Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B86264159D6FD0487114AE36C925C9ED5133FF47.cer
File:                     B86264159D6FD0487114AE36C925C9ED5133FF47.cer (raw, json)
Hash identifier:          DGAvnP/qswWxpWN+MWcpxd97q65oKl9/xBTgPqcIYhc=
Subject key identifier:   B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C74DC83186CB9BFC6FE6935D0F9FADC536C13B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/B86264159D6FD0487114AE36C925C9ED5133FF47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 02:56:11 +0000
Certificate not after:    Sat 07 Dec 2024 03:01:11 +0000
Subordinate resources:    AS: 266341
                          IP: 170.239.60.0/22
                          IP: 2804:3650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:74:dc:83:18:6c:b9:bf:c6:fe:69:35:d0:f9:fa:dc:53:6c:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 02:56:11 2023 GMT
            Not After : Dec  7 03:01:11 2024 GMT
        Subject: CN=B86264159D6FD0487114AE36C925C9ED5133FF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:30:28:9a:03:d4:97:ab:fe:2b:54:1d:43:
                    4c:03:f2:20:64:d4:c0:96:69:5f:7e:e7:dc:07:d8:
                    b9:69:09:8d:15:15:9c:87:df:67:ba:71:bc:ab:5e:
                    50:6e:fd:1f:c4:9a:ce:da:1b:1a:17:21:f5:20:5d:
                    52:0a:dc:9b:e9:14:8f:51:0f:f4:6b:7c:7e:38:6c:
                    be:e7:b6:3a:fb:fd:13:63:13:8a:cb:d0:91:69:b8:
                    a4:a3:66:82:95:80:5f:87:ea:83:ae:16:5b:14:d1:
                    30:cd:00:86:f5:e2:a7:34:15:1c:1a:43:68:99:b0:
                    59:1a:d9:aa:40:95:fc:83:82:fa:2f:fe:0f:7d:fc:
                    e8:07:46:c4:a4:e9:1d:7a:3e:fe:61:90:12:e8:67:
                    37:d5:cd:c9:d6:b6:63:48:18:ca:84:df:c2:79:72:
                    74:30:d1:13:cf:7f:91:d0:7c:85:bd:33:fb:81:7b:
                    bc:47:0d:e9:b8:7d:19:61:2f:23:54:7b:9f:b1:7c:
                    9a:dd:a5:1b:e4:b3:98:c4:26:ac:5a:41:84:ad:7d:
                    d8:13:64:d6:35:33:5d:74:7d:04:72:da:c3:5c:e9:
                    6b:9f:2c:e7:68:7b:23:05:05:11:c7:7e:d8:29:ee:
                    3d:fa:25:29:40:15:93:62:9d:4e:15:7b:23:bc:34:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/B86264159D6FD0487114AE36C925C9ED5133FF47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.60.0/22
                IPv6:
                  2804:3650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266341

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:bb:a6:05:e7:e6:9f:18:bd:a3:a2:90:3b:c1:b9:39:f4:
         d6:1b:26:8b:90:f2:e2:3e:d5:80:ca:88:b0:ee:3b:a3:7c:83:
         78:01:51:8c:1e:af:03:bc:df:03:c1:ba:11:20:dc:cc:ac:72:
         39:36:db:56:7c:4d:4c:b6:09:7c:95:42:52:e4:34:c5:60:40:
         d6:c7:4d:16:e5:14:20:1e:04:60:f9:9e:a7:dd:ac:48:2a:3d:
         89:b8:44:b2:4b:3b:cb:62:cc:8f:65:09:44:ba:8f:18:54:25:
         bc:d1:0b:ee:0f:a6:75:22:d1:60:f6:3d:e3:5c:1a:fb:91:fc:
         63:10:17:0b:38:2a:c9:b9:f3:2a:d9:89:9e:64:8b:b4:99:59:
         b4:18:3e:5c:a9:64:ca:ad:34:25:a9:a3:5d:c2:78:bb:50:8b:
         09:b7:76:c8:21:f5:2e:14:f0:16:32:dc:45:83:7d:34:1f:b8:
         b1:76:0c:df:90:89:da:76:31:f1:c7:c0:bd:4e:56:5c:8d:74:
         fe:42:8d:28:bb:d9:1f:09:b4:80:d1:77:bb:6d:86:80:15:28:
         44:c0:3f:d4:87:2a:06:96:d8:f6:44:d6:ed:fd:e1:fd:fc:3a:
         b7:f8:12:cd:02:40:2c:20:78:44:11:56:7e:18:f5:19:b0:1e:
         4a:c0:46:de
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbHTcgxhsub/G/mk10Pn63FNsE7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDkwMjU2MTFaFw0yNDEyMDcwMzAxMTFaMDMxMTAvBgNV
BAMTKEI4NjI2NDE1OUQ2RkQwNDg3MTE0QUUzNkM5MjVDOUVENTEzM0ZGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaTAomgPUl6v+K1QdQ0wD8iBk
1MCWaV9+59wH2LlpCY0VFZyH32e6cbyrXlBu/R/Ems7aGxoXIfUgXVIK3JvpFI9R
D/RrfH44bL7ntjr7/RNjE4rL0JFpuKSjZoKVgF+H6oOuFlsU0TDNAIb14qc0FRwa
Q2iZsFka2apAlfyDgvov/g99/OgHRsSk6R16Pv5hkBLoZzfVzcnWtmNIGMqE38J5
cnQw0RPPf5HQfIW9M/uBe7xHDem4fRlhLyNUe5+xfJrdpRvks5jEJqxaQYStfdgT
ZNY1M110fQRy2sNc6WufLOdoeyMFBRHHftgp7j36JSlAFZNinU4VeyO8NKlxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4YmQVnW/QSHEU
rjbJJcntUTP/RzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BakNqYkp6ZHh4aVQ2MzJIbzhnN2VWWjNaeHRRUlBENGlx
Zlhva3FNcm9vaC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BakNqYkp6ZHh4aVQ2MzJIbzhnN2VWWjNaeHRRUlBENGlx
Zlhva3FNcm9vaC8wL0I4NjI2NDE1OUQ2RkQwNDg3MTE0QUUzNkM5MjVDOUVENTEz
M0ZGNDcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqrvPDANBAIAAjAHAwUA
KAQ2UDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEEGUwDQYJKoZIhvcNAQELBQAD
ggEBALGFu6YF5+afGL2jopA7wbk59NYbJouQ8uI+1YDKiLDuO6N8g3gBUYwerwO8
3wPBuhEg3Myscjk221Z8TUy2CXyVQlLkNMVgQNbHTRblFCAeBGD5nqfdrEgqPYm4
RLJLO8tizI9lCUS6jxhUJbzRC+4PpnUi0WD2PeNcGvuR/GMQFws4Ksm58yrZiZ5k
i7SZWbQYPlypZMqtNCWpo13CeLtQiwm3dsgh9S4U8BYy3EWDfTQfuLF2DN+Qidp2
MfHHwL1OVlyNdP5CjSi72R8JtIDRd7tthoAVKETAP9SHKgaW2PZE1u394f38Orf4
Es0CQCwgeEQRVn4Y9RmwHkrARt4=
-----END CERTIFICATE-----