Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.cer
File:                     CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.cer (raw, json)
Hash identifier:          xEdsuNtUbN/zmROME9hAPsYNJlvYS5tYHT8wsOo7Lq8=
Subject key identifier:   CE:3F:0D:4F:D7:00:F5:36:DD:BE:79:1E:3B:13:0E:CF:1F:05:BA:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CFF28140D7A0579B0426B25F2D086F4BAD43863
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Sep 2022 11:10:23 +0000
Certificate not after:    Thu 07 Sep 2023 11:15:23 +0000
Subordinate resources:    AS: 268728
                          IP: 45.171.192.0/22
                          IP: 2804:59d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ff:28:14:0d:7a:05:79:b0:42:6b:25:f2:d0:86:f4:ba:d4:38:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 11:10:23 2022 GMT
            Not After : Sep  7 11:15:23 2023 GMT
        Subject: CN=CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:2b:05:e0:98:c6:7f:f7:9a:02:31:78:9f:
                    c4:fa:6a:9d:5a:e3:e4:cc:e2:b3:0f:7e:4e:ad:9f:
                    b9:c7:0a:2e:d3:4a:a6:6d:03:5f:e2:77:38:23:e0:
                    8c:3f:f4:3e:bf:13:d6:a8:d7:d4:48:62:6f:fe:ed:
                    66:72:62:46:b7:63:d8:ec:1c:c1:84:98:b9:f5:55:
                    7b:a8:d4:d9:5f:20:73:4d:61:7e:fb:91:02:fb:6b:
                    13:fc:e8:11:b2:d8:7e:3c:42:eb:27:55:79:d3:30:
                    99:93:fc:f6:41:01:4f:3d:99:9f:23:57:86:03:05:
                    e9:78:94:89:d4:bc:dc:b8:68:34:76:78:a9:19:d0:
                    e7:42:d4:1b:99:cd:65:55:2c:fd:1d:34:e8:36:a7:
                    0b:1d:e5:2d:7c:72:35:c2:6b:5d:38:9a:47:04:c3:
                    5d:22:ad:32:64:cd:48:d6:15:02:61:67:35:0f:3a:
                    eb:9f:bf:c2:94:e6:42:1a:99:2a:b3:79:af:fb:24:
                    6f:98:00:74:ee:ad:a8:72:37:1e:7c:71:29:64:17:
                    e4:61:13:04:a2:07:cf:b6:c9:07:75:35:09:03:38:
                    32:ab:f4:d6:e3:4d:bb:99:a4:85:8a:c2:17:8f:27:
                    3e:67:a3:c4:06:52:f4:94:d2:54:dc:98:a5:f0:c8:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:3F:0D:4F:D7:00:F5:36:DD:BE:79:1E:3B:13:0E:CF:1F:05:BA:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/CE3F0D4FD700F536DDBE791E3B130ECF1F05BAA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/22
                IPv6:
                  2804:59d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268728

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:04:12:4f:80:7b:60:7f:46:df:17:55:a2:b9:ee:69:f9:
         c3:ba:d5:86:50:28:1e:32:ce:37:78:ae:13:be:d9:d0:31:6c:
         09:c6:ea:c0:c0:b9:f1:27:17:b4:fc:14:be:99:6f:4b:80:ab:
         b3:dd:0a:87:78:2a:9d:cb:47:6e:09:6a:7b:08:8d:13:97:e7:
         44:39:45:83:fa:af:ae:4a:19:c4:55:16:59:d4:d4:d6:82:06:
         ca:f5:3e:84:d7:51:21:8d:52:b0:33:e7:f2:4c:76:46:c4:c3:
         97:22:d4:4b:f9:b5:2a:6c:c5:f4:8f:4f:74:da:06:92:01:37:
         dd:3f:8d:3d:16:96:d5:f6:6f:ae:24:ef:69:72:fb:ff:05:d7:
         97:b9:2f:17:36:8c:4c:d1:11:84:39:51:a6:39:d2:42:bc:3c:
         3a:c5:5e:9d:85:77:96:23:e6:70:fe:4c:d8:05:e6:69:1e:66:
         c9:cd:71:36:95:2d:80:13:b3:d0:8d:dd:da:e4:15:06:b8:dd:
         cf:33:cd:5c:f4:eb:c5:54:c6:4d:83:27:a2:33:7b:8b:6f:6e:
         62:32:d5:ec:57:4f:84:c1:cd:c2:7f:1b:94:a8:9d:bd:2d:81:
         3f:78:74:64:85:ef:f2:a5:79:f6:ff:3b:f4:18:30:0a:21:7a:
         5d:b1:74:b2
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUHP8oFA16BXmwQmsl8tCG9LrUOGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjA5MDgxMTEwMjNaFw0yMzA5MDcxMTE1MjNaMDMxMTAvBgNV
BAMTKENFM0YwRDRGRDcwMEY1MzZEREJFNzkxRTNCMTMwRUNGMUYwNUJBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqisF4JjGf/eaAjF4n8T6ap1a
4+TM4rMPfk6tn7nHCi7TSqZtA1/idzgj4Iw/9D6/E9ao19RIYm/+7WZyYka3Y9js
HMGEmLn1VXuo1NlfIHNNYX77kQL7axP86BGy2H48QusnVXnTMJmT/PZBAU89mZ8j
V4YDBel4lInUvNy4aDR2eKkZ0OdC1BuZzWVVLP0dNOg2pwsd5S18cjXCa104mkcE
w10irTJkzUjWFQJhZzUPOuufv8KU5kIamSqzea/7JG+YAHTurahyNx58cSlkF+Rh
EwSiB8+2yQd1NQkDODKr9NbjTbuZpIWKwhePJz5no8QGUvSU0lTcmKXwyAsfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOPw1P1wD1Nt2+
eR47Ew7PHwW6ozAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83eVhyRzNLaVZzdUxCd3ZKajJGSG9aeVg1V1RGVmhyU0dT
aEFrbkh0ZkMyQi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83eVhyRzNLaVZzdUxCd3ZKajJGSG9aeVg1V1RGVmhyU0dT
aEFrbkh0ZkMyQi8wL0NFM0YwRDRGRDcwMEY1MzZEREJFNzkxRTNCMTMwRUNGMUYw
NUJBQTMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2rwDANBAIAAjAHAwUA
KARZ1DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGbgwDQYJKoZIhvcNAQELBQAD
ggEBADCjBBJPgHtgf0bfF1Wiue5p+cO61YZQKB4yzjd4rhO+2dAxbAnG6sDAufEn
F7T8FL6Zb0uAq7PdCod4Kp3LR24JansIjROX50Q5RYP6r65KGcRVFlnU1NaCBsr1
PoTXUSGNUrAz5/JMdkbEw5ci1Ev5tSpsxfSPT3TaBpIBN90/jT0WltX2b64k72ly
+/8F15e5Lxc2jEzREYQ5UaY50kK8PDrFXp2Fd5Yj5nD+TNgF5mkeZsnNcTaVLYAT
s9CN3drkFQa43c8zzVz068VUxk2DJ6Ize4tvbmIy1exXT4TBzcJ/G5Sonb0tgT94
dGSF7/Klefb/O/QYMAohel2xdLI=
-----END CERTIFICATE-----