Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer
File:                     CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer (raw, json)
Hash identifier:          o0s9Txt/ZltRPcm7odQe4V1mN6jps53qj0M5MYfH7u8=
Subject key identifier:   CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70E42DD97CEE47611283988C1BD016466DAC0D2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Nov 2022 20:28:28 +0000
Certificate not after:    Mon 13 Nov 2023 20:33:28 +0000
Subordinate resources:    AS: 268027
                          IP: 45.168.36.0/22
                          IP: 2804:56d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e4:2d:d9:7c:ee:47:61:12:83:98:8c:1b:d0:16:46:6d:ac:0d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 20:28:28 2022 GMT
            Not After : Nov 13 20:33:28 2023 GMT
        Subject: CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:79:64:5e:b1:a6:7f:75:1b:81:72:c0:04:
                    e5:61:b4:62:27:6d:ae:58:b1:4d:75:0b:25:41:40:
                    f9:86:1e:cd:e7:6b:ff:3f:4f:c5:67:f1:2f:c3:99:
                    c5:57:b2:5c:26:11:fd:df:31:88:dc:44:b8:65:1f:
                    69:2f:fa:c4:82:45:0e:88:9e:67:85:a9:9b:05:c9:
                    2c:5b:2e:b5:0e:03:77:f6:fb:06:1e:aa:7b:c9:9d:
                    0e:95:f9:b8:c4:7d:42:f7:e1:3d:41:c6:23:dc:04:
                    b2:f4:57:0d:34:d6:b4:83:d7:18:50:94:1e:28:17:
                    ce:c2:0d:9c:d0:c9:37:bf:d3:6d:0f:b6:bf:ab:f8:
                    88:28:84:89:20:d8:c9:bb:da:85:bd:47:f5:2a:21:
                    38:8f:19:04:7f:af:16:2d:2a:e3:02:51:18:13:7d:
                    f6:0b:52:ea:6b:a2:9b:e1:97:e9:4f:71:55:7d:e6:
                    e3:29:87:2b:08:7e:db:d9:cb:ff:0b:8b:da:2f:ee:
                    11:13:55:1d:16:27:7f:d7:d8:5a:48:5b:3d:2d:26:
                    9e:0b:4c:8e:7b:2e:c2:0d:9d:4e:d7:cc:03:be:2e:
                    4f:e9:04:f1:30:a2:29:5d:65:90:fc:76:1b:d7:31:
                    c8:42:4d:b2:97:b0:2a:9e:6d:e9:cc:74:cd:d7:a4:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22
                IPv6:
                  2804:56d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268027

    Signature Algorithm: sha256WithRSAEncryption
         4d:95:5a:2d:8b:67:df:8e:9f:f6:47:e6:68:04:bf:5e:5b:3a:
         c1:0f:03:9e:04:52:3f:f2:37:9f:a5:b3:89:24:7e:f2:56:7d:
         98:c7:af:ef:da:ab:0b:72:d6:c4:b8:bb:11:c0:87:50:aa:cc:
         a4:57:b4:73:ed:6b:e7:56:87:30:34:2f:17:d2:78:43:bc:a7:
         07:45:b0:b4:fa:c7:dc:98:8b:7d:10:c7:f5:c8:d9:08:1e:03:
         e6:ad:c2:3a:24:a0:40:54:31:d9:70:ce:66:d2:b8:8d:77:36:
         82:5f:54:ea:67:63:fb:80:78:66:e3:9e:40:7d:8c:3d:4c:7f:
         c0:35:e2:10:3b:b6:eb:0a:39:40:27:df:8f:4f:ce:e5:69:62:
         8c:fb:6f:51:32:2f:ef:95:73:2a:98:c4:3d:28:ad:ee:64:e2:
         60:4c:ff:f5:72:d2:60:98:a6:82:c3:a6:ce:bb:c1:b1:07:6e:
         b0:1e:a4:28:24:fc:d8:8e:83:f7:90:63:f1:f2:8d:70:d4:bf:
         dc:0c:62:cf:05:42:a9:67:1b:b9:7a:c8:37:55:dd:1c:a4:51:
         fc:f6:96:05:7f:52:4b:d5:84:05:f3:c0:00:18:64:c2:96:36:
         48:3d:ab:ea:ce:68:57:d5:69:ac:ed:bb:05:cf:f1:31:90:04:
         95:53:d5:bc
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUcOQt2XzuR2ESg5iMG9AWRm2sDSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjExMTQyMDI4MjhaFw0yMzExMTMyMDMzMjhaMDMxMTAvBgNV
BAMTKENDNzhCREY4NUUzOURFQ0ZENjBDMDkxNzhFRTMxMUNDRUJGRTc3QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8nlkXrGmf3UbgXLABOVhtGIn
ba5YsU11CyVBQPmGHs3na/8/T8Vn8S/DmcVXslwmEf3fMYjcRLhlH2kv+sSCRQ6I
nmeFqZsFySxbLrUOA3f2+wYeqnvJnQ6V+bjEfUL34T1BxiPcBLL0Vw001rSD1xhQ
lB4oF87CDZzQyTe/020Ptr+r+IgohIkg2Mm72oW9R/UqITiPGQR/rxYtKuMCURgT
ffYLUupropvhl+lPcVV95uMphysIftvZy/8Li9ov7hETVR0WJ3/X2FpIWz0tJp4L
TI57LsINnU7XzAO+Lk/pBPEwoildZZD8dhvXMchCTbKXsCqebenMdM3XpKdhAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMeL34Xjnez9YM
CReO4xHM6/53xzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZ1NWV0ZuaVJpV2hGN1VNR1hkelVNQzhxS2R0TXNyS0Y3
MlFmWXJLdWlUZi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yZ1NWV0ZuaVJpV2hGN1VNR1hkelVNQzhxS2R0TXNyS0Y3
MlFmWXJLdWlUZi8wL0NDNzhCREY4NUUzOURFQ0ZENjBDMDkxNzhFRTMxMUNDRUJG
RTc3QzcubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2oJDANBAIAAjAHAwUA
KARW2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEFvswDQYJKoZIhvcNAQELBQAD
ggEBAE2VWi2LZ9+On/ZH5mgEv15bOsEPA54EUj/yN5+ls4kkfvJWfZjHr+/aqwty
1sS4uxHAh1CqzKRXtHPta+dWhzA0LxfSeEO8pwdFsLT6x9yYi30Qx/XI2QgeA+at
wjokoEBUMdlwzmbSuI13NoJfVOpnY/uAeGbjnkB9jD1Mf8A14hA7tusKOUAn349P
zuVpYoz7b1EyL++VcyqYxD0ore5k4mBM//Vy0mCYpoLDps67wbEHbrAepCgk/NiO
g/eQY/HyjXDUv9wMYs8FQqlnG7l6yDdV3RykUfz2lgV/UkvVhAXzwAAYZMKWNkg9
q+rOaFfVaaztuwXP8TGQBJVT1bw=
-----END CERTIFICATE-----