Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer
File:                     AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.cer (raw, json)
Hash identifier:          RTs6rAfykh/C9+7EYW7Fm6bOU64bhfXG5YkxL+g9n48=
Subject key identifier:   AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CE0D2F9C06F86F4698DDA6C2BC59A434582F960
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 13:02:54 +0000
Certificate not after:    Mon 24 Jun 2024 13:07:54 +0000
Subordinate resources:    AS: 270413
                          IP: 170.0.76.0/22
                          IP: 190.89.244.0/22
                          IP: 2804:6ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e0:d2:f9:c0:6f:86:f4:69:8d:da:6c:2b:c5:9a:43:45:82:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 13:02:54 2023 GMT
            Not After : Jun 24 13:07:54 2024 GMT
        Subject: CN=AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:e1:a7:ed:28:65:d4:ed:41:2e:d9:52:f6:
                    22:52:77:9e:e4:f4:23:4c:98:f3:30:25:6c:a5:1e:
                    dc:e4:b9:e1:80:63:dd:35:58:d6:07:f0:d2:f6:0b:
                    83:d1:01:f4:33:a6:93:78:83:de:03:ce:c9:51:04:
                    56:18:6d:15:dc:a7:1f:25:da:31:a9:91:d6:44:1a:
                    49:55:bf:ec:76:ca:e0:21:95:08:9e:3b:23:bb:36:
                    9a:07:59:8e:24:44:44:e6:77:0d:6e:24:02:8a:31:
                    97:c9:95:3e:90:57:b3:d5:8f:12:6a:4a:46:29:0b:
                    0d:1c:9a:eb:1c:22:e9:fd:23:21:43:fa:d7:da:c2:
                    e6:b0:aa:18:c8:be:54:a4:e8:4d:f9:46:e8:31:49:
                    ae:4a:13:22:e1:07:4a:71:63:73:ec:8b:08:6c:d0:
                    b6:66:43:3d:32:e2:22:13:48:fc:84:f2:71:44:01:
                    6a:1c:77:a4:25:7f:8f:f4:f0:ef:2a:55:90:8a:7a:
                    9c:8b:0c:0b:aa:5e:d3:1c:76:eb:9c:82:98:d2:6e:
                    aa:50:6a:ba:50:80:60:9e:06:19:26:36:0f:d3:14:
                    ac:35:17:9d:7e:46:79:42:a9:ce:43:c9:4c:0a:b9:
                    14:3c:ed:32:53:fb:21:74:00:e8:a6:87:ca:32:94:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AA:50:79:D0:DD:3D:74:B9:F2:F3:08:3F:F5:2A:9C:68:F6:6B:F2:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/0/AA5079D0DD3D74B9F2F3083FF52A9C68F66BF2A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/22
                  190.89.244.0/22
                IPv6:
                  2804:6ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270413

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:82:95:f5:e9:8e:69:7b:72:ee:ec:bf:c6:28:6b:ae:d5:
         8d:6b:75:f0:55:50:a9:05:91:dc:63:56:93:2f:ff:fd:de:00:
         6e:73:5b:fa:6e:2b:0e:7c:71:22:bb:88:72:17:92:05:04:88:
         aa:ea:19:0c:26:69:f1:30:a7:e8:ed:67:49:db:08:7a:42:38:
         f4:0c:0a:af:4b:9f:2c:df:78:fb:26:46:41:94:94:ff:c2:5e:
         f5:0f:2b:fe:d4:ff:d5:b2:1d:9e:9f:f6:6f:28:45:7e:68:65:
         56:5d:bf:f1:57:2e:79:15:a6:0d:ec:6c:7f:9b:e0:b4:da:aa:
         5d:3e:c5:c5:7e:61:01:f5:e3:0e:91:49:60:1b:39:5e:db:1e:
         78:3e:e9:46:59:bb:af:c8:e0:c6:4c:ff:5a:e2:26:0f:71:0a:
         82:aa:97:6e:c8:89:db:5e:05:07:f8:36:a2:17:8d:f1:2f:4b:
         19:1c:cc:4c:b4:95:0a:5b:9e:9a:6f:e0:d0:42:bb:db:e2:54:
         99:85:2c:b1:f4:4d:c3:c7:de:bb:37:ac:26:1a:34:4f:31:2e:
         62:d3:bb:52:fb:a3:80:10:a9:c0:9a:fc:41:b3:38:6a:d1:95:
         70:6e:72:1f:28:f9:0b:0c:5a:c9:ec:ac:6d:8f:18:36:73:49:
         f5:5d:dc:8b
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUbODS+cBvhvRpjdpsK8WaQ0WC+WAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjYxMzAyNTRaFw0yNDA2MjQxMzA3NTRaMDMxMTAvBgNV
BAMTKEFBNTA3OUQwREQzRDc0QjlGMkYzMDgzRkY1MkE5QzY4RjY2QkYyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmD+Gn7Shl1O1BLtlS9iJSd57k
9CNMmPMwJWylHtzkueGAY901WNYH8NL2C4PRAfQzppN4g94DzslRBFYYbRXcpx8l
2jGpkdZEGklVv+x2yuAhlQieOyO7NpoHWY4kRETmdw1uJAKKMZfJlT6QV7PVjxJq
SkYpCw0cmuscIun9IyFD+tfawuawqhjIvlSk6E35RugxSa5KEyLhB0pxY3Psiwhs
0LZmQz0y4iITSPyE8nFEAWocd6Qlf4/08O8qVZCKepyLDAuqXtMcduucgpjSbqpQ
arpQgGCeBhkmNg/TFKw1F51+RnlCqc5DyUwKuRQ87TJT+yF0AOimh8oylDJ7AgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqUHnQ3T10ufLz
CD/1Kpxo9mvyqTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82TmdaWW5DZzRaUGpUbmVSNEx0NVkzckwxUGNRcFBxcFpE
YWdzQlNHNmhhQi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82TmdaWW5DZzRaUGpUbmVSNEx0NVkzckwxUGNRcFBxcFpE
YWdzQlNHNmhhQi8wL0FBNTA3OUQwREQzRDc0QjlGMkYzMDgzRkY1MkE5QzY4RjY2
QkYyQTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqoATAMEAr5Z9DANBAIA
AjAHAwUAKARroDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIE0wDQYJKoZIhvcN
AQELBQADggEBAGtvgpX16Y5pe3Lu7L/GKGuu1Y1rdfBVUKkFkdxjVpMv//3eAG5z
W/puKw58cSK7iHIXkgUEiKrqGQwmafEwp+jtZ0nbCHpCOPQMCq9LnyzfePsmRkGU
lP/CXvUPK/7U/9WyHZ6f9m8oRX5oZVZdv/FXLnkVpg3sbH+b4LTaql0+xcV+YQH1
4w6RSWAbOV7bHng+6UZZu6/I4MZM/1riJg9xCoKql27IidteBQf4NqIXjfEvSxkc
zEy0lQpbnppv4NBCu9viVJmFLLH0TcPH3rs3rCYaNE8xLmLTu1L7o4AQqcCa/EGz
OGrRlXBuch8o+QsMWsnsrG2PGDZzSfVd3Is=
-----END CERTIFICATE-----