Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer
File:                     A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.cer (raw, json)
Hash identifier:          47CvMMcvFlWhOxFrywe3Y55EtHsC72Ub0RFtn3/aQ90=
Subject key identifier:   A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A8296D18FA590F2515C8732D212F6CDF791ABC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Apr 2024 11:01:46 +0000
Certificate not after:    Thu 10 Apr 2025 11:06:46 +0000
Subordinate resources:    AS: 270570
                          IP: 201.49.136.0/22
                          IP: 2804:6e04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:82:96:d1:8f:a5:90:f2:51:5c:87:32:d2:12:f6:cd:f7:91:ab:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 11:01:46 2024 GMT
            Not After : Apr 10 11:06:46 2025 GMT
        Subject: CN=A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:61:3b:ad:51:c1:12:0a:8f:86:97:f5:d9:
                    5c:c5:a6:48:b4:9c:fa:6f:47:a3:8a:1f:47:e9:d9:
                    2f:e6:f2:58:1f:1a:31:eb:d8:4d:8c:9b:ad:f3:72:
                    27:be:e6:ea:10:96:70:78:26:a9:61:1d:8d:d3:92:
                    b6:a5:eb:66:a9:e3:2e:85:de:5b:55:f4:fa:3c:42:
                    fe:c2:33:8a:98:44:48:aa:68:5e:59:c9:a4:ae:fb:
                    7d:e5:b5:88:40:61:c3:66:b1:d8:76:26:27:b9:83:
                    13:4e:e7:99:f1:cd:de:33:ca:84:d3:ae:12:85:8c:
                    7f:57:76:22:13:d0:da:b0:43:5f:b7:2d:45:b9:28:
                    2c:cc:6c:48:eb:01:92:fb:00:41:7e:82:b5:9f:e8:
                    ef:6a:18:7b:3c:51:1c:d9:54:2c:b9:1e:b3:22:93:
                    2c:db:d5:ce:e9:eb:60:e1:f3:9d:69:32:57:91:da:
                    ac:6b:ef:2b:be:d1:a3:58:2c:4e:0d:c6:41:6d:e0:
                    62:06:67:7e:af:c3:41:92:0d:b7:96:d5:21:ca:93:
                    d8:67:6b:c8:14:e7:42:54:e8:29:df:e3:1c:06:de:
                    3b:77:a5:7f:81:72:54:56:4b:16:8d:37:cf:6c:a4:
                    97:d6:1e:7b:10:09:c0:0c:07:7a:59:dc:98:e6:99:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:C9:C0:71:6D:9C:7E:79:1D:CE:72:34:CA:4C:2D:FD:11:B8:76:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/A3C9C0716D9C7E791DCE7234CA4C2DFD11B876BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/22
                IPv6:
                  2804:6e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270570

    Signature Algorithm: sha256WithRSAEncryption
         82:5b:6f:70:74:06:fa:29:5d:45:a2:44:4d:36:35:f7:a7:03:
         a5:7a:b0:0a:8f:e9:5d:c1:ef:a2:87:02:b4:05:09:46:eb:e0:
         61:ba:a7:d3:99:06:a6:7d:c5:01:3c:62:00:2b:a5:af:d5:2f:
         a1:5e:a6:52:78:f3:b7:30:46:be:46:9e:13:28:08:94:cf:26:
         a6:71:c4:e0:55:f3:6b:5a:3f:8f:22:f6:27:03:aa:b1:3c:f4:
         66:45:f8:34:bf:ac:b8:f0:e4:74:5c:97:c0:7c:1e:24:b4:f5:
         dc:0c:41:e2:ff:22:3f:0b:f0:91:1d:86:02:53:c7:87:cb:78:
         0b:45:a4:71:7a:23:5b:61:2d:da:bd:60:0f:94:ab:61:a6:ea:
         2e:e0:74:72:a4:ed:1f:02:46:e7:43:77:1c:d1:6f:07:25:cf:
         b8:d3:0c:64:2a:f4:0a:41:34:09:c9:d8:90:76:df:91:ad:f5:
         36:2a:9e:dc:e3:d2:05:f3:c0:35:92:9e:23:91:a7:9f:76:8b:
         63:1c:39:13:ee:cd:41:1f:5d:cd:c5:e3:c9:f8:2e:14:c8:ab:
         15:f0:5e:1a:11:0f:42:70:db:30:cf:2d:93:45:c9:e3:14:25:
         cb:8f:0e:a2:8c:dd:a3:a4:0e:e1:ce:67:a9:ec:7f:74:6c:e4:
         31:34:b7:f2
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaoKW0Y+lkPJRXIcy0hL2zfeRq8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTExMTAxNDZaFw0yNTA0MTAxMTA2NDZaMDMxMTAvBgNV
BAMTKEEzQzlDMDcxNkQ5QzdFNzkxRENFNzIzNENBNEMyREZEMTFCODc2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31WE7rVHBEgqPhpf12VzFpki0
nPpvR6OKH0fp2S/m8lgfGjHr2E2Mm63zcie+5uoQlnB4JqlhHY3Tkral62ap4y6F
3ltV9Po8Qv7CM4qYREiqaF5ZyaSu+33ltYhAYcNmsdh2Jie5gxNO55nxzd4zyoTT
rhKFjH9XdiIT0NqwQ1+3LUW5KCzMbEjrAZL7AEF+grWf6O9qGHs8URzZVCy5HrMi
kyzb1c7p62Dh851pMleR2qxr7yu+0aNYLE4NxkFt4GIGZ36vw0GSDbeW1SHKk9hn
a8gU50JU6Cnf4xwG3jt3pX+BclRWSxaNN89spJfWHnsQCcAMB3pZ3JjmmSyrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjycBxbZx+eR3O
cjTKTC39Ebh2vDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81NGpXZlNVWDRyczJDeGY1M0dtOTVYTFBWU3BSY1pBc1BW
MXAyd1FRaHh3bi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNTRqV2ZTVVg0cnMyQ3hmNTNHbTk1WExQVlNwUmNaQXNQ
VjFwMndRUWh4d24vMC9BM0M5QzA3MTZEOUM3RTc5MURDRTcyMzRDQTRDMkRGRDEx
Qjg3NkJDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALJMYgwDQQCAAIwBwMF
ACgEbgQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCDqMA0GCSqGSIb3DQEBCwUA
A4IBAQCCW29wdAb6KV1FokRNNjX3pwOlerAKj+ldwe+ihwK0BQlG6+BhuqfTmQam
fcUBPGIAK6Wv1S+hXqZSePO3MEa+Rp4TKAiUzyamccTgVfNrWj+PIvYnA6qxPPRm
Rfg0v6y48OR0XJfAfB4ktPXcDEHi/yI/C/CRHYYCU8eHy3gLRaRxeiNbYS3avWAP
lKthpuou4HRypO0fAkbnQ3cc0W8HJc+40wxkKvQKQTQJydiQdt+RrfU2Kp7c49IF
88A1kp4jkaefdotjHDkT7s1BH13NxePJ+C4UyKsV8F4aEQ9CcNswzy2TRcnjFCXL
jw6ijN2jpA7hzmep7H90bOQxNLfy
-----END CERTIFICATE-----