Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer
File:                     AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.cer (raw, json)
Hash identifier:          y4uB4yzFAxhBUyhNt2cpcxwZk8s7iP8mwNiyeWcyluE=
Subject key identifier:   AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       027768F5766935660EEE7D1CFCAAEB25C09ED8B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 18:14:04 +0000
Certificate not after:    Wed 01 Jan 2025 18:19:04 +0000
Subordinate resources:    AS: 271267
                          IP: 168.197.180.0/22
                          IP: 2804:78d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:77:68:f5:76:69:35:66:0e:ee:7d:1c:fc:aa:eb:25:c0:9e:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 18:14:04 2024 GMT
            Not After : Jan  1 18:19:04 2025 GMT
        Subject: CN=AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:54:1b:01:fc:5f:9d:43:43:79:3a:8b:f7:
                    fe:26:60:40:48:c1:8e:1b:31:82:e9:e5:7a:38:97:
                    ef:f0:fc:c8:64:49:fb:1d:37:68:03:54:69:82:c9:
                    6d:3c:24:29:b5:ed:2c:45:9e:cf:7a:e7:17:d7:c6:
                    f7:c2:9a:46:a2:15:1e:d2:49:56:76:ca:69:6f:96:
                    13:79:3a:bd:f1:74:94:c1:4f:1c:15:0b:78:91:62:
                    7f:42:32:b0:c9:ee:e5:50:40:d0:63:4c:00:c5:f8:
                    ad:24:3b:e1:8a:c0:2c:31:04:7f:ce:15:36:d3:f7:
                    ed:b7:72:07:e5:fd:09:50:99:3d:83:1a:65:44:f3:
                    60:b0:b5:b9:e0:9e:c1:b9:a3:29:4c:c3:73:6f:c0:
                    55:bc:2e:13:84:19:5a:63:91:42:1e:fb:ce:4e:f2:
                    9f:85:af:75:28:1a:99:67:c9:3c:15:cb:6b:17:1e:
                    9b:d6:71:05:3b:eb:f2:ec:24:75:f5:4a:b6:f1:b0:
                    e5:53:7c:8a:bc:1e:70:ce:78:12:97:fa:1c:25:b8:
                    cd:52:1a:f4:c2:f6:14:4b:78:20:7e:da:b5:4d:86:
                    ac:aa:b7:ad:71:3f:35:82:3e:cb:12:92:06:55:ef:
                    bd:e3:bf:ef:62:fe:4a:7f:92:38:23:64:a6:a0:6c:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:20:C1:AF:59:F1:38:6B:00:F7:C8:24:78:2C:C2:E1:3B:0E:BA:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/AF20C1AF59F1386B00F7C824782CC2E13B0EBAE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/22
                IPv6:
                  2804:78d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271267

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:fa:62:e0:6d:cc:6e:e5:30:9c:74:b7:72:21:57:8e:0e:
         d7:50:5e:d4:45:16:e8:ca:f8:21:fe:c6:ff:52:ca:62:60:01:
         1e:9e:50:68:3d:3c:01:08:b2:13:51:5a:60:f3:aa:3c:5f:16:
         f1:3f:41:7b:f0:46:79:b8:78:19:95:f4:62:6f:fd:7f:61:9d:
         c0:b7:b1:c8:af:83:0c:06:79:f0:2b:8b:06:40:cb:e8:34:1c:
         33:a8:4d:02:e7:50:99:b4:d8:cd:8a:a1:cb:37:e3:e3:19:e7:
         de:42:5a:e3:c1:08:58:0e:51:a7:f0:08:ea:7f:22:62:7d:fc:
         d7:b5:a4:50:14:0f:59:63:1d:52:14:c2:8e:1f:ae:f4:a0:b7:
         2f:27:b4:63:b9:90:99:9c:6b:7f:76:1f:65:30:54:05:8b:53:
         67:85:9c:a5:d3:5c:17:0b:ce:d2:0e:75:5d:ec:49:22:39:a9:
         f2:f7:8f:e7:9c:42:55:49:32:6b:e2:7e:c0:28:3d:82:f8:9e:
         83:80:8e:f4:64:f4:4f:ee:5d:0b:73:76:6e:c9:25:9a:91:a6:
         af:69:7e:2d:7b:da:8b:59:5d:ef:09:c9:d7:31:da:db:ba:91:
         83:3c:66:2f:1e:18:bb:ba:a2:a2:8c:17:a3:3d:db:35:75:e5:
         5f:e3:20:08
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUAndo9XZpNWYO7n0c/KrrJcCe2LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMDMxODE0MDRaFw0yNTAxMDExODE5MDRaMDMxMTAvBgNV
BAMTKEFGMjBDMUFGNTlGMTM4NkIwMEY3QzgyNDc4MkNDMkUxM0IwRUJBRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0VQbAfxfnUNDeTqL9/4mYEBI
wY4bMYLp5Xo4l+/w/MhkSfsdN2gDVGmCyW08JCm17SxFns965xfXxvfCmkaiFR7S
SVZ2ymlvlhN5Or3xdJTBTxwVC3iRYn9CMrDJ7uVQQNBjTADF+K0kO+GKwCwxBH/O
FTbT9+23cgfl/QlQmT2DGmVE82CwtbngnsG5oylMw3NvwFW8LhOEGVpjkUIe+85O
8p+Fr3UoGplnyTwVy2sXHpvWcQU76/LsJHX1SrbxsOVTfIq8HnDOeBKX+hwluM1S
GvTC9hRLeCB+2rVNhqyqt61xPzWCPssSkgZV773jv+9i/kp/kjgjZKagbOejAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvIMGvWfE4awD3
yCR4LMLhOw665jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IajhlQkRmUXJGaFY4Q3U2WHFMWTd4RDQ3V3kyVko1aVlt
RXNpOHd6QjQ5Ni8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSGo4ZUJEZlFyRmhWOEN1NlhxTFk3eEQ0N1d5MlZKNWlZ
bUVzaTh3ekI0OTYvMC9BRjIwQzFBRjU5RjEzODZCMDBGN0M4MjQ3ODJDQzJFMTNC
MEVCQUU2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKoxbQwDQQCAAIwBwMF
ACgEeNAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCOjMA0GCSqGSIb3DQEBCwUA
A4IBAQA46/pi4G3MbuUwnHS3ciFXjg7XUF7URRboyvgh/sb/UspiYAEenlBoPTwB
CLITUVpg86o8XxbxP0F78EZ5uHgZlfRib/1/YZ3At7HIr4MMBnnwK4sGQMvoNBwz
qE0C51CZtNjNiqHLN+PjGefeQlrjwQhYDlGn8AjqfyJiffzXtaRQFA9ZYx1SFMKO
H670oLcvJ7RjuZCZnGt/dh9lMFQFi1NnhZyl01wXC87SDnVd7EkiOany94/nnEJV
STJr4n7AKD2C+J6DgI70ZPRP7l0Lc3ZuySWakaavaX4te9qLWV3vCcnXMdrbupGD
PGYvHhi7uqKijBejPds1deVf4yAI
-----END CERTIFICATE-----