                    da:14:9e:b6:37:6f:03:81:aa:45:af:e3:83:47:4e:
                    f0:06:a8:9a:ce:bf:0a:12:ec:00:19:35:77:35:43:
                    67:a7:00:13:3c:d3:56:8e:41:01:c9:22:7d:30:93:
                    02:90:a0:f4:b1:b6:13:8c:97:e7:a8:ea:70:fc:99:
                    57:b5:c6:e9:ae:9e:2d:d7:bd:70:87:11:55:14:c4:
                    41:d5:7c:b5:bc:38:5f:af:8c:ef:91:6a:40:ba:7c:
                    be:1d:6c:44:d5:46:6b:39:fa:a7:41:26:4b:d1:a0:
                    ed:d4:6c:2f:f4:59:8b:bf:f4:6c:4b:a6:d7:55:9b:
                    b4:cf:db:f9:8d:cd:ef:ed:39:af:30:40:0d:f8:f1:
                    46:89:1c:68:9b:d5:d3:b4:bf:3d:de:b9:95:1b:e9:
                    4d:d2:cc:89:76:73:0c:89:98:91:14:77:6a:34:9c:
                    c3:21:d5:07:03:ca:45:17:35:15:19:00:99:1a:3e:
                    9d:83:e9:85:ac:89:17:1e:50:dd:41:6f:c0:86:21:
                    f7:5c:34:0f:fb:bf:ab:44:11:df:ee:86:a4:c9:0d:
                    e2:cd:60:d8:dd:3e:64:a4:05:55:89:58:2b:8b:44:
                    45:c8:02:08:1f:a2:a1:cf:26:5c:b7:7b:51:8b:e7:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:E8:CE:BD:C4:E0:3A:AB:44:40:17:4F:1E:B0:D0:64:41:ED:A9:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/0/9CE8CEBDC4E03AAB4440174F1EB0D06441EDA987.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.4.0/22
                IPv6:
                  2804:69a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270282

    Signature Algorithm: sha256WithRSAEncryption
         26:25:0f:39:b9:d4:79:e8:f0:ca:5c:71:19:ec:0a:47:3a:65:
         a6:02:d9:87:ad:46:e7:3d:46:6e:af:7e:2a:81:69:bf:bf:0d:
         ab:4b:95:9f:44:e7:5e:1d:e9:ba:35:6e:aa:ac:14:2e:fb:7a:
         99:7c:77:05:77:9e:e7:ce:a5:98:6c:69:14:77:86:b1:5d:f5:
         b4:b7:3c:9b:c5:43:a7:db:c4:42:32:4d:ca:f1:5e:f4:0b:18:
         7c:5c:fa:39:8e:e9:e6:9c:52:97:ef:65:26:b3:4d:93:83:77:
         ef:d7:af:1b:fa:ad:0a:98:7c:41:96:4b:39:7b:e8:86:fe:68:
         23:36:ec:74:ae:f2:49:c9:bc:4a:51:3b:df:de:89:7d:da:26:
         c7:cf:df:55:f9:bd:3a:d4:23:20:3a:ac:e2:d8:a2:22:15:5d:
         8e:02:3b:8e:d3:4d:e8:73:40:13:21:e6:3d:dd:61:ff:35:2b:
         3d:b9:b4:fe:62:be:3c:6e:b4:4d:5c:b8:42:89:39:0d:83:ca:
         9d:f5:21:57:54:41:2d:44:45:69:fa:04:c8:d9:93:b6:9c:3d:
         a3:d1:b8:4a:ae:e7:18:40:29:fb:54:71:17:5f:9d:82:63:d4:
         ac:c0:24:65:d9:04:7e:e4:97:99:66:ab:a8:4f:9a:12:16:e5:
         e7:c3:02:20
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUY9bxvNSEdUc705/otw9VneCkzckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTYxOTA5NTFaFw0yNTAyMTQxOTE0NTFaMDMxMTAvBgNV
BAMTKDlDRThDRUJEQzRFMDNBQUI0NDQwMTc0RjFFQjBEMDY0NDFFREE5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMIa/nC0/iJ1eLrL0YNoUnrY3
bwOBqkWv44NHTvAGqJrOvwoS7AAZNXc1Q2enABM801aOQQHJIn0wkwKQoPSxthOM
l+eo6nD8mVe1xumuni3XvXCHEVUUxEHVfLW8OF+vjO+RakC6fL4dbETVRms5+qdB
JkvRoO3UbC/0WYu/9GxLptdVm7TP2/mNze/tOa8wQA348UaJHGib1dO0vz3euZUb
6U3SzIl2cwyJmJEUd2o0nMMh1QcDykUXNRUZAJkaPp2D6YWsiRceUN1Bb8CGIfdc
NA/7v6tEEd/uhqTJDeLNYNjdPmSkBVWJWCuLREXIAggfoqHPJly3e1GL53unAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSc6M69xOA6q0RA
F08esNBkQe2phzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbUViQjI3NktvUkVtWm5KVXl6M043WlhMMWNTN2I1Mnpt
Znp5TFlTVUU5ZS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HbUViQjI3NktvUkVtWm5KVXl6M043WlhMMWNTN2I1Mnpt
Znp5TFlTVUU5ZS8wLzlDRThDRUJEQzRFMDNBQUI0NDQwMTc0RjFFQjBEMDY0NDFF
REE5ODcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAslHBDANBAIAAjAHAwUA
KARppDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH8owDQYJKoZIhvcNAQELBQAD
ggEBACYlDzm51Hno8MpccRnsCkc6ZaYC2YetRuc9Rm6vfiqBab+/DatLlZ9E514d
6bo1bqqsFC77epl8dwV3nufOpZhsaRR3hrFd9bS3PJvFQ6fbxEIyTcrxXvQLGHxc
+jmO6eacUpfvZSazTZODd+/Xrxv6rQqYfEGWSzl76Ib+aCM27HSu8knJvEpRO9/e
iX3aJsfP31X5vTrUIyA6rOLYoiIVXY4CO47TTehzQBMh5j3dYf81Kz25tP5ivjxu
tE1cuEKJOQ2Dyp31IVdUQS1ERWn6BMjZk7acPaPRuEqu5xhAKftUcRdfnYJj1KzA
JGXZBH7kl5lmq6hPmhIW5efDAiA=
-----END CERTIFICATE-----