Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD595B734685C1E1321F4AE24C925EA2C710159F.cer
File:                     CD595B734685C1E1321F4AE24C925EA2C710159F.cer (raw, json)
Hash identifier:          02tvcD4GSW14uay1YGufBLYsUH98vIUuiQ1uOjkZHWM=
Subject key identifier:   CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5843F49FED9D8E24462EB2FDF3B1D6A40773078F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 16:28:14 +0000
Certificate not after:    Thu 30 May 2024 16:33:14 +0000
Subordinate resources:    AS: 266506
                          IP: 170.244.180.0/22
                          IP: 2804:38dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:43:f4:9f:ed:9d:8e:24:46:2e:b2:fd:f3:b1:d6:a4:07:73:07:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 16:28:14 2023 GMT
            Not After : May 30 16:33:14 2024 GMT
        Subject: CN=CD595B734685C1E1321F4AE24C925EA2C710159F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:43:91:88:39:1b:1b:09:e9:01:32:1f:85:
                    4e:23:ab:2e:90:f1:ff:76:c4:0d:f3:c4:0e:34:3c:
                    c3:a4:a6:60:7f:3c:65:eb:4d:a4:ce:32:c8:a4:6a:
                    61:21:16:12:34:0d:25:1c:02:52:ea:4a:c6:ea:85:
                    c9:e4:51:65:91:6e:03:8c:ec:e4:11:1d:12:d2:a1:
                    58:a0:f8:03:91:4f:de:64:4b:bd:ec:9a:f3:cb:33:
                    95:5d:64:a5:f6:42:cd:55:13:bf:47:01:0f:bd:b5:
                    ff:a0:72:a3:e1:11:1c:b5:59:41:fe:d9:b1:81:73:
                    1c:66:e4:dd:ba:93:50:c1:d8:29:25:17:92:ab:ef:
                    75:7e:59:da:c0:79:5f:92:1f:b1:ac:84:5d:c2:7f:
                    1a:43:83:29:b1:0f:ef:0f:3c:65:d3:bf:44:69:8a:
                    0d:d7:b9:8d:1b:9b:44:12:f7:f3:75:d4:3c:5b:c7:
                    41:fa:31:c2:0a:1e:c0:23:60:8a:a3:87:df:3f:be:
                    fd:d6:d1:1c:bc:19:0d:1f:12:5d:2a:25:59:3b:c4:
                    ae:23:78:04:a1:81:74:cf:87:19:62:e7:f6:da:47:
                    b2:48:28:f4:22:d1:bd:2b:83:46:f2:82:6b:93:58:
                    fe:81:a9:fc:cf:6b:b3:ac:28:5c:5c:1c:34:f4:f5:
                    cf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:59:5B:73:46:85:C1:E1:32:1F:4A:E2:4C:92:5E:A2:C7:10:15:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/CD595B734685C1E1321F4AE24C925EA2C710159F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.180.0/22
                IPv6:
                  2804:38dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266506

    Signature Algorithm: sha256WithRSAEncryption
         78:03:89:d8:be:1d:42:19:01:46:3b:50:11:92:25:f7:bb:e2:
         33:c4:b1:be:8c:20:29:73:ae:26:c6:53:cc:2f:ba:40:98:ab:
         f0:d8:b0:6f:0a:e2:32:cc:61:c7:02:ca:ca:57:7e:14:21:f8:
         a5:61:ee:3a:62:86:9b:e6:50:39:d3:c2:b9:2b:25:6d:08:f9:
         77:7b:ee:7a:a2:d5:28:d1:50:4a:57:8b:7e:70:eb:89:1f:fc:
         01:20:1c:42:95:3a:da:a2:25:4b:23:bd:67:cd:95:e9:7e:bf:
         7c:39:73:11:d3:28:f2:f8:72:c7:27:7a:3e:26:e3:46:34:6b:
         7f:f3:f5:2d:1a:fe:bd:82:c8:75:a5:89:f3:26:f1:a1:4b:13:
         bb:26:d7:d2:7f:74:75:d9:31:d6:a3:42:92:d9:6c:1f:cf:72:
         a0:50:7a:54:66:93:0d:51:e8:51:39:92:16:7e:8c:e3:9e:2d:
         d8:08:44:c1:58:8f:13:e5:9a:7d:a0:50:4a:8b:25:30:cd:75:
         70:49:c6:c7:5c:af:2f:a7:3d:de:d8:14:0f:83:52:ce:a1:fa:
         f5:f6:88:0b:c5:10:c6:e7:a8:44:0a:99:a6:06:bc:45:5c:a2:
         3d:7a:24:53:45:1e:a5:48:7c:88:d3:1f:e4:55:b6:b1:19:68:
         61:a7:90:ae
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWEP0n+2djiRGLrL987HWpAdzB48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MDExNjI4MTRaFw0yNDA1MzAxNjMzMTRaMDMxMTAvBgNV
BAMTKENENTk1QjczNDY4NUMxRTEzMjFGNEFFMjRDOTI1RUEyQzcxMDE1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sEORiDkbGwnpATIfhU4jqy6Q
8f92xA3zxA40PMOkpmB/PGXrTaTOMsikamEhFhI0DSUcAlLqSsbqhcnkUWWRbgOM
7OQRHRLSoVig+AORT95kS73smvPLM5VdZKX2Qs1VE79HAQ+9tf+gcqPhERy1WUH+
2bGBcxxm5N26k1DB2CklF5Kr73V+WdrAeV+SH7GshF3CfxpDgymxD+8PPGXTv0Rp
ig3XuY0bm0QS9/N11Dxbx0H6McIKHsAjYIqjh98/vv3W0Ry8GQ0fEl0qJVk7xK4j
eAShgXTPhxli5/baR7JIKPQi0b0rg0bygmuTWP6BqfzPa7OsKFxcHDT09c8DAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNWVtzRoXB4TIf
SuJMkl6ixxAVnzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ydEZ1a2txeHR3UVVQbnd3dzZTWmR6QlpINk54aXhBNThr
MURHRVBvOHI2dC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4
azFER0VQbzhyNnQvMC9DRDU5NUI3MzQ2ODVDMUUxMzIxRjRBRTI0QzkyNUVBMkM3
MTAxNTlGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq9LQwDQQCAAIwBwMF
ACgEONwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBEKMA0GCSqGSIb3DQEBCwUA
A4IBAQB4A4nYvh1CGQFGO1ARkiX3u+IzxLG+jCApc64mxlPML7pAmKvw2LBvCuIy
zGHHAsrKV34UIfilYe46Yoab5lA508K5KyVtCPl3e+56otUo0VBKV4t+cOuJH/wB
IBxClTraoiVLI71nzZXpfr98OXMR0yjy+HLHJ3o+JuNGNGt/8/UtGv69gsh1pYnz
JvGhSxO7JtfSf3R12THWo0KS2Wwfz3KgUHpUZpMNUehROZIWfozjni3YCETBWI8T
5Zp9oFBKiyUwzXVwScbHXK8vpz3e2BQPg1LOofr19ogLxRDG56hECpmmBrxFXKI9
eiRTRR6lSHyI0x/kVbaxGWhhp5Cu
-----END CERTIFICATE-----