Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.cer
File:                     CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.cer (raw, json)
Hash identifier:          E9lO7YGFwQR0+oVMOIr40ihcwiLuyuyhuFToq3rFDW0=
Subject key identifier:   CC:1E:FB:B5:CC:B3:70:D8:64:0B:DF:F9:A7:EA:05:46:3E:1E:B8:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7218AEF11E6F6F80AA5CB46AD145D57E99AB7CB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Nov 2021 17:49:49 +0000
Certificate not after:    Fri 11 Nov 2022 17:54:49 +0000
Subordinate resources:    AS: 28142
                          IP: 186.224.64.0/20
                          IP: 187.49.80.0/20
                          IP: 2804:fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:ae:f1:1e:6f:6f:80:aa:5c:b4:6a:d1:45:d5:7e:99:ab:7c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 12 17:49:49 2021 GMT
            Not After : Nov 11 17:54:49 2022 GMT
        Subject: CN=CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:d9:0f:a0:0f:11:88:36:9b:11:1c:71:6a:
                    f0:36:41:e2:78:5c:ec:75:6e:f8:36:19:08:96:bb:
                    95:22:a9:3c:89:0e:39:96:1c:63:f0:63:73:05:c4:
                    1e:bc:f9:5e:a5:6f:09:a3:20:97:27:c5:b5:06:e6:
                    57:e3:a8:2a:31:2f:02:bf:2e:df:0d:f5:cb:ae:67:
                    29:9c:51:51:2f:67:e3:03:91:4d:1b:e3:c9:39:af:
                    e9:68:3c:cf:9b:7e:65:20:0c:35:f1:b4:df:ce:7e:
                    3d:6c:cf:9c:e4:40:d3:77:a2:7d:7d:a7:9d:9b:c0:
                    48:7f:d5:d2:b8:6b:e0:08:a1:fb:20:0e:4a:33:15:
                    78:d2:86:98:90:99:be:56:fb:f5:8e:1f:fc:57:6b:
                    36:58:52:d0:b2:e3:a5:63:16:b4:a9:c2:8d:44:02:
                    7d:9d:22:54:62:e5:12:c3:5e:7b:cb:8d:e4:b3:91:
                    af:99:b8:8a:d3:67:03:7c:80:94:be:54:47:df:54:
                    f9:77:54:93:5c:26:06:d9:dc:5e:3f:4e:3b:2f:e0:
                    0b:b6:e5:48:aa:33:73:fc:47:7c:78:aa:77:e2:64:
                    23:a0:30:79:95:4f:a9:89:2f:ad:e1:3d:54:c6:a3:
                    f2:5a:76:2f:d1:a0:d4:02:ad:dd:41:d5:9d:8e:dc:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:1E:FB:B5:CC:B3:70:D8:64:0B:DF:F9:A7:EA:05:46:3E:1E:B8:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/CC1EFBB5CCB370D8640BDFF9A7EA05463E1EB8B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.64.0/20
                  187.49.80.0/20
                IPv6:
                  2804:fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28142

    Signature Algorithm: sha256WithRSAEncryption
         2b:cf:48:7c:5e:b1:66:f7:4d:4d:c6:71:4e:89:ca:22:a2:f0:
         5e:89:d3:13:56:12:fb:ee:df:bf:39:a0:90:a0:e6:9b:49:02:
         0e:7e:99:a6:17:69:5c:76:25:a6:06:05:36:e9:6c:ac:12:83:
         55:5e:87:28:a8:a1:10:1e:dc:73:df:ee:1c:43:28:a5:3f:a4:
         ee:4d:8f:18:93:1a:b7:36:b2:fe:a8:fe:2e:c6:fb:34:b3:e8:
         74:53:c3:46:3b:fa:7f:77:ae:e7:42:a4:f5:23:72:05:a8:a3:
         3a:cb:eb:79:13:5b:d5:ea:f6:8e:0b:ad:dc:c5:72:02:6b:a2:
         c6:13:2b:4e:d5:d0:3b:88:44:5a:f7:bb:76:dc:f9:d4:22:bb:
         a5:43:a0:69:49:d7:c7:3c:1f:f7:b9:aa:98:f0:25:1a:43:ac:
         61:31:4f:03:6e:5f:3c:ac:b9:c7:4d:cb:19:e9:3f:b0:f0:4f:
         03:3c:29:56:ef:c8:34:d6:02:8c:57:08:8c:3a:86:59:8c:b6:
         52:a1:1d:d2:9b:d1:39:22:75:ee:ed:e9:c3:34:b2:20:77:44:
         0e:96:8e:62:b1:ed:91:f2:b3:24:18:e4:84:95:41:68:ef:20:
         5e:b5:47:37:b3:c0:ca:52:6a:87:22:9a:fa:b5:fe:0a:63:a2:
         d6:56:0a:f3
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUchiu8R5vb4CqXLRq0UXVfpmrfLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTExMTIxNzQ5NDlaFw0yMjExMTExNzU0NDlaMDMxMTAvBgNV
BAMTKENDMUVGQkI1Q0NCMzcwRDg2NDBCREZGOUE3RUEwNTQ2M0UxRUI4QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iNkPoA8RiDabERxxavA2QeJ4
XOx1bvg2GQiWu5UiqTyJDjmWHGPwY3MFxB68+V6lbwmjIJcnxbUG5lfjqCoxLwK/
Lt8N9cuuZymcUVEvZ+MDkU0b48k5r+loPM+bfmUgDDXxtN/Ofj1sz5zkQNN3on19
p52bwEh/1dK4a+AIofsgDkozFXjShpiQmb5W+/WOH/xXazZYUtCy46VjFrSpwo1E
An2dIlRi5RLDXnvLjeSzka+ZuIrTZwN8gJS+VEffVPl3VJNcJgbZ3F4/Tjsv4Au2
5UiqM3P8R3x4qnfiZCOgMHmVT6mJL63hPVTGo/Jadi/RoNQCrd1B1Z2O3IlRAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMHvu1zLNw2GQL
3/mn6gVGPh64tzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FdlhoaTJnYkY4MjZ3amFSYlBnYUc2RGJZbk1Oa1Q2Z1h6
dFlLMzZqVlZzai8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXZYaGkyZ2JGODI2d2phUmJQZ2FHNkRiWW5NTmtUNmdY
enRZSzM2alZWc2ovMC9DQzFFRkJCNUNDQjM3MEQ4NjQwQkRGRjlBN0VBMDU0NjNF
MUVCOEI3Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAS64EADBAS7MVAwDQQC
AAIwBwMFACgEAPwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbe4wDQYJKoZIhvcN
AQELBQADggEBACvPSHxesWb3TU3GcU6JyiKi8F6J0xNWEvvu3785oJCg5ptJAg5+
maYXaVx2JaYGBTbpbKwSg1VehyiooRAe3HPf7hxDKKU/pO5NjxiTGrc2sv6o/i7G
+zSz6HRTw0Y7+n93rudCpPUjcgWoozrL63kTW9Xq9o4LrdzFcgJrosYTK07V0DuI
RFr3u3bc+dQiu6VDoGlJ18c8H/e5qpjwJRpDrGExTwNuXzysucdNyxnpP7DwTwM8
KVbvyDTWAoxXCIw6hlmMtlKhHdKb0Tkide7t6cM0siB3RA6WjmKx7ZHysyQY5ISV
QWjvIF61RzezwMpSaocimvq1/gpjotZWCvM=
-----END CERTIFICATE-----