Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C93665FD2FAB227723D69D323E25E8D3BA158A46.cer
File:                     C93665FD2FAB227723D69D323E25E8D3BA158A46.cer (raw, json)
Hash identifier:          exxCDSztX8A8lc6S3vpnR6J0dnMp5JyA7qKKdSIjkdg=
Subject key identifier:   C9:36:65:FD:2F:AB:22:77:23:D6:9D:32:3E:25:E8:D3:BA:15:8A:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37C3BAABC9293D5EAD0A36E7D31EF7111759AA96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/C93665FD2FAB227723D69D323E25E8D3BA158A46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 23:20:30 +0000
Certificate not after:    Mon 13 May 2024 23:25:30 +0000
Subordinate resources:    AS: 271220
                          IP: 179.49.244.0/22
                          IP: 2804:7818::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c3:ba:ab:c9:29:3d:5e:ad:0a:36:e7:d3:1e:f7:11:17:59:aa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 23:20:30 2023 GMT
            Not After : May 13 23:25:30 2024 GMT
        Subject: CN=C93665FD2FAB227723D69D323E25E8D3BA158A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:9b:2e:16:9a:0e:c1:3c:5b:2a:0d:73:c7:
                    1d:b4:93:55:4d:47:d6:5a:0e:7d:97:6a:3c:0c:39:
                    8b:34:5c:25:18:7f:e8:02:82:a2:38:e1:13:a3:81:
                    87:6d:07:62:fb:fb:48:5d:d8:ec:2d:1a:c8:ff:8c:
                    f2:f8:6f:c0:61:55:e2:4a:e8:aa:8c:bc:27:e4:42:
                    f7:04:c9:50:8b:3f:d9:6c:a1:55:30:85:6d:e2:0a:
                    85:f2:a6:f0:75:2f:1c:ea:fb:16:29:a7:96:5d:62:
                    9d:bb:9b:15:04:db:b7:f6:08:23:56:12:95:6d:fe:
                    06:e2:8a:7b:d4:1f:c6:b5:ba:2c:fe:cc:f6:3a:79:
                    5c:e9:56:b8:ec:1e:bd:7b:89:41:8b:be:6a:2c:2e:
                    a2:42:65:a4:4b:c7:64:39:b1:81:10:9f:f9:de:ea:
                    57:41:6b:a7:74:34:67:eb:5d:fb:5d:f7:c9:8d:ec:
                    f1:f0:57:8e:db:b8:30:d9:89:75:e3:68:10:93:41:
                    e5:7c:2f:e3:95:5b:63:5a:4a:ae:f4:59:d6:f3:a0:
                    d8:a3:2b:bd:cb:fd:57:24:f1:4b:36:4c:01:04:a1:
                    4f:71:16:be:f4:2c:76:60:8a:2f:f1:d6:61:07:f0:
                    a9:5a:af:50:e2:ac:03:68:0f:d4:5a:9a:0d:cc:06:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:36:65:FD:2F:AB:22:77:23:D6:9D:32:3E:25:E8:D3:BA:15:8A:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMSn9xbTQM2cUWMT9DnB3LNGWKMFUwQmSjqtTHmTyp5G/0/C93665FD2FAB227723D69D323E25E8D3BA158A46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.244.0/22
                IPv6:
                  2804:7818::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271220

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:80:58:f1:b9:14:8f:c4:67:42:d7:b4:56:6d:cc:73:3a:
         c6:c2:9a:45:bf:02:3e:8b:04:77:0d:b0:cf:71:aa:f8:54:33:
         33:6d:6f:29:5b:cc:29:17:a3:06:97:da:3d:79:6a:1e:bf:03:
         a5:1b:f7:42:7e:5d:2f:dc:fb:83:32:19:c8:88:a0:d6:b4:97:
         5a:2b:53:98:04:26:a1:bf:86:1e:73:65:d1:6c:bb:f9:a8:56:
         51:45:5c:65:de:49:af:2d:e8:49:8e:9e:a0:7f:2f:7d:be:81:
         c4:3f:26:ff:2c:b3:b6:90:1c:f0:74:79:d0:70:d3:42:29:63:
         ff:d8:89:ce:fb:4c:3b:5a:79:43:b3:4b:8c:dd:99:ab:b6:72:
         3a:5f:7f:97:b9:cd:f7:49:19:69:f3:5b:43:c9:70:8c:ff:5e:
         33:a3:7f:4c:64:2a:49:7a:51:82:bf:d0:79:ce:75:63:46:f5:
         c1:d3:07:82:a2:1a:be:f0:6c:ce:ff:27:e5:7e:3f:e1:ec:24:
         74:4e:00:0e:a9:29:9b:83:27:0d:41:49:c9:41:e5:18:2d:41:
         d2:67:93:bc:8a:c4:83:44:8e:e3:fa:c4:8b:e6:d7:81:cc:b9:
         21:a8:86:17:3f:e0:7a:42:21:4b:ab:17:f0:37:00:16:d6:7f:
         d3:2a:36:d7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUN8O6q8kpPV6tCjbn0x73ERdZqpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTUyMzIwMzBaFw0yNDA1MTMyMzI1MzBaMDMxMTAvBgNV
BAMTKEM5MzY2NUZEMkZBQjIyNzcyM0Q2OUQzMjNFMjVFOEQzQkExNThBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJC5suFpoOwTxbKg1zxx20k1VN
R9ZaDn2XajwMOYs0XCUYf+gCgqI44ROjgYdtB2L7+0hd2OwtGsj/jPL4b8BhVeJK
6KqMvCfkQvcEyVCLP9lsoVUwhW3iCoXypvB1Lxzq+xYpp5ZdYp27mxUE27f2CCNW
EpVt/gbiinvUH8a1uiz+zPY6eVzpVrjsHr17iUGLvmosLqJCZaRLx2Q5sYEQn/ne
6ldBa6d0NGfrXftd98mN7PHwV47buDDZiXXjaBCTQeV8L+OVW2NaSq70WdbzoNij
K73L/Vck8Us2TAEEoU9xFr70LHZgii/x1mEH8Klar1DirANoD9Ramg3MBuSxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJNmX9L6sidyPW
nTI+JejTuhWKRjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GTVNuOXhiVFFNMmNVV01UOURuQjNMTkdXS01GVXdRbVNq
cXRUSG1UeXA1Ry8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GTVNuOXhiVFFNMmNVV01UOURuQjNMTkdXS01GVXdRbVNq
cXRUSG1UeXA1Ry8wL0M5MzY2NUZEMkZBQjIyNzcyM0Q2OUQzMjNFMjVFOEQzQkEx
NThBNDYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMx9DANBAIAAjAHAwUA
KAR4GDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI3QwDQYJKoZIhvcNAQELBQAD
ggEBACaKgFjxuRSPxGdC17RWbcxzOsbCmkW/Aj6LBHcNsM9xqvhUMzNtbylbzCkX
owaX2j15ah6/A6Ub90J+XS/c+4MyGciIoNa0l1orU5gEJqG/hh5zZdFsu/moVlFF
XGXeSa8t6EmOnqB/L32+gcQ/Jv8ss7aQHPB0edBw00IpY//Yic77TDtaeUOzS4zd
mau2cjpff5e5zfdJGWnzW0PJcIz/XjOjf0xkKkl6UYK/0HnOdWNG9cHTB4KiGr7w
bM7/J+V+P+HsJHROAA6pKZuDJw1BSclB5RgtQdJnk7yKxINEjuP6xIvm14HMuSGo
hhc/4HpCIUurF/A3ABbWf9MqNtc=
-----END CERTIFICATE-----