Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer
File:                     C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer (raw, json)
Hash identifier:          aBp1yrqm0ZYa3mK/1R8iTHtWeAsFxhlsVskVU0r1CFE=
Subject key identifier:   C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       493064191FD4537697C700AEEA44D71189D463EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 21:05:09 +0000
Certificate not after:    Fri 24 May 2024 21:10:09 +0000
Subordinate resources:    AS: 266931
                          IP: 45.5.32.0/22
                          IP: 45.225.84.0/22
                          IP: 2804:4580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:64:19:1f:d4:53:76:97:c7:00:ae:ea:44:d7:11:89:d4:63:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 21:05:09 2023 GMT
            Not After : May 24 21:10:09 2024 GMT
        Subject: CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:bb:4f:33:6b:32:da:bb:2d:b5:f5:d7:60:
                    8d:6c:f5:92:50:6b:c8:8f:e8:c3:57:43:bc:9b:f6:
                    7f:03:d6:fd:f1:5c:fd:4c:35:45:b5:a1:9b:65:b0:
                    e3:72:60:32:09:ab:7d:0c:83:aa:ca:53:7b:27:87:
                    e9:22:da:61:3b:3c:85:33:6b:b1:a8:0b:c0:8b:bc:
                    81:e2:ef:e8:b9:4d:c5:f9:ee:4b:a8:0a:f0:cc:8c:
                    79:55:e0:1c:4b:26:0e:4d:66:cb:ac:ff:5c:82:c1:
                    4b:a5:81:c6:62:e1:93:32:14:e3:62:8e:6b:8a:03:
                    69:fe:01:be:63:81:12:fe:4d:70:78:e4:9a:14:50:
                    ae:f5:20:88:63:58:4c:5e:27:33:8b:8a:db:7b:dc:
                    3f:fb:11:bb:a0:9b:ab:65:65:4f:2b:24:b1:c9:8f:
                    2c:44:1f:b4:0c:5d:92:bb:36:50:a0:5b:75:6d:35:
                    ff:95:56:c4:c9:31:1b:5a:f2:75:9e:11:b2:a4:75:
                    68:3e:9b:45:1b:6d:40:e1:44:dc:43:29:5d:5e:e3:
                    89:ec:0d:0d:8b:5b:71:2c:d4:a5:76:13:dd:bd:41:
                    be:97:57:86:f6:a6:f8:81:73:25:96:8d:14:c5:75:
                    18:43:97:bc:cc:ec:98:30:92:19:7f:4b:b9:03:89:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.32.0/22
                  45.225.84.0/22
                IPv6:
                  2804:4580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266931

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:8e:ba:74:00:83:b2:a6:4b:3e:c0:17:5d:be:7c:4b:69:
         a2:a7:91:e8:98:68:d8:9e:8b:27:dc:69:2c:32:0e:58:43:db:
         d8:ef:7b:49:61:53:52:94:cc:a9:85:88:a0:2c:39:c6:f8:d9:
         3d:1f:3d:15:62:ab:d2:53:6f:89:9b:a6:b9:74:72:f1:0b:63:
         c3:7d:85:68:77:41:f8:eb:a7:c0:08:0a:e3:ed:8c:72:f5:cc:
         0f:ba:65:ff:1e:8c:db:6e:b4:9c:9c:82:6d:77:b1:d8:0e:30:
         15:64:50:5e:85:42:3b:5d:a3:03:68:fe:2c:ae:e6:6d:55:8c:
         c5:f9:b0:74:25:14:b8:6e:64:c6:da:6c:4f:9d:ee:be:6c:bb:
         ac:55:42:67:d8:04:fb:f0:62:f4:1b:e3:84:44:b9:4d:30:b1:
         c6:e8:d1:1d:a1:30:70:9d:c8:52:00:c4:74:7d:42:3b:46:cf:
         dc:f8:58:71:09:38:f3:dd:34:a9:15:99:c7:a8:fe:36:f6:9c:
         45:4f:86:ad:16:7a:ad:2b:48:f3:2a:11:4a:b5:47:38:f6:f2:
         97:ba:62:9e:ab:86:83:01:f9:46:8e:e4:8d:2e:17:c8:20:67:
         63:ac:46:dc:8e:84:76:e5:2d:3c:74:fc:6a:59:5b:d7:2d:ab:
         e6:f0:01:5e
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUSTBkGR/UU3aXxwCu6kTXEYnUY+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjYyMTA1MDlaFw0yNDA1MjQyMTEwMDlaMDMxMTAvBgNV
BAMTKEM2NTE1RjBBQTFCODA1QUY5M0NFNDkzRDA3OUNFMkQzQzg3RUJBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorbtPM2sy2rsttfXXYI1s9ZJQ
a8iP6MNXQ7yb9n8D1v3xXP1MNUW1oZtlsONyYDIJq30Mg6rKU3snh+ki2mE7PIUz
a7GoC8CLvIHi7+i5TcX57kuoCvDMjHlV4BxLJg5NZsus/1yCwUulgcZi4ZMyFONi
jmuKA2n+Ab5jgRL+TXB45JoUUK71IIhjWExeJzOLitt73D/7Ebugm6tlZU8rJLHJ
jyxEH7QMXZK7NlCgW3VtNf+VVsTJMRta8nWeEbKkdWg+m0UbbUDhRNxDKV1e44ns
DQ2LW3Es1KV2E929Qb6XV4b2pviBcyWWjRTFdRhDl7zM7Jgwkhl/S7kDiWzFAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGUV8KobgFr5PO
ST0HnOLTyH66HjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EQXRMZUdFak1HM2lBUWFQQ1hyUzZUbXVvRHdERWs1TUEx
M0djOW51c21LNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1B
MTNHYzludXNtSzUvMC9DNjUxNUYwQUExQjgwNUFGOTNDRTQ5M0QwNzlDRTJEM0M4
N0VCQTFFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAItBSADBAIt4VQwDQQC
AAIwBwMFACgERYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBKzMA0GCSqGSIb3
DQEBCwUAA4IBAQADbY66dACDsqZLPsAXXb58S2mip5HomGjYnosn3GksMg5YQ9vY
73tJYVNSlMyphYigLDnG+Nk9Hz0VYqvSU2+Jm6a5dHLxC2PDfYVod0H466fACArj
7Yxy9cwPumX/HozbbrScnIJtd7HYDjAVZFBehUI7XaMDaP4sruZtVYzF+bB0JRS4
bmTG2mxPne6+bLusVUJn2AT78GL0G+OERLlNMLHG6NEdoTBwnchSAMR0fUI7Rs/c
+FhxCTjz3TSpFZnHqP429pxFT4atFnqtK0jzKhFKtUc49vKXumKeq4aDAflGjuSN
LhfIIGdjrEbcjoR25S08dPxqWVvXLavm8AFe
-----END CERTIFICATE-----