Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.cer
File:                     9EBA1BA9267695A75FD5015C54F64CF52473073D.cer (raw, json)
Hash identifier:          aQsxcy6csPJVfcy7YCSD7+23eblmUQejI1UCG8KUIf8=
Subject key identifier:   9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69BDA63951C96D3979D73D32588791A627DD4B71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 May 2023 19:04:06 +0000
Certificate not after:    Tue 28 May 2024 19:09:06 +0000
Subordinate resources:    AS: 272248
                          IP: 2804:843c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bd:a6:39:51:c9:6d:39:79:d7:3d:32:58:87:91:a6:27:dd:4b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 30 19:04:06 2023 GMT
            Not After : May 28 19:09:06 2024 GMT
        Subject: CN=9EBA1BA9267695A75FD5015C54F64CF52473073D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:a7:98:28:8e:b0:4d:b7:fe:a6:70:16:9a:
                    c3:71:94:af:2b:3d:ae:c1:1e:9d:c3:89:a8:94:1d:
                    89:3c:2a:07:e7:e0:2d:89:e4:d5:1c:ea:92:1e:02:
                    03:cb:52:de:a0:f1:7a:0b:bf:2b:29:8c:13:65:45:
                    0d:30:c5:56:8d:2a:ab:33:c3:b2:92:3e:f4:b7:11:
                    6a:f9:a9:05:f7:50:f8:f3:e2:c1:8b:b7:1f:62:8a:
                    9e:1a:e4:d9:af:f0:e0:3b:bd:4b:66:d7:f3:83:fc:
                    04:0b:4e:ed:94:99:22:6f:fb:47:e7:8e:1d:53:5b:
                    bc:06:02:25:9b:e8:10:03:82:f5:31:66:0f:4a:e5:
                    20:df:a3:fe:10:03:7f:fe:89:86:e2:52:2e:1a:74:
                    14:78:55:ad:fb:07:3b:d8:28:91:0f:fe:03:1b:d2:
                    07:a1:a8:ae:54:35:e4:9f:84:56:30:fa:a2:0c:85:
                    40:d3:78:67:84:0c:eb:31:2f:86:36:f0:4d:40:d0:
                    bd:62:5f:df:01:ac:ee:9b:a3:d9:87:a1:71:68:a1:
                    66:b7:ab:90:02:74:a1:93:2d:ce:42:d5:9d:63:23:
                    59:9b:15:86:4a:ab:22:27:84:cb:54:d1:69:f7:14:
                    9c:f9:80:53:06:08:dd:6c:85:b6:8c:48:38:a9:78:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:843c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272248

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:04:39:0b:a7:d4:d7:50:6c:c8:9e:82:0e:f1:3e:1e:20:
         df:39:3f:61:c9:7a:33:17:2a:ed:16:10:2a:ef:fe:10:be:85:
         fd:8e:09:09:d6:a2:da:f1:e5:92:a0:60:a7:ce:e7:a1:1e:b3:
         e0:98:ae:bf:b9:7a:13:2e:3e:29:7c:f8:6b:35:72:b3:15:2e:
         fa:e5:9c:83:d9:1e:10:bf:49:de:ea:16:6f:45:60:ff:da:e8:
         0c:33:28:b5:02:db:e7:7f:52:df:00:0c:af:fa:c6:c2:64:50:
         2e:77:73:62:bf:91:95:2d:8b:e2:af:7c:ef:10:7e:cf:3d:fe:
         a5:37:f2:e4:1b:42:ee:81:45:88:cc:60:45:d3:ca:38:02:55:
         00:dd:10:a8:83:7d:24:b8:d6:40:f6:45:ff:98:c2:5e:66:ea:
         fc:73:b5:36:a7:65:3c:47:91:04:08:56:3e:43:01:0b:1f:18:
         c5:6d:68:bf:f7:28:b3:68:30:93:8a:92:f9:83:73:98:4d:c2:
         3f:87:80:a1:d7:34:26:ad:7f:7d:ab:d2:e0:6d:71:17:40:6a:
         2e:24:04:8c:de:b9:a4:ce:9f:15:21:48:2d:aa:3d:30:90:bd:
         62:b9:96:f8:04:58:38:1b:ab:17:f4:9a:c0:c2:5f:4b:d1:76:
         f6:24:23:cf
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUab2mOVHJbTl51z0yWIeRpifdS3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MzAxOTA0MDZaFw0yNDA1MjgxOTA5MDZaMDMxMTAvBgNV
BAMTKDlFQkExQkE5MjY3Njk1QTc1RkQ1MDE1QzU0RjY0Q0Y1MjQ3MzA3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCil6eYKI6wTbf+pnAWmsNxlK8r
Pa7BHp3DiaiUHYk8Kgfn4C2J5NUc6pIeAgPLUt6g8XoLvyspjBNlRQ0wxVaNKqsz
w7KSPvS3EWr5qQX3UPjz4sGLtx9iip4a5Nmv8OA7vUtm1/OD/AQLTu2UmSJv+0fn
jh1TW7wGAiWb6BADgvUxZg9K5SDfo/4QA3/+iYbiUi4adBR4Va37BzvYKJEP/gMb
0gehqK5UNeSfhFYw+qIMhUDTeGeEDOsxL4Y28E1A0L1iX98BrO6bo9mHoXFooWa3
q5ACdKGTLc5C1Z1jI1mbFYZKqyInhMtU0Wn3FJz5gFMGCN1shbaMSDipeMNrAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeuhupJnaVp1/V
AVxU9kz1JHMHPTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WUFMaldxVXBYQ2RWRDNDOG9TZk53OG9pQWtYc2tIdGo3
OUFmclB3OWNLeC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1lBTGpXcVVwWENkVkQzQzhvU2ZOdzhvaUFrWHNrSHRq
NzlBZnJQdzljS3gvMC85RUJBMUJBOTI2NzY5NUE3NUZENTAxNUM1NEY2NENGNTI0
NzMwNzNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBIQ8MBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQneDANBgkqhkiG9w0BAQsFAAOCAQEAjqcEOQun1NdQ
bMiegg7xPh4g3zk/Ycl6Mxcq7RYQKu/+EL6F/Y4JCdai2vHlkqBgp87noR6z4Jiu
v7l6Ey4+KXz4azVysxUu+uWcg9keEL9J3uoWb0Vg/9roDDMotQLb539S3wAMr/rG
wmRQLndzYr+RlS2L4q987xB+zz3+pTfy5BtC7oFFiMxgRdPKOAJVAN0QqIN9JLjW
QPZF/5jCXmbq/HO1NqdlPEeRBAhWPkMBCx8YxW1ov/cos2gwk4qS+YNzmE3CP4eA
odc0Jq1/favS4G1xF0BqLiQEjN65pM6fFSFILao9MJC9YrmW+ARYOBurF/SawMJf
S9F29iQjzw==
-----END CERTIFICATE-----