Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0EB7D48D9CADA5A4FAC0D1AFC3FE117C8B8ED0C.cer
File:                     C0EB7D48D9CADA5A4FAC0D1AFC3FE117C8B8ED0C.cer (raw, json)
Hash identifier:          ohVp8MPCrHgzZhXeOQxYSEy2F/Gruc1cKOPtYMeGAVw=
Subject key identifier:   C0:EB:7D:48:D9:CA:DA:5A:4F:AC:0D:1A:FC:3F:E1:17:C8:B8:ED:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       407773A8EF99F9D4C3086746A315563FB9D8E168
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C0EB7D48D9CADA5A4FAC0D1AFC3FE117C8B8ED0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 17:48:11 +0000
Certificate not after:    Thu 23 May 2024 17:53:11 +0000
Subordinate resources:    AS: 52631
                          IP: 177.128.24.0/21
                          IP: 2804:49d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:77:73:a8:ef:99:f9:d4:c3:08:67:46:a3:15:56:3f:b9:d8:e1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 17:48:11 2023 GMT
            Not After : May 23 17:53:11 2024 GMT
        Subject: CN=C0EB7D48D9CADA5A4FAC0D1AFC3FE117C8B8ED0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:f1:9a:c7:8f:38:0f:a8:b8:0c:c5:2d:88:
                    48:be:7f:5e:5c:b2:4f:bf:c0:8f:48:f4:03:df:08:
                    b8:9e:cc:fe:f3:33:40:ba:b1:49:ba:fb:89:58:dd:
                    62:b7:61:6a:da:d1:1f:91:5a:27:d8:cf:c0:79:e3:
                    0d:63:17:f4:79:cc:c3:c4:c3:0a:de:8c:f0:96:29:
                    87:41:35:97:fe:4f:87:98:81:a7:06:33:23:96:bf:
                    e2:60:ba:d6:f7:e1:b7:ab:dd:37:e0:5d:fd:fa:9a:
                    75:15:2f:18:54:6c:49:b2:83:6d:d1:f9:bd:76:15:
                    ab:41:8b:1b:20:43:86:46:df:41:07:f4:ff:6b:30:
                    78:47:89:07:e4:40:b2:78:95:5e:ff:11:60:ed:64:
                    2d:c7:4f:5e:6d:c9:7c:4d:54:d0:32:e3:cd:df:cf:
                    f9:7b:3e:45:0b:28:a3:da:bf:5f:ef:46:ea:77:99:
                    e9:ba:50:1c:fc:14:11:a7:64:36:6b:1a:92:c4:7b:
                    ff:f4:b2:19:e2:3f:1b:bb:8a:a6:62:39:fb:57:62:
                    09:71:5e:33:8f:4b:00:29:f4:6e:37:8e:d5:37:ab:
                    7d:d1:5a:b7:2f:85:c0:af:87:9e:f8:ee:ee:b7:7e:
                    3c:76:71:6e:c5:24:89:7f:31:68:83:22:50:79:2a:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:EB:7D:48:D9:CA:DA:5A:4F:AC:0D:1A:FC:3F:E1:17:C8:B8:ED:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C0EB7D48D9CADA5A4FAC0D1AFC3FE117C8B8ED0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21
                IPv6:
                  2804:49d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52631

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:1d:f1:8d:f0:32:a2:5c:87:b8:23:55:6c:5a:4a:68:ac:
         64:5a:01:e9:72:13:95:46:48:9f:2e:55:f2:5e:68:cf:00:32:
         30:86:e3:14:94:90:1c:8a:46:f5:9e:56:1d:81:ce:44:7a:39:
         c0:08:c0:1a:cf:bf:90:13:70:94:e9:13:83:5a:84:5a:9a:fc:
         9f:10:5a:6f:d0:32:e5:ef:67:6d:8b:d8:bd:df:b2:15:62:66:
         4c:55:77:24:73:a7:84:be:ff:82:3b:2d:2d:6f:1c:31:fe:f7:
         86:76:4a:15:14:80:a2:cc:7f:63:4d:ce:a8:df:42:13:1f:11:
         6a:47:7f:11:96:6b:b9:7c:cd:e0:94:5e:5b:26:ed:ea:1c:61:
         82:fb:18:88:45:3f:24:18:0e:85:71:f3:e0:a8:5a:48:53:cb:
         ae:d8:f4:cc:94:fc:74:ab:ca:ca:71:17:e1:0b:02:41:d2:0e:
         db:3b:cf:b6:be:49:fb:7c:dd:5c:53:51:34:ad:12:4c:c9:10:
         e6:cd:ff:5c:bb:12:07:54:52:2c:15:f1:5c:35:bd:46:cd:3d:
         4f:a8:fa:65:88:0d:59:8e:79:01:e8:8e:12:18:2f:73:9d:2a:
         dc:e1:bb:38:a4:83:85:c8:99:60:b8:53:72:82:1f:e5:cb:74:
         4b:c5:26:30
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQHdzqO+Z+dTDCGdGoxVWP7nY4WgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjUxNzQ4MTFaFw0yNDA1MjMxNzUzMTFaMDMxMTAvBgNV
BAMTKEMwRUI3RDQ4RDlDQURBNUE0RkFDMEQxQUZDM0ZFMTE3QzhCOEVEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWvGax484D6i4DMUtiEi+f15c
sk+/wI9I9APfCLiezP7zM0C6sUm6+4lY3WK3YWra0R+RWifYz8B54w1jF/R5zMPE
wwrejPCWKYdBNZf+T4eYgacGMyOWv+Jgutb34ber3TfgXf36mnUVLxhUbEmyg23R
+b12FatBixsgQ4ZG30EH9P9rMHhHiQfkQLJ4lV7/EWDtZC3HT15tyXxNVNAy483f
z/l7PkULKKPav1/vRup3mem6UBz8FBGnZDZrGpLEe//0shniPxu7iqZiOftXYglx
XjOPSwAp9G43jtU3q33RWrcvhcCvh5747u63fjx2cW7FJIl/MWiDIlB5KtMrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA631I2craWk+s
DRr8P+EXyLjtDDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IR254SDNoOG9ZaDZxaWYyVGtxeHk1ekI5YVgxUG1BeUVS
MnhFNHVleG11Vy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlF
UjJ4RTR1ZXhtdVcvMC9DMEVCN0Q0OEQ5Q0FEQTVBNEZBQzBEMUFGQzNGRTExN0M4
QjhFRDBDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOxgBgwDQQCAAIwBwMF
ACgESdQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM2XMA0GCSqGSIb3DQEBCwUA
A4IBAQBr/B3xjfAyolyHuCNVbFpKaKxkWgHpchOVRkifLlXyXmjPADIwhuMUlJAc
ikb1nlYdgc5EejnACMAaz7+QE3CU6RODWoRamvyfEFpv0DLl72dti9i937IVYmZM
VXckc6eEvv+COy0tbxwx/veGdkoVFICizH9jTc6o30ITHxFqR38Rlmu5fM3glF5b
Ju3qHGGC+xiIRT8kGA6FcfPgqFpIU8uu2PTMlPx0q8rKcRfhCwJB0g7bO8+2vkn7
fN1cU1E0rRJMyRDmzf9cuxIHVFIsFfFcNb1GzT1PqPpliA1ZjnkB6I4SGC9znSrc
4bs4pIOFyJlguFNygh/ly3RLxSYw
-----END CERTIFICATE-----