Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer
File:                     CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.cer (raw, json)
Hash identifier:          K0zP6Pr55yKwY1wY0F47+8p+lTwhfrYOl1Qo/BCatso=
Subject key identifier:   CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65C97439DA5B445FE33244A2EC75BF77EDDD710D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 01:01:57 +0000
Certificate not after:    Wed 15 Jan 2025 01:06:57 +0000
Subordinate resources:    AS: 265385
                          IP: 170.254.248.0/22
                          IP: 2804:3344::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c9:74:39:da:5b:44:5f:e3:32:44:a2:ec:75:bf:77:ed:dd:71:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 01:01:57 2024 GMT
            Not After : Jan 15 01:06:57 2025 GMT
        Subject: CN=CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:08:25:3d:bb:5d:3f:a0:04:16:07:d0:7b:
                    86:9d:bc:be:cc:a2:70:a9:28:de:f1:2d:a2:b8:ed:
                    ee:08:5a:77:a3:01:81:98:a1:5a:75:ca:6b:11:33:
                    91:97:f2:a4:29:35:51:f9:cb:68:a0:67:fa:93:94:
                    3b:76:54:52:69:e2:ba:68:ae:84:35:75:a9:52:0b:
                    58:24:69:f6:e7:79:c9:2d:37:ef:5e:47:12:2c:0d:
                    c8:bb:d4:db:f8:02:a0:60:d3:53:47:6c:96:30:41:
                    79:74:1a:17:0c:9c:f1:78:b4:ca:24:21:77:de:bb:
                    b9:70:5e:a5:b2:34:d4:22:a6:11:3a:06:e4:aa:30:
                    b9:96:24:45:c8:5b:e1:6e:13:19:c5:26:88:a6:04:
                    9a:28:48:c9:ca:cd:6d:c7:1c:24:26:ad:3b:49:35:
                    af:fa:a1:fb:39:a5:8a:5a:6f:99:36:31:ce:06:b7:
                    cf:ac:cd:4d:8a:1a:f9:05:0b:c4:ed:01:50:ff:e5:
                    14:94:1c:b7:ae:1c:1f:41:71:8d:04:6a:cc:43:16:
                    ef:74:f4:f4:12:ad:49:2d:24:06:82:ac:da:8d:21:
                    99:39:f9:21:c1:ba:a5:77:5b:69:24:59:a0:d8:3f:
                    59:88:18:7b:9f:f7:2f:10:55:87:18:aa:8e:a5:f8:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:F7:BB:C1:E6:37:F8:F0:17:C5:A0:51:A7:EF:75:CF:F8:BD:34:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ci5iYxwiA8mxKEEzn5SmJqCo7PLByRcK4V9wfj7hMJX/0/CBF7BBC1E637F8F017C5A051A7EF75CFF8BD34C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.248.0/22
                IPv6:
                  2804:3344::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265385

    Signature Algorithm: sha256WithRSAEncryption
         0f:67:87:df:9d:d1:42:6a:04:29:85:81:30:79:43:b8:cb:41:
         26:d1:ad:4e:3b:2a:8f:22:97:6a:9f:bb:8a:df:5f:31:ad:5e:
         48:f8:12:eb:12:f2:fd:bc:b7:05:c7:bd:39:68:60:07:86:17:
         7f:24:4f:23:fe:82:79:2f:9b:c6:d4:a3:b1:c3:98:26:61:00:
         23:45:2b:50:c6:8e:cb:65:49:1e:df:e9:09:91:d3:4b:63:dc:
         0e:45:cc:f7:08:7e:53:03:27:28:6c:61:2c:03:23:f1:d0:0b:
         36:10:fc:fb:86:1c:8a:e8:a4:0e:df:6d:56:f1:43:2b:33:c8:
         34:48:05:5d:ce:a9:a5:a2:da:a7:97:30:53:e3:a1:60:33:a7:
         4b:5e:db:70:ce:d3:dd:6c:77:7c:8c:7c:2a:9b:49:0d:8c:8c:
         9c:18:d3:af:e4:68:c8:69:69:8d:4b:79:f5:48:df:d7:f5:bd:
         ad:f4:7c:f3:f6:76:ba:da:83:52:8f:f5:c0:dd:d1:a6:ca:30:
         c9:4d:4b:4d:44:2b:c2:9b:8c:58:19:7c:42:a1:38:46:1e:67:
         70:50:a5:72:99:d1:08:fb:8e:0d:36:f2:84:52:67:ee:b7:27:
         16:2f:55:92:7b:e5:de:33:92:b1:38:34:aa:37:89:25:e0:ae:
         3f:09:4a:ec
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZcl0OdpbRF/jMkSi7HW/d+3dcQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTcwMTAxNTdaFw0yNTAxMTUwMTA2NTdaMDMxMTAvBgNV
BAMTKENCRjdCQkMxRTYzN0Y4RjAxN0M1QTA1MUE3RUY3NUNGRjhCRDM0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBogglPbtdP6AEFgfQe4advL7M
onCpKN7xLaK47e4IWnejAYGYoVp1ymsRM5GX8qQpNVH5y2igZ/qTlDt2VFJp4rpo
roQ1dalSC1gkafbnecktN+9eRxIsDci71Nv4AqBg01NHbJYwQXl0GhcMnPF4tMok
IXfeu7lwXqWyNNQiphE6BuSqMLmWJEXIW+FuExnFJoimBJooSMnKzW3HHCQmrTtJ
Na/6ofs5pYpab5k2Mc4Gt8+szU2KGvkFC8TtAVD/5RSUHLeuHB9BcY0EasxDFu90
9PQSrUktJAaCrNqNIZk5+SHBuqV3W2kkWaDYP1mIGHuf9y8QVYcYqo6l+IBhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL97vB5jf48BfF
oFGn73XP+L00yDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yY2k1aVl4d2lBOG14S0VFem41U21KcUNvN1BMQnlSY0s0
Vjl3Zmo3aE1KWC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yY2k1aVl4d2lBOG14S0VFem41U21KcUNvN1BMQnlSY0s0
Vjl3Zmo3aE1KWC8wL0NCRjdCQkMxRTYzN0Y4RjAxN0M1QTA1MUE3RUY3NUNGRjhC
RDM0QzgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr++DANBAIAAjAHAwUA
KAQzRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEDKkwDQYJKoZIhvcNAQELBQAD
ggEBAA9nh9+d0UJqBCmFgTB5Q7jLQSbRrU47Ko8il2qfu4rfXzGtXkj4EusS8v28
twXHvTloYAeGF38kTyP+gnkvm8bUo7HDmCZhACNFK1DGjstlSR7f6QmR00tj3A5F
zPcIflMDJyhsYSwDI/HQCzYQ/PuGHIropA7fbVbxQyszyDRIBV3OqaWi2qeXMFPj
oWAzp0te23DO091sd3yMfCqbSQ2MjJwY06/kaMhpaY1LefVI39f1va30fPP2drra
g1KP9cDd0abKMMlNS01EK8KbjFgZfEKhOEYeZ3BQpXKZ0Qj7jg028oRSZ+63JxYv
VZJ75d4zkrE4NKo3iSXgrj8JSuw=
-----END CERTIFICATE-----