Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer
File:                     BCFE9D7FD2A3C25DC3911402465828615DB346CD.cer (raw, json)
Hash identifier:          JM4rSNTY9uiQ+G1dStVFWX6GWysjVDoj+C/TRbjsj48=
Subject key identifier:   BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AB8659E1AF4714E66178C4FCD4926280CCD7BC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Nov 2023 14:25:09 +0000
Certificate not after:    Thu 14 Nov 2024 14:30:09 +0000
Subordinate resources:    AS: 270255
                          IP: 45.184.88.0/22
                          IP: 200.108.168.0/22
                          IP: 2804:6934::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b8:65:9e:1a:f4:71:4e:66:17:8c:4f:cd:49:26:28:0c:cd:7b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 16 14:25:09 2023 GMT
            Not After : Nov 14 14:30:09 2024 GMT
        Subject: CN=BCFE9D7FD2A3C25DC3911402465828615DB346CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:fb:49:4b:38:dc:5c:21:80:e3:cb:c9:b0:
                    a1:37:0c:4d:33:a6:87:08:f6:2b:6e:51:e4:f2:b0:
                    25:19:21:d5:3a:48:6d:c7:e0:b6:ec:39:2a:59:5d:
                    f4:01:d1:80:b1:65:64:23:cb:63:78:1c:d2:5d:3b:
                    1c:df:70:03:9b:8f:76:f7:2c:11:2b:67:1e:12:95:
                    d4:5d:eb:da:d7:a2:d2:ca:a2:1e:5a:15:28:4a:2b:
                    78:f8:85:64:5d:6c:7e:99:84:99:4e:e7:e5:20:86:
                    c7:7f:83:df:0d:06:0c:47:0f:df:e8:33:ac:b2:f7:
                    d5:c4:07:62:3d:55:28:06:84:31:d6:74:1a:cd:6c:
                    61:fe:4b:7a:df:b9:bc:95:5b:24:28:22:63:b9:e8:
                    e7:3e:43:05:c5:b9:d4:b2:ea:22:15:7e:90:de:e6:
                    75:d2:49:2c:32:40:37:c4:47:e6:cb:24:ce:b4:94:
                    8f:a3:ed:e6:3f:4e:54:c6:e1:52:3b:f6:f4:cc:e0:
                    69:5b:7f:3d:76:86:fa:16:4a:7a:39:19:e6:4e:4a:
                    21:94:58:b7:2c:52:cb:2d:3c:43:8a:ee:f3:06:61:
                    2b:98:33:6a:c9:75:8b:e1:6f:70:30:8d:c1:01:49:
                    c4:04:d0:8a:7c:81:29:21:8c:dc:c8:20:9f:65:f9:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:FE:9D:7F:D2:A3:C2:5D:C3:91:14:02:46:58:28:61:5D:B3:46:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/BCFE9D7FD2A3C25DC3911402465828615DB346CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.88.0/22
                  200.108.168.0/22
                IPv6:
                  2804:6934::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270255

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:07:2b:de:81:68:f5:a9:05:b8:ab:ec:d9:15:46:82:c3:
         81:15:21:34:30:b6:da:c4:0b:30:bd:a8:d5:4a:93:86:98:25:
         b9:f3:22:7c:3c:7e:2a:6e:7e:a3:15:3d:0b:bf:35:fb:e4:c2:
         30:6d:0d:fb:0c:81:42:4b:70:a7:fe:13:01:18:be:85:7e:d1:
         9d:b5:d2:2c:3c:eb:87:91:ae:5b:e1:b1:aa:f5:50:1d:1d:39:
         c2:d1:80:31:fe:37:77:64:8e:16:be:da:58:33:10:4e:40:81:
         2a:6a:3a:5a:12:a3:7a:a1:1f:53:1a:6a:7b:a9:44:19:e1:9a:
         e3:5c:b6:1f:47:37:5a:c8:cb:03:2b:11:ff:8e:ed:12:67:5c:
         97:9b:95:0c:6d:ec:13:be:40:24:ec:6c:0c:5e:2a:41:fc:53:
         32:b4:1f:69:ff:92:dc:a6:25:d0:c1:bd:55:ef:df:8f:be:22:
         5b:b3:4f:5f:08:02:41:c1:93:69:e9:50:07:41:d1:3c:6c:61:
         b5:d5:8f:81:35:1c:03:74:1e:89:10:fc:a4:13:94:b4:63:fd:
         4d:1c:ed:f4:ec:e4:55:69:39:86:3a:2f:b8:d0:2b:d1:06:ac:
         77:0f:b3:b8:9c:be:fc:e9:9a:2b:a6:7b:a8:d4:84:4d:1a:dd:
         25:e9:f2:d3
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUOrhlnhr0cU5mF4xPzUkmKAzNe8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMTYxNDI1MDlaFw0yNDExMTQxNDMwMDlaMDMxMTAvBgNV
BAMTKEJDRkU5RDdGRDJBM0MyNURDMzkxMTQwMjQ2NTgyODYxNURCMzQ2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPPtJSzjcXCGA48vJsKE3DE0z
pocI9ituUeTysCUZIdU6SG3H4LbsOSpZXfQB0YCxZWQjy2N4HNJdOxzfcAObj3b3
LBErZx4SldRd69rXotLKoh5aFShKK3j4hWRdbH6ZhJlO5+Ughsd/g98NBgxHD9/o
M6yy99XEB2I9VSgGhDHWdBrNbGH+S3rfubyVWyQoImO56Oc+QwXFudSy6iIVfpDe
5nXSSSwyQDfER+bLJM60lI+j7eY/TlTG4VI79vTM4Glbfz12hvoWSno5GeZOSiGU
WLcsUsstPEOK7vMGYSuYM2rJdYvhb3AwjcEBScQE0Ip8gSkhjNzIIJ9l+brXAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8/p1/0qPCXcOR
FAJGWChhXbNGzTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUNQZ3dhY2RRTTJ5RFFmc1lOVXNHdUdXQXpCQlh4Q1Bm
amRXTlJRN1FzMy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERUNQZ3dhY2RRTTJ5RFFmc1lOVXNHdUdXQXpCQlh4Q1Bm
amRXTlJRN1FzMy8wL0JDRkU5RDdGRDJBM0MyNURDMzkxMTQwMjQ2NTgyODYxNURC
MzQ2Q0QubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi24WAMEAshsqDANBAIA
AjAHAwUAKARpNDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH68wDQYJKoZIhvcN
AQELBQADggEBAE0oByvegWj1qQW4q+zZFUaCw4EVITQwttrECzC9qNVKk4aYJbnz
Inw8fipufqMVPQu/NfvkwjBtDfsMgUJLcKf+EwEYvoV+0Z210iw864eRrlvhsar1
UB0dOcLRgDH+N3dkjha+2lgzEE5AgSpqOloSo3qhH1MaanupRBnhmuNcth9HN1rI
ywMrEf+O7RJnXJeblQxt7BO+QCTsbAxeKkH8UzK0H2n/ktymJdDBvVXv34++Iluz
T18IAkHBk2npUAdB0TxsYbXVj4E1HAN0HokQ/KQTlLRj/U0c7fTs5FVpOYY6L7jQ
K9EGrHcPs7icvvzpmiume6jUhE0a3SXp8tM=
-----END CERTIFICATE-----