Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
File:                     D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer (raw, json)
Hash identifier:          uFkSxSuSM+w/QtY01pmz3bjEmH6wv7Ro5sVJgnRH8Ds=
Subject key identifier:   D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       081B5F18066449B095757848F01A94EDDF6C513C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 14:55:11 +0000
Certificate not after:    Thu 18 Jul 2024 15:00:11 +0000
Subordinate resources:    AS: 269186
                          IP: 45.180.108.0/22
                          IP: 2804:60b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1b:5f:18:06:64:49:b0:95:75:78:48:f0:1a:94:ed:df:6c:51:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 14:55:11 2023 GMT
            Not After : Jul 18 15:00:11 2024 GMT
        Subject: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:db:2d:d2:37:95:ca:27:18:21:e7:b0:6b:
                    55:6d:d6:33:9d:40:f3:6b:dc:08:fe:ae:6d:34:e1:
                    6b:24:ad:79:f9:74:12:09:1b:bd:81:93:45:57:41:
                    c4:53:29:47:bb:7e:b5:d6:3a:fb:88:92:2c:ed:69:
                    54:30:14:f3:24:5e:c7:0b:54:2c:ce:01:f6:39:02:
                    20:78:b0:6f:d0:6c:8c:48:0f:9d:91:45:68:13:3d:
                    67:9e:e0:ad:bc:a6:7d:18:12:7c:9e:79:5d:46:af:
                    1c:81:a1:4a:c9:21:76:b4:72:cc:22:d4:84:0c:6b:
                    11:48:ac:28:f5:4d:24:c8:15:df:de:f6:40:83:74:
                    2b:b2:ea:0b:1e:be:16:13:53:fc:b4:59:72:2e:6b:
                    84:c5:a1:b8:bf:68:73:72:96:c9:80:9b:39:50:8b:
                    23:b6:83:14:4e:7b:ca:f8:0e:dd:95:f1:4b:38:a7:
                    4e:51:8b:e4:8e:b3:f7:62:a0:c9:ec:1a:ad:68:a4:
                    b0:b2:b5:a8:63:bc:11:89:13:e4:80:85:57:d9:0e:
                    78:7f:b4:31:7a:ba:36:27:60:6f:65:12:bf:68:9b:
                    4c:12:a1:1a:8a:2e:d4:fe:f2:1b:8c:ab:11:28:5c:
                    6b:1d:28:84:9a:de:0b:d5:95:27:bc:b2:12:2d:3d:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.108.0/22
                IPv6:
                  2804:60b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269186

    Signature Algorithm: sha256WithRSAEncryption
         a4:bd:15:33:03:7d:9f:fd:76:90:07:de:25:7c:a2:94:17:c8:
         65:da:f6:44:da:42:85:58:36:de:df:1f:e5:05:9e:a5:cc:1f:
         d2:fc:c6:6f:17:57:6f:4f:8e:48:86:fa:e8:2e:2e:04:24:d9:
         e6:e6:00:0a:ca:a2:56:4a:74:e0:57:58:7c:41:c0:28:86:20:
         61:1d:e4:fb:ac:8d:97:49:b0:85:17:4c:64:b6:f7:8a:73:14:
         36:70:93:99:5f:90:d8:f8:af:82:d8:89:f4:dc:b6:53:f7:ba:
         d7:c0:cc:4f:77:55:d4:d6:13:9e:8d:e6:94:a2:09:7a:77:4f:
         ba:15:19:d6:53:fb:75:f3:80:63:f1:c1:77:96:93:96:39:d5:
         dc:10:0c:02:f9:10:0a:c6:ef:4a:27:47:88:60:38:08:98:e7:
         63:05:d0:6c:d5:9d:b0:fb:00:c9:5c:a4:0b:06:67:64:97:5f:
         f3:96:dc:3e:f1:a9:12:3e:4d:4d:0a:fe:58:49:20:72:fd:c0:
         4b:23:48:7f:c4:5b:58:63:7a:d0:f9:7d:e4:39:e2:34:cb:1c:
         a0:60:cf:5a:35:1e:8c:61:3c:38:4b:43:23:6d:9d:8b:79:fd:
         aa:6b:79:8c:d9:74:d3:72:7a:85:d9:e5:fb:17:a6:5a:a4:3f:
         3e:9d:21:a8
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUCBtfGAZkSbCVdXhI8BqU7d9sUTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjAxNDU1MTFaFw0yNDA3MTgxNTAwMTFaMDMxMTAvBgNV
BAMTKEQwOTk4RkFFNDY5REVEODE2MDYwNzgwMUI3Q0Q0M0JDNjFDQjBCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK9st0jeVyicYIeewa1Vt1jOd
QPNr3Aj+rm004WskrXn5dBIJG72Bk0VXQcRTKUe7frXWOvuIkiztaVQwFPMkXscL
VCzOAfY5AiB4sG/QbIxID52RRWgTPWee4K28pn0YEnyeeV1GrxyBoUrJIXa0cswi
1IQMaxFIrCj1TSTIFd/e9kCDdCuy6gsevhYTU/y0WXIua4TFobi/aHNylsmAmzlQ
iyO2gxROe8r4Dt2V8Us4p05Ri+SOs/dioMnsGq1opLCytahjvBGJE+SAhVfZDnh/
tDF6ujYnYG9lEr9om0wSoRqKLtT+8huMqxEoXGsdKISa3gvVlSe8shItPSQfAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQmY+uRp3tgWBg
eAG3zUO8YcsLLjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNU0zTWNwQlRYR0EyVlo1dWlmY3g2TTVWaGtKYzM4cnZm
R1M4RmgyVUxnMS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CNU0zTWNwQlRYR0EyVlo1dWlmY3g2TTVWaGtKYzM4cnZm
R1M4RmgyVUxnMS8wL0QwOTk4RkFFNDY5REVEODE2MDYwNzgwMUI3Q0Q0M0JDNjFD
QjBCMkUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi20bDANBAIAAjAHAwUA
KARguDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEG4IwDQYJKoZIhvcNAQELBQAD
ggEBAKS9FTMDfZ/9dpAH3iV8opQXyGXa9kTaQoVYNt7fH+UFnqXMH9L8xm8XV29P
jkiG+uguLgQk2ebmAArKolZKdOBXWHxBwCiGIGEd5PusjZdJsIUXTGS294pzFDZw
k5lfkNj4r4LYifTctlP3utfAzE93VdTWE56N5pSiCXp3T7oVGdZT+3XzgGPxwXeW
k5Y51dwQDAL5EArG70onR4hgOAiY52MF0GzVnbD7AMlcpAsGZ2SXX/OW3D7xqRI+
TU0K/lhJIHL9wEsjSH/EW1hjetD5feQ54jTLHKBgz1o1HoxhPDhLQyNtnYt5/apr
eYzZdNNyeoXZ5fsXplqkPz6dIag=
-----END CERTIFICATE-----