Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C6E3B25A87A261683004AF163D2E6F266660F44B.cer
File:                     C6E3B25A87A261683004AF163D2E6F266660F44B.cer (raw, json)
Hash identifier:          WBU8wYfxAg6V0Cho5szZ3gB2xAul1MqlhGeTle1iokg=
Subject key identifier:   C6:E3:B2:5A:87:A2:61:68:30:04:AF:16:3D:2E:6F:26:66:60:F4:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4DB535BDC8D8A1D3A98BA6C9E0E65D7B8DB20E9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 19:32:36 +0000
Certificate not after:    Mon 13 May 2024 19:37:36 +0000
Subordinate resources:    AS: 268595
                          IP: 45.163.100.0/22
                          IP: 2804:539c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b5:35:bd:c8:d8:a1:d3:a9:8b:a6:c9:e0:e6:5d:7b:8d:b2:0e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 19:32:36 2023 GMT
            Not After : May 13 19:37:36 2024 GMT
        Subject: CN=C6E3B25A87A261683004AF163D2E6F266660F44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:c9:cf:9e:93:87:a3:b0:f7:8c:b4:91:b6:
                    bf:08:e5:86:7d:7c:c0:ea:a8:fb:7c:bf:e1:01:d7:
                    2a:f3:44:e0:7c:08:22:19:14:06:9c:22:83:7b:d0:
                    b2:ed:d6:13:9c:0d:31:ef:18:c6:e7:af:c3:87:1b:
                    9b:b8:bc:ac:c8:d9:fc:a8:e8:1c:8d:64:1f:d2:74:
                    58:d7:fb:b6:49:e9:10:15:ad:7b:23:95:2a:b7:2e:
                    1d:a1:05:85:6b:eb:25:f4:4c:f9:d4:7b:53:a0:de:
                    2b:88:d6:24:8e:7b:36:2b:3f:8f:5d:0e:1c:8b:85:
                    77:8e:cc:22:48:45:39:e9:5c:60:fc:90:60:50:57:
                    8b:45:ad:fb:c1:a9:1a:32:84:06:fb:b4:8f:a4:e9:
                    29:29:e0:8e:45:8d:90:97:6f:9d:42:18:da:1d:e7:
                    3a:f1:4b:82:2e:2a:3e:9e:c3:30:fa:36:34:93:d0:
                    7f:ce:1c:b2:83:57:09:86:73:ef:7c:47:5e:58:6c:
                    23:98:69:6b:81:eb:55:c6:0e:59:80:2f:53:f8:cc:
                    bc:7a:2c:92:1e:f7:8b:d1:56:fa:da:22:ab:5f:06:
                    9d:55:05:60:44:ef:03:c4:63:cf:c9:ff:12:05:27:
                    95:ab:ce:ad:49:22:1d:e7:e3:5f:3f:8c:0f:bf:fb:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:E3:B2:5A:87:A2:61:68:30:04:AF:16:3D:2E:6F:26:66:60:F4:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/C6E3B25A87A261683004AF163D2E6F266660F44B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.100.0/22
                IPv6:
                  2804:539c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268595

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:b3:aa:b3:18:c4:74:8d:17:f2:93:96:d4:26:4f:ce:ef:
         d0:6c:de:9f:60:2e:7d:ab:10:ac:37:29:5a:ce:ec:e5:7a:58:
         00:25:b8:d0:f0:e5:6a:b3:a8:6c:d4:78:fd:0a:0f:56:de:73:
         bd:63:61:0d:a7:73:c0:9a:aa:5c:2b:c8:82:18:26:00:be:3b:
         08:26:9a:34:b2:4f:87:a9:8b:74:81:39:83:e2:82:52:58:ca:
         18:8c:d8:28:fa:40:26:e1:ab:dd:25:77:c2:73:c6:69:3d:e2:
         27:58:b0:b1:20:50:30:e4:67:41:e2:4c:25:f5:c4:7f:20:f1:
         ce:f8:57:1c:91:14:a0:24:53:18:78:41:f2:a8:7e:a5:c5:c3:
         7d:14:98:3d:60:da:f0:d7:26:64:d0:1a:62:a4:87:c4:60:a7:
         8d:8d:64:0a:37:ca:9a:38:93:5e:7a:90:34:1b:4d:10:70:58:
         4d:3d:f9:df:29:bd:11:87:82:7a:47:e0:40:b1:b1:e1:cb:82:
         aa:8a:53:52:5d:0c:2a:50:07:45:ff:64:a2:b4:05:28:69:8e:
         08:20:eb:33:c8:9e:eb:15:ae:33:d5:93:17:b7:08:98:86:fd:
         28:96:e2:63:8e:37:07:7a:2f:82:0c:cd:7e:72:c7:be:83:4f:
         4a:bc:cf:ea
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTbU1vcjYodOpi6bJ4OZde42yDpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTUxOTMyMzZaFw0yNDA1MTMxOTM3MzZaMDMxMTAvBgNV
BAMTKEM2RTNCMjVBODdBMjYxNjgzMDA0QUYxNjNEMkU2RjI2NjY2MEY0NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWsnPnpOHo7D3jLSRtr8I5YZ9
fMDqqPt8v+EB1yrzROB8CCIZFAacIoN70LLt1hOcDTHvGMbnr8OHG5u4vKzI2fyo
6ByNZB/SdFjX+7ZJ6RAVrXsjlSq3Lh2hBYVr6yX0TPnUe1Og3iuI1iSOezYrP49d
DhyLhXeOzCJIRTnpXGD8kGBQV4tFrfvBqRoyhAb7tI+k6Skp4I5FjZCXb51CGNod
5zrxS4IuKj6ewzD6NjST0H/OHLKDVwmGc+98R15YbCOYaWuB61XGDlmAL1P4zLx6
LJIe94vRVvraIqtfBp1VBWBE7wPEY8/J/xIFJ5Wrzq1JIh3n418/jA+/+3jlAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTG47Jah6JhaDAE
rxY9Lm8mZmD0SzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yUGN5ZGh0MU1KVWlzUUF5V2RkRmk1aEJVdEJLaEdkWEdL
OXJETll0dUZNNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yUGN5ZGh0MU1KVWlzUUF5V2RkRmk1aEJVdEJLaEdkWEdL
OXJETll0dUZNNC8wL0M2RTNCMjVBODdBMjYxNjgzMDA0QUYxNjNEMkU2RjI2NjY2
MEY0NEIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2jZDANBAIAAjAHAwUA
KARTnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGTMwDQYJKoZIhvcNAQELBQAD
ggEBAE83s6qzGMR0jRfyk5bUJk/O79Bs3p9gLn2rEKw3KVrO7OV6WAAluNDw5Wqz
qGzUeP0KD1bec71jYQ2nc8CaqlwryIIYJgC+OwgmmjSyT4epi3SBOYPiglJYyhiM
2Cj6QCbhq90ld8Jzxmk94idYsLEgUDDkZ0HiTCX1xH8g8c74VxyRFKAkUxh4QfKo
fqXFw30UmD1g2vDXJmTQGmKkh8Rgp42NZAo3ypo4k156kDQbTRBwWE09+d8pvRGH
gnpH4ECxseHLgqqKU1JdDCpQB0X/ZKK0BShpjggg6zPInusVrjPVkxe3CJiG/SiW
4mOONwd6L4IMzX5yx76DT0q8z+o=
-----END CERTIFICATE-----