Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer
File:                     C32EF4FE36152A1B57F8E49C42908899C2D13CF0.cer (raw, json)
Hash identifier:          9tpFPmd5stjWZr2YD8qKm0vXxBC7NlfbxcwhpZhXwxg=
Subject key identifier:   C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BC5C5EC02AF4A95EB083BAB75EBD4EBBB8B7FFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 12:15:51 +0000
Certificate not after:    Sat 29 Jun 2024 12:20:51 +0000
Subordinate resources:    AS: 271412
                          IP: 207.248.16.0/22
                          IP: 2804:7b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c5:c5:ec:02:af:4a:95:eb:08:3b:ab:75:eb:d4:eb:bb:8b:7f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 12:15:51 2023 GMT
            Not After : Jun 29 12:20:51 2024 GMT
        Subject: CN=C32EF4FE36152A1B57F8E49C42908899C2D13CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:fd:ff:8b:a2:79:f7:f1:fe:1d:e6:38:b0:
                    a5:bd:71:71:47:20:c5:e1:ca:e3:82:7c:38:d8:86:
                    ca:4a:77:8c:d5:84:79:78:70:60:55:9d:11:39:c9:
                    30:87:5f:5c:55:22:25:82:b2:5c:95:88:3d:a0:26:
                    65:40:ea:ec:30:fc:17:31:77:0d:49:2a:33:5c:d0:
                    46:b7:8c:9c:6e:69:1c:7c:cd:14:86:d6:f8:9d:f8:
                    e9:fe:07:6c:47:0a:aa:96:bc:06:fd:69:46:06:57:
                    3b:49:8a:5a:32:c0:bd:be:b9:56:cb:0f:a0:60:1f:
                    8b:0b:80:ba:db:30:4f:1b:a4:dd:19:9b:3b:61:20:
                    3b:6d:31:81:1d:eb:cf:3e:bc:40:2f:e7:87:a3:2c:
                    8e:0e:64:76:66:da:39:0f:2f:42:7f:d4:00:05:96:
                    84:72:23:54:36:17:07:07:5f:f2:49:f8:76:0f:c2:
                    5d:45:cc:8f:4a:8e:23:47:10:fd:11:d5:46:5d:e0:
                    29:a6:f2:c0:6c:51:ab:69:68:98:55:ff:4f:42:30:
                    2e:70:40:9f:df:b8:74:fc:66:6d:d9:1a:e6:19:ae:
                    8b:ae:0e:40:56:e5:80:ec:78:91:30:e1:d1:c6:6c:
                    ac:29:50:43:00:a3:3e:35:27:f8:59:94:b0:a8:f4:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:2E:F4:FE:36:15:2A:1B:57:F8:E4:9C:42:90:88:99:C2:D1:3C:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NQAbH6qBU4xDXTPDJrAMMf1n3YV8C7CEiKdesWtc9eB/0/C32EF4FE36152A1B57F8E49C42908899C2D13CF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.16.0/22
                IPv6:
                  2804:7b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271412

    Signature Algorithm: sha256WithRSAEncryption
         89:50:9b:1a:fa:84:bd:a3:15:bf:6c:f2:df:5a:b6:b5:60:2c:
         41:4a:78:84:65:da:40:ed:e5:7a:9e:c8:8a:f4:e3:2f:81:7f:
         45:df:7a:80:35:53:f9:e8:c2:e0:2c:f9:51:ca:d9:62:c5:23:
         33:04:23:9e:10:d4:e6:36:a5:ae:23:80:0f:6a:47:8d:c8:6d:
         21:30:88:38:e0:db:e8:fe:95:cc:f4:eb:3d:e1:68:c3:c9:42:
         06:c2:f2:b3:a6:e8:33:92:66:d0:a3:6b:9d:ab:50:b0:b2:3d:
         f2:df:5c:76:e7:14:ca:41:88:98:7d:8a:05:fb:23:2b:f4:0a:
         35:17:99:24:0c:0b:71:77:c1:5d:2a:35:47:0d:92:e6:86:67:
         9b:06:60:f2:b1:07:59:ec:55:a9:bd:3d:47:ad:94:e3:e2:68:
         3e:5a:be:60:b0:63:02:e9:ec:95:aa:3a:e5:36:91:cd:16:53:
         1f:66:1c:86:7d:4d:58:81:3c:74:60:6d:13:7b:f0:3d:52:df:
         84:de:88:f3:53:c9:0f:14:13:bd:df:cc:9a:ab:60:d8:5c:63:
         1f:05:24:b6:05:0a:d9:67:77:68:f0:4b:87:78:8e:9e:8a:16:
         82:87:ab:97:9c:9d:b5:dd:6a:1d:db:10:54:7b:5b:58:bc:b1:
         90:65:e0:aa
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUe8XF7AKvSpXrCDurdevU67uLf/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDExMjE1NTFaFw0yNDA2MjkxMjIwNTFaMDMxMTAvBgNV
BAMTKEMzMkVGNEZFMzYxNTJBMUI1N0Y4RTQ5QzQyOTA4ODk5QzJEMTNDRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMP3/i6J59/H+HeY4sKW9cXFH
IMXhyuOCfDjYhspKd4zVhHl4cGBVnRE5yTCHX1xVIiWCslyViD2gJmVA6uww/Bcx
dw1JKjNc0Ea3jJxuaRx8zRSG1vid+On+B2xHCqqWvAb9aUYGVztJiloywL2+uVbL
D6BgH4sLgLrbME8bpN0ZmzthIDttMYEd688+vEAv54ejLI4OZHZm2jkPL0J/1AAF
loRyI1Q2FwcHX/JJ+HYPwl1FzI9KjiNHEP0R1UZd4Cmm8sBsUatpaJhV/09CMC5w
QJ/fuHT8Zm3ZGuYZrouuDkBW5YDseJEw4dHGbKwpUEMAoz41J/hZlLCo9KZpAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDLvT+NhUqG1f4
5JxCkIiZwtE88DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85TlFBYkg2cUJVNHhEWFRQREpyQU1NZjFuM1lWOEM3Q0Vp
S2Rlc1d0YzllQi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOU5RQWJINnFCVTR4RFhUUERKckFNTWYxbjNZVjhDN0NF
aUtkZXNXdGM5ZUIvMC9DMzJFRjRGRTM2MTUyQTFCNTdGOEU0OUM0MjkwODg5OUMy
RDEzQ0YwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALP+BAwDQQCAAIwBwMF
ACgEeyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQCJUJsa+oS9oxW/bPLfWra1YCxBSniEZdpA7eV6nsiK9OMvgX9F33qANVP5
6MLgLPlRytlixSMzBCOeENTmNqWuI4APakeNyG0hMIg44Nvo/pXM9Os94WjDyUIG
wvKzpugzkmbQo2udq1Cwsj3y31x25xTKQYiYfYoF+yMr9Ao1F5kkDAtxd8FdKjVH
DZLmhmebBmDysQdZ7FWpvT1HrZTj4mg+Wr5gsGMC6eyVqjrlNpHNFlMfZhyGfU1Y
gTx0YG0Te/A9Ut+E3ojzU8kPFBO938yaq2DYXGMfBSS2BQrZZ3do8EuHeI6eihaC
h6uXnJ213Wod2xBUe1tYvLGQZeCq
-----END CERTIFICATE-----