Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer
File:                     C1B003996E3E8D38EAE8A4E943863B4777429D8C.cer (raw, json)
Hash identifier:          lAEfZJCdmhyk5zt3gRnkhv1ZDCq7LhplUlia7w+z8cw=
Subject key identifier:   C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F2080F6CEE3A257826983F5A4832BFD72EE9FD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 22:42:23 +0000
Certificate not after:    Thu 07 Nov 2024 22:47:23 +0000
Subordinate resources:    AS: 271002
                          IP: 177.223.144.0/22
                          IP: 2804:74c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:20:80:f6:ce:e3:a2:57:82:69:83:f5:a4:83:2b:fd:72:ee:9f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 22:42:23 2023 GMT
            Not After : Nov  7 22:47:23 2024 GMT
        Subject: CN=C1B003996E3E8D38EAE8A4E943863B4777429D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:fa:5f:36:00:94:ca:b6:69:4e:67:84:90:
                    64:4c:df:4b:b6:ca:12:6a:1d:dc:56:59:06:de:18:
                    15:60:1f:ce:dc:4a:18:61:67:19:81:d1:22:1a:b0:
                    e0:09:20:0e:9f:25:dd:b2:42:b7:8f:a9:f6:5c:40:
                    d3:6b:f7:a8:d5:3d:cc:86:24:0c:7b:de:6a:2a:66:
                    0c:a6:63:2f:d0:4e:07:70:24:aa:36:46:8b:27:85:
                    27:ec:b1:38:75:0f:22:c0:e4:27:b4:62:e0:ba:3c:
                    fa:3e:bf:b2:77:6a:42:77:83:62:b6:c6:f8:7c:d1:
                    be:ad:ad:0d:6e:2c:01:9d:88:ce:3c:1f:4d:f1:8f:
                    3c:c7:52:47:21:5a:ad:21:ba:50:db:5d:bc:5d:cd:
                    6d:f0:49:0a:be:0f:d8:d1:c8:6e:ae:19:c3:30:1e:
                    46:80:4c:53:29:a6:f8:52:4a:63:21:46:83:f6:b5:
                    fc:0a:f4:78:1a:7f:b8:dd:e8:5c:fc:57:6f:05:18:
                    b6:9b:76:51:53:62:b1:8a:4d:1d:d7:23:d4:1c:24:
                    78:73:55:f6:87:7c:da:b4:62:b4:91:25:53:a3:57:
                    7e:1b:48:cb:9d:55:c8:3c:f9:67:de:31:f3:fd:53:
                    eb:85:4f:97:bc:43:d2:30:e4:47:ff:a9:ac:ca:98:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:B0:03:99:6E:3E:8D:38:EA:E8:A4:E9:43:86:3B:47:77:42:9D:8C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/0/C1B003996E3E8D38EAE8A4E943863B4777429D8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22
                IPv6:
                  2804:74c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271002

    Signature Algorithm: sha256WithRSAEncryption
         3e:ea:96:e1:50:12:6c:33:f6:89:e1:a6:86:25:84:c8:16:dc:
         07:38:10:51:b4:ba:bd:4e:e4:6d:56:92:34:b1:d7:be:07:ba:
         ea:0b:42:61:57:ff:8a:1e:4f:ef:00:8d:30:f4:19:af:53:32:
         0e:09:3b:ca:f8:35:e3:48:a7:86:54:55:3c:3b:ff:be:a2:ec:
         e0:e6:67:fc:0c:c8:a2:97:2f:dd:be:80:68:04:c9:e6:50:f2:
         56:92:b2:95:4c:a1:de:96:92:8c:5b:18:41:75:b0:c7:19:4f:
         3f:5a:53:72:36:20:45:9e:97:c6:7c:99:18:4e:ac:4e:b0:e1:
         91:b1:d3:50:ee:ea:44:7c:a2:ab:33:06:84:67:dc:8e:eb:98:
         e7:0e:a9:04:ff:91:c7:13:01:a1:cf:26:f0:ee:41:30:43:57:
         c4:a8:8b:5a:b1:dd:a4:f0:ca:b1:63:45:0e:9f:8a:b6:cc:aa:
         cf:17:06:80:f4:96:36:56:a5:55:5c:f2:70:14:e1:cf:ee:0d:
         2b:8c:c8:c6:36:54:92:af:d8:4f:72:8f:89:9f:a3:47:89:46:
         ba:90:37:4e:df:7e:2a:d9:18:3b:89:cf:a6:6e:86:65:88:4d:
         fd:c8:5b:45:f6:95:ab:c8:26:3a:d1:fe:59:c8:3b:07:4c:f1:
         21:ff:ec:c3
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPyCA9s7joleCaYP1pIMr/XLun9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDkyMjQyMjNaFw0yNDExMDcyMjQ3MjNaMDMxMTAvBgNV
BAMTKEMxQjAwMzk5NkUzRThEMzhFQUU4QTRFOTQzODYzQjQ3Nzc0MjlEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDim/pfNgCUyrZpTmeEkGRM30u2
yhJqHdxWWQbeGBVgH87cShhhZxmB0SIasOAJIA6fJd2yQrePqfZcQNNr96jVPcyG
JAx73moqZgymYy/QTgdwJKo2RosnhSfssTh1DyLA5Ce0YuC6PPo+v7J3akJ3g2K2
xvh80b6trQ1uLAGdiM48H03xjzzHUkchWq0hulDbXbxdzW3wSQq+D9jRyG6uGcMw
HkaATFMppvhSSmMhRoP2tfwK9Hgaf7jd6Fz8V28FGLabdlFTYrGKTR3XI9QcJHhz
VfaHfNq0YrSRJVOjV34bSMudVcg8+WfeMfP9U+uFT5e8Q9Iw5Ef/qazKmKk1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBsAOZbj6NOOro
pOlDhjtHd0KdjDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RDZhU3p1SjZtTkd0RHlqa2hyaVJyazQ5cHprN2ZLRVhi
eFFhNWpaam5Tdy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RDZhU3p1SjZtTkd0RHlqa2hyaVJyazQ5cHprN2ZLRVhi
eFFhNWpaam5Tdy8wL0MxQjAwMzk5NkUzRThEMzhFQUU4QTRFOTQzODYzQjQ3Nzc0
MjlEOEMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArHfkDANBAIAAjAHAwUA
KAR0xDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIpowDQYJKoZIhvcNAQELBQAD
ggEBAD7qluFQEmwz9onhpoYlhMgW3Ac4EFG0ur1O5G1WkjSx174HuuoLQmFX/4oe
T+8AjTD0Ga9TMg4JO8r4NeNIp4ZUVTw7/76i7ODmZ/wMyKKXL92+gGgEyeZQ8laS
spVMod6WkoxbGEF1sMcZTz9aU3I2IEWel8Z8mRhOrE6w4ZGx01Du6kR8oqszBoRn
3I7rmOcOqQT/kccTAaHPJvDuQTBDV8Soi1qx3aTwyrFjRQ6firbMqs8XBoD0ljZW
pVVc8nAU4c/uDSuMyMY2VJKv2E9yj4mfo0eJRrqQN07ffirZGDuJz6ZuhmWITf3I
W0X2lavIJjrR/lnIOwdM8SH/7MM=
-----END CERTIFICATE-----