Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer
File:                     C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer (raw, json)
Hash identifier:          2hPyXGbS9JT6QIlNY8HW2PgiUCL/yYwvrXF8XMiIXgc=
Subject key identifier:   C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31A1D0AD8CD6DDD71D260D8C6E6CFAA2AF7552BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 12:59:03 +0000
Certificate not after:    Fri 11 Oct 2024 13:04:03 +0000
Subordinate resources:    AS: 270519
                          IP: 24.152.104.0/22
                          IP: 2804:6d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:d0:ad:8c:d6:dd:d7:1d:26:0d:8c:6e:6c:fa:a2:af:75:52:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 12:59:03 2023 GMT
            Not After : Oct 11 13:04:03 2024 GMT
        Subject: CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:89:04:a1:18:ea:46:63:d7:e8:ee:85:33:
                    1b:1f:0d:ac:77:07:0a:99:70:c1:cb:d9:e3:65:c0:
                    7a:84:e5:cb:87:0f:91:51:41:86:6f:84:bc:7e:a2:
                    e5:87:f9:09:56:32:52:ae:b8:08:71:7f:8d:2c:61:
                    16:6e:ef:ba:24:f5:44:84:79:15:43:25:3c:d9:69:
                    90:a2:9b:b3:91:e5:4e:ee:c3:d6:7b:9c:bc:23:9a:
                    94:44:70:a6:59:d6:35:0c:96:67:b5:ba:9b:dc:a6:
                    d1:c3:ef:92:ba:c4:f4:65:21:4f:2b:c5:14:0a:9c:
                    32:a3:7d:0b:85:fa:28:13:5e:95:d5:d7:13:49:17:
                    95:29:fb:8d:55:75:61:fa:c0:cf:18:c0:c4:6f:ae:
                    aa:b3:da:c3:3d:8b:f4:21:c3:fb:0e:7b:03:07:0c:
                    31:5a:ab:63:8b:83:04:49:34:f2:37:c5:26:31:9b:
                    ad:ba:76:71:b7:a4:e1:5b:a2:eb:58:c8:2a:a9:17:
                    17:26:59:4d:ce:1b:8b:3d:f0:6b:64:b1:02:bc:a8:
                    5d:27:be:41:83:d7:46:c3:c9:96:1b:69:5e:44:e9:
                    3c:1a:31:d9:1a:c2:21:6f:f1:96:bb:04:f8:5d:52:
                    1f:f6:97:a4:a5:ab:a1:7c:8f:85:8b:2b:56:c1:8e:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/22
                IPv6:
                  2804:6d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270519

    Signature Algorithm: sha256WithRSAEncryption
         48:94:90:c2:6b:55:73:55:ca:8d:12:bf:4e:0b:a2:c5:58:2b:
         a8:e1:b6:31:9e:a7:28:0c:dd:74:78:24:30:85:d2:31:55:51:
         7d:19:0a:fd:1c:ed:bf:6b:fb:4e:8d:3a:f3:26:89:81:67:26:
         d9:fd:01:3d:3d:87:82:64:25:99:3c:75:1c:91:d2:dd:24:3b:
         c7:fd:51:a2:ef:33:59:03:4e:4f:89:bb:ba:5e:15:1f:e9:3a:
         9e:ee:1f:f2:a2:23:14:79:75:2b:94:bc:5c:e6:0a:0e:b9:1d:
         f5:0b:45:57:3b:15:16:4b:97:a9:b1:48:59:f9:a3:29:78:41:
         93:b9:00:d1:2d:f0:e7:f4:e6:50:9f:9b:f3:88:5c:51:e6:e0:
         aa:68:a6:7e:b2:ff:24:36:cb:b1:d4:99:af:87:26:4c:76:e2:
         3d:68:2e:e6:9d:d6:e9:4a:c9:bb:de:47:6e:32:64:e1:f4:b2:
         2f:2a:c6:dc:d2:d7:96:05:ca:1b:ed:18:a5:9b:b5:93:a4:e4:
         ff:44:06:18:aa:f3:63:1b:94:99:d4:42:f2:f8:d1:c7:24:d6:
         3f:16:1d:81:7b:72:28:7c:88:5f:82:90:7f:3a:fb:14:39:06:
         2c:74:66:3e:5f:84:ef:9b:7c:6c:96:33:c0:64:a1:ee:6d:69:
         eb:81:39:b0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMaHQrYzW3dcdJg2Mbmz6oq91UrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMTMxMjU5MDNaFw0yNDEwMTExMzA0MDNaMDMxMTAvBgNV
BAMTKEM1OTQ3RUUzQkE5NTRFMjg3QTFGNDlERjc4RjQzRTg4MURBMEExQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWIkEoRjqRmPX6O6FMxsfDax3
BwqZcMHL2eNlwHqE5cuHD5FRQYZvhLx+ouWH+QlWMlKuuAhxf40sYRZu77ok9USE
eRVDJTzZaZCim7OR5U7uw9Z7nLwjmpREcKZZ1jUMlme1upvcptHD75K6xPRlIU8r
xRQKnDKjfQuF+igTXpXV1xNJF5Up+41VdWH6wM8YwMRvrqqz2sM9i/Qhw/sOewMH
DDFaq2OLgwRJNPI3xSYxm626dnG3pOFboutYyCqpFxcmWU3OG4s98GtksQK8qF0n
vkGD10bDyZYbaV5E6TwaMdkawiFv8Za7BPhdUh/2l6Slq6F8j4WLK1bBjl5ZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFlH7jupVOKHof
Sd949D6IHaChuDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9DOEF2RzZhTE5TVVlITUFjM2JLMUdaTjRlQW16S0N5UFl1
UkxQdk5meHpoai8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZ
dVJMUHZOZnh6aGovMC9DNTk0N0VFM0JBOTU0RTI4N0ExRjQ5REY3OEY0M0U4ODFE
QTBBMUI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIYmGgwDQQCAAIwBwMF
ACgEbTwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCC3MA0GCSqGSIb3DQEBCwUA
A4IBAQBIlJDCa1VzVcqNEr9OC6LFWCuo4bYxnqcoDN10eCQwhdIxVVF9GQr9HO2/
a/tOjTrzJomBZybZ/QE9PYeCZCWZPHUckdLdJDvH/VGi7zNZA05Pibu6XhUf6Tqe
7h/yoiMUeXUrlLxc5goOuR31C0VXOxUWS5epsUhZ+aMpeEGTuQDRLfDn9OZQn5vz
iFxR5uCqaKZ+sv8kNsux1JmvhyZMduI9aC7mndbpSsm73kduMmTh9LIvKsbc0teW
Bcob7Rilm7WTpOT/RAYYqvNjG5SZ1ELy+NHHJNY/Fh2Be3IofIhfgpB/OvsUOQYs
dGY+X4Tvm3xsljPAZKHubWnrgTmw
-----END CERTIFICATE-----