Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.cer
File:                     9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.cer (raw, json)
Hash identifier:          gRjlKRwC7TAIgoPUAy1f00Ko+9RbGcaDbAQrULkdDWk=
Subject key identifier:   9E:A6:20:FA:5E:2E:B3:D7:28:1F:44:6E:7F:FB:AA:1B:71:0B:55:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       484B73A0ACD3E56D7B73036F221C7C5DC2295723
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Jul 2023 13:08:18 +0000
Certificate not after:    Sun 21 Jul 2024 13:13:18 +0000
Subordinate resources:    AS: 53182
                          IP: 186.227.16.0/20
                          IP: 2804:118c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4b:73:a0:ac:d3:e5:6d:7b:73:03:6f:22:1c:7c:5d:c2:29:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 23 13:08:18 2023 GMT
            Not After : Jul 21 13:13:18 2024 GMT
        Subject: CN=9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:eb:0e:7d:13:bc:2c:c1:6e:ff:dd:e9:fe:
                    28:be:18:c3:0a:7b:17:09:68:17:82:cc:81:bb:3b:
                    8e:05:b2:02:76:16:01:23:dd:3d:0f:62:1d:7d:a8:
                    69:5d:42:70:88:2b:f9:52:64:d5:ca:08:6b:4e:3f:
                    72:96:e4:61:32:dc:bc:1a:f0:6d:ad:df:8b:33:d6:
                    ee:fb:39:d7:08:c7:37:1c:9a:c3:18:64:81:d9:09:
                    ec:cb:f0:82:0d:c0:21:c7:d9:73:fe:65:8d:d2:5e:
                    64:21:3c:1f:a3:6d:7c:8e:73:2f:84:d9:f5:a4:c4:
                    d8:26:3c:81:11:99:47:f1:07:3b:15:43:2d:dc:89:
                    f4:6b:bd:c4:61:4f:49:af:0c:c8:cf:b2:94:09:55:
                    f1:86:a3:87:99:65:98:c9:35:3c:cd:cb:76:c4:75:
                    6c:3d:74:f8:2a:03:8e:93:dd:8e:43:61:96:71:3b:
                    a0:41:ac:e6:18:8d:0b:6d:6e:e9:00:04:aa:f0:55:
                    5e:21:1f:a6:ea:a4:5b:ac:91:fb:93:3a:a9:74:94:
                    31:0b:80:ce:25:45:8a:47:46:a0:84:1e:85:40:92:
                    87:2c:04:4d:09:a2:c5:f1:da:04:6a:5f:3e:e2:45:
                    a5:f1:ac:84:8c:bf:fe:d8:5a:db:c3:ba:4a:c8:32:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:A6:20:FA:5E:2E:B3:D7:28:1F:44:6E:7F:FB:AA:1B:71:0B:55:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/9EA620FA5E2EB3D7281F446E7FFBAA1B710B5515.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.16.0/20
                IPv6:
                  2804:118c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53182

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:be:d6:fa:87:a9:3e:92:e1:2b:af:10:ff:7a:39:7b:7c:
         8d:79:f5:ca:e4:90:e5:81:9f:ed:a3:3a:05:37:c7:21:1b:71:
         63:7f:2f:bd:2c:d2:97:8f:46:3a:d4:31:db:50:c4:8b:42:64:
         e8:f2:35:20:ab:0c:b4:f8:06:b7:66:8d:c8:18:cb:89:35:5b:
         7d:d1:9e:ad:6e:19:b3:45:e0:86:ff:da:85:a5:03:31:4b:18:
         6e:dd:06:7d:3a:bf:3c:ed:fa:c9:99:c3:98:ca:6b:30:42:ae:
         a2:5c:98:5a:29:10:64:27:bd:ca:cb:d8:92:0c:0f:3b:5c:eb:
         15:31:77:52:d0:6e:6e:6d:ea:d4:25:8a:95:f5:ab:f9:a7:1b:
         e7:bb:23:34:d0:a1:51:f8:ae:6b:bd:b5:4f:09:a6:ff:52:fa:
         11:1f:0f:87:fb:22:3c:37:31:00:c2:f1:34:fa:16:aa:dd:44:
         f0:86:ae:b9:22:13:30:bd:27:19:0f:8c:a5:c4:2a:b2:a6:1b:
         5b:43:40:07:91:ec:e3:8e:27:3f:ad:b4:25:f8:69:f9:12:0e:
         23:b2:1c:d7:52:e9:79:d3:89:38:81:90:60:a8:dd:14:fa:ec:
         65:81:91:d0:a5:47:72:a8:1c:a3:51:71:53:ec:b1:97:de:47:
         11:d1:97:4a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSEtzoKzT5W17cwNvIhx8XcIpVyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjMxMzA4MThaFw0yNDA3MjExMzEzMThaMDMxMTAvBgNV
BAMTKDlFQTYyMEZBNUUyRUIzRDcyODFGNDQ2RTdGRkJBQTFCNzEwQjU1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQresOfRO8LMFu/93p/ii+GMMK
excJaBeCzIG7O44FsgJ2FgEj3T0PYh19qGldQnCIK/lSZNXKCGtOP3KW5GEy3Lwa
8G2t34sz1u77OdcIxzccmsMYZIHZCezL8IINwCHH2XP+ZY3SXmQhPB+jbXyOcy+E
2fWkxNgmPIERmUfxBzsVQy3cifRrvcRhT0mvDMjPspQJVfGGo4eZZZjJNTzNy3bE
dWw9dPgqA46T3Y5DYZZxO6BBrOYYjQttbukABKrwVV4hH6bqpFuskfuTOql0lDEL
gM4lRYpHRqCEHoVAkocsBE0JosXx2gRqXz7iRaXxrISMv/7YWtvDukrIMtEhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSepiD6Xi6z1ygf
RG5/+6obcQtVFTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85Ulc4V0ZtWmM5c0Y3eXliRkxCVXZyb0V2NU40RXhVa3Bh
ZW5pS2t1YldaeC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85Ulc4V0ZtWmM5c0Y3eXliRkxCVXZyb0V2NU40RXhVa3Bh
ZW5pS2t1YldaeC8wLzlFQTYyMEZBNUUyRUIzRDcyODFGNDQ2RTdGRkJBQTFCNzEw
QjU1MTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBLrjEDANBAIAAjAHAwUA
KAQRjDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAz74wDQYJKoZIhvcNAQELBQAD
ggEBALUgvtb6h6k+kuErrxD/ejl7fI159crkkOWBn+2jOgU3xyEbcWN/L70s0peP
RjrUMdtQxItCZOjyNSCrDLT4BrdmjcgYy4k1W33Rnq1uGbNF4Ib/2oWlAzFLGG7d
Bn06vzzt+smZw5jKazBCrqJcmFopEGQnvcrL2JIMDztc6xUxd1LQbm5t6tQlipX1
q/mnG+e7IzTQoVH4rmu9tU8Jpv9S+hEfD4f7Ijw3MQDC8TT6FqrdRPCGrrkiEzC9
JxkPjKXEKrKmG1tDQAeR7OOOJz+ttCX4afkSDiOyHNdS6XnTiTiBkGCo3RT67GWB
kdClR3KoHKNRcVPssZfeRxHRl0o=
-----END CERTIFICATE-----