Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer
File:                     BB3CC1D35CE466F9158D5E711B7A6D990160050C.cer (raw, json)
Hash identifier:          aKM6jYVw0yaYYKXAY8fZaEEu81coqQ0EeivDKIGtRYU=
Subject key identifier:   BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       16B37CBFF82DC723BAE2660D6AF729A843DF6856
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/BB3CC1D35CE466F9158D5E711B7A6D990160050C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 00:01:30 +0000
Certificate not after:    Thu 12 Dec 2024 00:06:30 +0000
Subordinate resources:    AS: 262606
                          AS: 265157
                          IP: 143.255.240.0/22
                          IP: 177.101.32.0/20
                          IP: 2804:6c8::/32
                          IP: 2804:2b84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:7c:bf:f8:2d:c7:23:ba:e2:66:0d:6a:f7:29:a8:43:df:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 00:01:30 2023 GMT
            Not After : Dec 12 00:06:30 2024 GMT
        Subject: CN=BB3CC1D35CE466F9158D5E711B7A6D990160050C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:6f:ab:9b:a0:8c:6f:26:d0:ef:ee:f6:02:
                    08:c6:f0:06:93:78:43:32:c4:4e:90:c2:7c:de:e4:
                    88:a6:3b:4a:f9:2c:d4:0c:59:ee:77:ba:a1:95:ba:
                    4c:40:2f:42:15:f1:f6:b7:e7:2f:4a:da:6a:d8:51:
                    09:ee:17:85:2c:40:3d:62:5e:bc:7f:de:f4:37:0b:
                    f0:d6:f8:ab:f4:c7:9c:4d:bc:37:cb:2b:34:c8:d9:
                    8f:b7:87:58:25:72:0d:46:60:59:8e:6e:28:90:5d:
                    74:c5:05:04:ab:e0:fa:ac:8f:4c:9e:42:90:85:2b:
                    cb:69:f5:c0:cf:89:3c:7a:03:ed:95:46:9e:9a:d1:
                    a9:2a:42:a5:6b:5c:c1:6a:1e:6f:af:58:dd:bc:d0:
                    bf:fb:28:f0:c9:d2:75:3d:14:9c:b1:97:5a:68:68:
                    69:67:31:bb:25:81:52:5f:58:35:b8:0c:1d:5a:45:
                    d3:64:ce:58:1a:a4:f3:67:22:b6:82:1b:ee:cb:76:
                    50:8b:df:fc:5e:34:48:a9:38:74:43:37:46:1d:c3:
                    fe:8c:a7:e9:7b:5a:8c:42:1b:c6:e5:d3:1a:92:74:
                    72:9f:4d:45:5a:15:36:44:36:d1:d3:ba:d9:e9:f4:
                    98:e0:44:64:00:ea:da:c2:98:9e:46:3d:85:de:1c:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:3C:C1:D3:5C:E4:66:F9:15:8D:5E:71:1B:7A:6D:99:01:60:05:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/1/BB3CC1D35CE466F9158D5E711B7A6D990160050C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.240.0/22
                  177.101.32.0/20
                IPv6:
                  2804:6c8::/32
                  2804:2b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262606
                  265157

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:22:de:5c:dd:e8:7c:99:a5:bc:bf:23:2e:33:ca:a1:94:
         c2:ef:e5:fe:c3:83:2b:02:2a:6b:9c:5c:75:4e:fe:e9:7e:59:
         3a:c8:73:5a:ff:f1:f0:a0:43:5e:3c:ec:f4:83:12:65:3d:8a:
         8e:e5:a4:47:0f:2d:8e:7f:69:03:f2:ed:ea:d8:65:20:36:d8:
         40:1b:d1:5e:0e:9f:8a:e9:e8:74:c3:b0:c2:18:15:98:72:5e:
         04:4c:95:15:e8:51:67:c8:e4:9c:b4:f0:7a:e0:95:85:16:0a:
         85:1e:cf:64:52:20:a2:10:f9:8f:fc:a8:4f:fd:b7:c7:18:60:
         03:49:0a:16:b3:64:7f:3b:54:ea:e0:a8:2b:19:6e:63:88:75:
         8c:81:28:c6:0e:97:2c:07:3c:07:b4:84:8a:1a:91:e1:e7:22:
         26:fe:92:fb:43:89:3e:4f:9a:0e:50:79:a0:12:9f:0d:a7:b2:
         a8:8d:01:dd:4d:99:dd:c7:34:df:df:8b:6a:98:c2:58:4c:d4:
         9b:ab:9e:40:dd:9a:4d:36:af:cd:27:f5:05:af:94:37:d8:b8:
         b5:ff:02:c3:1d:f9:e1:26:6b:a0:b9:40:4a:0f:14:70:e5:8e:
         1b:71:c6:23:04:b3:fb:a3:51:11:64:6a:dd:fc:e2:3b:be:15:
         b4:dc:2b:d9
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIUFrN8v/gtxyO64mYNavcpqEPfaFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMTQwMDAxMzBaFw0yNDEyMTIwMDA2MzBaMDMxMTAvBgNV
BAMTKEJCM0NDMUQzNUNFNDY2RjkxNThENUU3MTFCN0E2RDk5MDE2MDA1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYm+rm6CMbybQ7+72AgjG8AaT
eEMyxE6Qwnze5IimO0r5LNQMWe53uqGVukxAL0IV8fa35y9K2mrYUQnuF4UsQD1i
Xrx/3vQ3C/DW+Kv0x5xNvDfLKzTI2Y+3h1glcg1GYFmObiiQXXTFBQSr4Pqsj0ye
QpCFK8tp9cDPiTx6A+2VRp6a0akqQqVrXMFqHm+vWN280L/7KPDJ0nU9FJyxl1po
aGlnMbslgVJfWDW4DB1aRdNkzlgapPNnIraCG+7LdlCL3/xeNEipOHRDN0Ydw/6M
p+l7WoxCG8bl0xqSdHKfTUVaFTZENtHTutnp9JjgRGQA6trCmJ5GPYXeHO7pAgMB
AAGjggMtMIIDKTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7PMHTXORm+RWN
XnEbem2ZAWAFDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BUkp0ZTFIY2hjQ3ZnSlBwODh3cVUzSEJmcXljTE01ODN3
dVJ6SFVMcTREZC8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQVJKdGUxSGNoY0N2Z0pQcDg4d3FVM0hCZnF5Y0xNNTgz
d3VSekhVTHE0RGQvMS9CQjNDQzFEMzVDRTQ2NkY5MTU4RDVFNzExQjdBNkQ5OTAx
NjAwNTBDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMBIEAgABMAwDBAKP//ADBASxZSAwFAQC
AAIwDgMFACgEBsgDBQAoBCuEMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQBzgID
BAvFMA0GCSqGSIb3DQEBCwUAA4IBAQAJuyLeXN3ofJmlvL8jLjPKoZTC7+X+w4Mr
AiprnFx1Tv7pflk6yHNa//HwoENePOz0gxJlPYqO5aRHDy2Of2kD8u3q2GUgNthA
G9FeDp+K6eh0w7DCGBWYcl4ETJUV6FFnyOSctPB64JWFFgqFHs9kUiCiEPmP/KhP
/bfHGGADSQoWs2R/O1Tq4KgrGW5jiHWMgSjGDpcsBzwHtISKGpHh5yIm/pL7Q4k+
T5oOUHmgEp8Np7KojQHdTZndxzTf34tqmMJYTNSbq55A3ZpNNq/NJ/UFr5Q32Li1
/wLDHfnhJmuguUBKDxRw5Y4bccYjBLP7o1ERZGrd/OI7vhW03CvZ
-----END CERTIFICATE-----