Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBC830CAF36FF747522530EB76F75E56F83D2B7C.cer
File:                     CBC830CAF36FF747522530EB76F75E56F83D2B7C.cer (raw, json)
Hash identifier:          yGrul+GlPpZTsOKA6Kf/SoPULj2mjlIGjprxCP/b5CY=
Subject key identifier:   CB:C8:30:CA:F3:6F:F7:47:52:25:30:EB:76:F7:5E:56:F8:3D:2B:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32690C9A580CE54F201D90DCA441F7DFE27D43C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/CBC830CAF36FF747522530EB76F75E56F83D2B7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 18:23:59 +0000
Certificate not after:    Tue 16 Jul 2024 18:28:59 +0000
Subordinate resources:    AS: 28605
                          IP: 179.127.112.0/22
                          IP: 201.20.144.0/20
                          IP: 2804:3c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:0c:9a:58:0c:e5:4f:20:1d:90:dc:a4:41:f7:df:e2:7d:43:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 18:23:59 2023 GMT
            Not After : Jul 16 18:28:59 2024 GMT
        Subject: CN=CBC830CAF36FF747522530EB76F75E56F83D2B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:b3:ee:00:d6:e9:30:bd:31:70:b2:e2:ed:
                    03:56:c0:ff:43:1a:5a:7d:75:e6:0c:b3:c8:ee:0b:
                    d1:4e:bd:08:4f:2a:28:de:f7:b8:f5:3a:b8:ed:e9:
                    09:4d:71:ff:2c:1e:f1:18:77:63:75:c4:c3:c3:6e:
                    3f:fd:89:5f:f1:26:72:46:f0:0f:03:c2:1b:6b:25:
                    79:36:f4:b1:75:1b:97:0f:55:af:fa:05:de:03:68:
                    ee:f9:b8:11:88:62:86:f1:48:e0:66:9f:a3:70:f7:
                    9b:73:42:3d:3d:e2:07:7a:06:9b:df:d6:7a:c8:1d:
                    c8:eb:82:75:42:03:2a:cd:a3:44:20:4e:88:f5:52:
                    97:18:12:cf:45:3a:48:47:a2:25:be:26:a6:20:3b:
                    32:a0:af:6d:5d:bb:a6:53:62:fa:1c:55:0e:bd:a3:
                    b0:80:0d:34:b2:05:cf:6f:04:a2:25:5c:4f:82:ca:
                    52:59:fa:7e:3a:b5:ce:02:a4:06:f6:ec:85:1e:14:
                    61:05:c5:4b:bd:d8:6a:b8:78:d0:ed:21:64:aa:b2:
                    e9:bb:01:a2:1a:a0:97:0c:07:cb:1c:84:69:37:46:
                    23:27:4e:a0:94:e7:62:69:7a:9c:f9:b9:33:bd:ba:
                    49:65:c0:b1:7a:42:a1:4c:42:95:42:0a:f7:e4:20:
                    cd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:C8:30:CA:F3:6F:F7:47:52:25:30:EB:76:F7:5E:56:F8:3D:2B:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/1/CBC830CAF36FF747522530EB76F75E56F83D2B7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.112.0/22
                  201.20.144.0/20
                IPv6:
                  2804:3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28605

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:6c:e0:c2:2a:51:16:68:ec:1f:0b:a1:51:84:f2:73:cf:
         7c:75:43:32:0c:2a:d3:aa:2f:0d:44:eb:ed:24:49:d9:56:57:
         82:0e:a1:e0:27:ca:c2:96:5d:27:12:80:e3:aa:f8:13:be:03:
         40:90:25:0c:d0:9c:05:24:01:95:08:ba:f2:c3:70:e1:eb:4b:
         3b:9f:f0:4e:12:12:03:a7:91:a4:3e:96:fe:77:8e:33:a6:64:
         df:bf:a6:10:68:02:f9:bc:37:44:66:61:3d:bf:cf:fc:0d:2f:
         cc:55:4c:2e:96:5f:9b:cd:12:d6:f4:d5:69:53:bc:08:9e:93:
         44:ac:7e:fd:84:16:6c:c8:75:63:a8:9a:25:93:fd:fb:c5:8c:
         6f:80:22:e6:f0:4d:a2:fb:cd:46:bb:d6:ac:e6:5a:db:56:ad:
         87:f7:f5:b4:1b:09:6d:3e:00:de:4d:e3:b0:db:24:eb:cf:3f:
         5e:c0:6c:57:5e:08:a8:d4:d4:0f:02:ca:b1:a3:56:d5:e3:b8:
         39:f1:ad:4c:ea:6a:a5:2f:71:c2:b9:44:83:50:f4:a0:9c:71:
         ee:13:85:06:bd:b0:53:08:d4:5f:d9:c2:ee:45:70:c2:7b:db:
         8f:74:50:cd:6a:15:72:c9:d3:0f:2c:cc:65:49:a3:a8:6a:56:
         1e:75:6e:0a
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUMmkMmlgM5U8gHZDcpEH33+J9Q8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MTgxODIzNTlaFw0yNDA3MTYxODI4NTlaMDMxMTAvBgNV
BAMTKENCQzgzMENBRjM2RkY3NDc1MjI1MzBFQjc2Rjc1RTU2RjgzRDJCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiH7PuANbpML0xcLLi7QNWwP9D
Glp9deYMs8juC9FOvQhPKije97j1Orjt6QlNcf8sHvEYd2N1xMPDbj/9iV/xJnJG
8A8DwhtrJXk29LF1G5cPVa/6Bd4DaO75uBGIYobxSOBmn6Nw95tzQj094gd6Bpvf
1nrIHcjrgnVCAyrNo0QgToj1UpcYEs9FOkhHoiW+JqYgOzKgr21du6ZTYvocVQ69
o7CADTSyBc9vBKIlXE+CylJZ+n46tc4CpAb27IUeFGEFxUu92Gq4eNDtIWSqsum7
AaIaoJcMB8schGk3RiMnTqCU52Jpepz5uTO9ukllwLF6QqFMQpVCCvfkIM0dAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLyDDK82/3R1Il
MOt2915W+D0rfDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80Wjk4d1U1aTVjTTk3SGhpNlVvYlBtY2JkTUhlWGUzRVd5
QXY0UDFtWkh5Uy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VX
eUF2NFAxbVpIeVMvMS9DQkM4MzBDQUYzNkZGNzQ3NTIyNTMwRUI3NkY3NUU1NkY4
M0QyQjdDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKzf3ADBATJFJAwDQQC
AAIwBwMFACgEA8AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICb70wDQYJKoZIhvcN
AQELBQADggEBACsnbODCKlEWaOwfC6FRhPJzz3x1QzIMKtOqLw1E6+0kSdlWV4IO
oeAnysKWXScSgOOq+BO+A0CQJQzQnAUkAZUIuvLDcOHrSzuf8E4SEgOnkaQ+lv53
jjOmZN+/phBoAvm8N0RmYT2/z/wNL8xVTC6WX5vNEtb01WlTvAiek0Ssfv2EFmzI
dWOomiWT/fvFjG+AIubwTaL7zUa71qzmWttWrYf39bQbCW0+AN5N47DbJOvPP17A
bFdeCKjU1A8CyrGjVtXjuDnxrUzqaqUvccK5RINQ9KCcce4ThQa9sFMI1F/Zwu5F
cMJ72490UM1qFXLJ0w8szGVJo6hqVh51bgo=
-----END CERTIFICATE-----