Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer
File:                     B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer (raw, json)
Hash identifier:          pNnKOrUmqB03pq04nucxTOJQ+35YUzu/BS5w1Tnc7dM=
Subject key identifier:   B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30A43AB619BF327663947CBC3DECCC3BF0813CDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 16:05:10 +0000
Certificate not after:    Mon 14 Oct 2024 16:10:10 +0000
Subordinate resources:    AS: 61822
                          IP: 201.130.20.0/22
                          IP: 2804:19d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:3a:b6:19:bf:32:76:63:94:7c:bc:3d:ec:cc:3b:f0:81:3c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 16:05:10 2023 GMT
            Not After : Oct 14 16:10:10 2024 GMT
        Subject: CN=B6594718FFDD3374D78BED43B0A99EA95E3DE550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:24:ee:98:3c:d6:d6:c6:98:2c:f1:f5:b2:
                    da:57:84:b7:d3:d6:17:40:4b:92:17:77:a3:63:6d:
                    3b:00:7b:ac:a5:93:62:c2:db:95:a8:b9:0c:45:42:
                    7b:fa:24:a5:c0:3a:f5:38:cd:06:9e:43:37:74:1d:
                    f6:07:6d:9d:14:96:0b:85:67:1f:fa:76:18:9f:e1:
                    e1:6d:91:e7:f6:aa:f6:f1:5c:9b:8f:3a:63:a1:90:
                    23:9f:54:6d:b0:71:2b:34:00:43:9a:f3:99:71:9f:
                    c8:e0:fb:80:d6:0f:70:71:46:5e:32:1b:1c:fb:04:
                    57:68:76:ec:c3:32:3b:ef:2c:e2:40:25:1b:27:bd:
                    1c:fc:c4:a7:7f:cd:4c:44:8f:fe:56:fc:f7:4d:fc:
                    f5:35:9b:24:ec:e0:ba:df:49:d4:da:85:28:cf:c4:
                    2e:21:b0:68:99:a8:c9:19:bf:5d:85:cb:25:30:92:
                    91:1a:f7:5a:de:7c:3a:22:23:7c:82:ce:6a:26:45:
                    ec:4a:fa:70:27:29:f0:6e:b9:ec:ca:96:7c:78:7a:
                    75:20:c5:07:ec:77:61:7c:91:38:db:7c:34:3f:78:
                    c7:69:fd:93:68:fc:8a:27:bb:fb:73:03:bf:77:5d:
                    e5:d5:ed:d1:1b:42:62:8b:a3:0a:75:ea:ef:95:58:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.20.0/22
                IPv6:
                  2804:19d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61822

    Signature Algorithm: sha256WithRSAEncryption
         59:75:6b:e3:44:b5:12:1d:53:c7:6a:57:2f:35:17:41:f6:4c:
         5d:0c:d2:60:61:6f:02:85:0e:38:24:b7:7e:bd:2f:86:f8:ca:
         aa:7f:4e:b5:84:33:81:19:19:6c:2c:61:17:04:29:cb:51:98:
         25:55:ca:7e:71:df:1a:40:3c:9a:b5:50:3c:fd:0d:b1:19:21:
         b9:1d:a4:2a:95:df:09:a8:b4:5f:4b:57:f2:1c:fd:5e:0d:00:
         28:e6:31:36:b7:e0:cc:e2:26:39:db:cc:88:a6:d0:c6:fc:aa:
         9f:e5:f4:ae:7e:d5:c9:ee:4b:a1:c5:cb:23:0b:f9:86:a1:5d:
         42:aa:52:1e:7e:40:5e:2e:6b:34:cf:5a:97:6b:f0:0a:66:25:
         90:5e:66:9d:f6:59:17:43:24:aa:4a:df:f5:67:3e:a1:59:4d:
         97:a8:dd:6b:1a:b4:7d:cd:48:2a:bf:df:30:49:9b:c6:19:59:
         94:f9:cc:9a:2c:13:73:38:11:04:cd:11:19:9b:c8:99:e6:12:
         89:ad:80:b6:40:4a:f0:b9:0a:77:b3:a2:b7:3f:a2:ab:b3:c7:
         05:1f:c7:ff:f6:f6:f3:06:44:28:68:a6:81:17:00:8a:9c:1e:
         44:f2:38:6b:51:06:fe:59:26:1f:68:30:f8:4c:94:61:9e:74:
         c1:8a:88:3a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUMKQ6thm/MnZjlHy8PezMO/CBPNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTYxNjA1MTBaFw0yNDEwMTQxNjEwMTBaMDMxMTAvBgNV
BAMTKEI2NTk0NzE4RkZERDMzNzRENzhCRUQ0M0IwQTk5RUE5NUUzREU1NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwiTumDzW1saYLPH1stpXhLfT
1hdAS5IXd6NjbTsAe6ylk2LC25WouQxFQnv6JKXAOvU4zQaeQzd0HfYHbZ0UlguF
Zx/6dhif4eFtkef2qvbxXJuPOmOhkCOfVG2wcSs0AEOa85lxn8jg+4DWD3BxRl4y
Gxz7BFdoduzDMjvvLOJAJRsnvRz8xKd/zUxEj/5W/PdN/PU1myTs4LrfSdTahSjP
xC4hsGiZqMkZv12FyyUwkpEa91refDoiI3yCzmomRexK+nAnKfBuuezKlnx4enUg
xQfsd2F8kTjbfDQ/eMdp/ZNo/Ionu/tzA793XeXV7dEbQmKLowp16u+VWKe/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2WUcY/90zdNeL
7UOwqZ6pXj3lUDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bmlOTWJLeFVGcVR2dWlOb21qbkVZVTJWZ0VWdFlFRGFN
UzdIMjNTZ3FnOC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80bmlOTWJLeFVGcVR2dWlOb21qbkVZVTJWZ0VWdFlFRGFN
UzdIMjNTZ3FnOC8wL0I2NTk0NzE4RkZERDMzNzRENzhCRUQ0M0IwQTk5RUE5NUUz
REU1NTAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsmCFDANBAIAAjAHAwUA
KAQZ2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8X4wDQYJKoZIhvcNAQELBQAD
ggEBAFl1a+NEtRIdU8dqVy81F0H2TF0M0mBhbwKFDjgkt369L4b4yqp/TrWEM4EZ
GWwsYRcEKctRmCVVyn5x3xpAPJq1UDz9DbEZIbkdpCqV3wmotF9LV/Ic/V4NACjm
MTa34MziJjnbzIim0Mb8qp/l9K5+1cnuS6HFyyML+YahXUKqUh5+QF4uazTPWpdr
8ApmJZBeZp32WRdDJKpK3/VnPqFZTZeo3WsatH3NSCq/3zBJm8YZWZT5zJosE3M4
EQTNERmbyJnmEomtgLZASvC5Cnezorc/oquzxwUfx//29vMGRChopoEXAIqcHkTy
OGtRBv5ZJh9oMPhMlGGedMGKiDo=
-----END CERTIFICATE-----