Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer
File:                     D35F2557A84EAE6290CDEEE4135352A2C68B46B8.cer (raw, json)
Hash identifier:          wsr3vFQtXfjtDPH5niX6DM5H9FguWKSpxxJWm5oGkKw=
Subject key identifier:   D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07B5B47E24524E8FA2A9D0E97F480CDAC6731A1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Apr 2023 21:25:12 +0000
Certificate not after:    Tue 16 Apr 2024 21:30:12 +0000
Subordinate resources:    AS: 266991
                          IP: 45.226.88.0/22
                          IP: 2804:4678::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b5:b4:7e:24:52:4e:8f:a2:a9:d0:e9:7f:48:0c:da:c6:73:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 18 21:25:12 2023 GMT
            Not After : Apr 16 21:30:12 2024 GMT
        Subject: CN=D35F2557A84EAE6290CDEEE4135352A2C68B46B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:4c:20:4c:7e:75:f6:37:3c:c5:e8:37:00:
                    3f:a1:fa:32:76:72:e1:5f:a7:d1:79:4a:fa:a4:cd:
                    96:42:fd:d0:db:94:54:8c:ba:d1:f0:88:30:57:81:
                    2b:d4:8f:9c:3d:60:d7:e7:b1:51:0c:a5:4d:db:f2:
                    4b:2f:9a:86:2f:fa:0c:28:a1:91:c7:19:67:a5:7c:
                    45:83:80:18:ff:01:00:54:3e:f7:cd:27:40:b0:b3:
                    d1:0e:e3:4b:ac:a9:95:6c:d0:50:b0:7a:49:45:48:
                    2a:0d:7f:ed:75:70:0a:e4:a9:53:50:12:a6:4c:b1:
                    16:a3:a2:8e:be:20:5f:e4:ed:06:f3:87:fb:28:4d:
                    03:e2:84:24:c6:99:0e:b5:be:bd:e9:88:76:8f:f8:
                    fc:52:ee:53:90:85:42:25:5c:63:ae:ee:34:d2:d8:
                    cb:e2:f1:21:00:92:a7:03:d1:69:d5:ad:6a:81:70:
                    78:ae:c9:80:88:2e:57:f6:0e:4b:68:42:ca:ee:c0:
                    5e:60:6b:35:fe:51:92:f5:5a:99:e3:51:c4:c1:d8:
                    33:ac:08:ad:e0:89:e5:0a:75:0c:d4:34:87:95:77:
                    20:1e:dd:3c:11:db:f6:c2:19:72:97:62:47:94:3b:
                    6a:52:af:be:56:c2:88:bb:a3:24:f8:7d:d6:e7:66:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:5F:25:57:A8:4E:AE:62:90:CD:EE:E4:13:53:52:A2:C6:8B:46:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AyLnSJhHNLG9zpd91dHeSejMzYKwki6eYSiSXJAmKU72/0/D35F2557A84EAE6290CDEEE4135352A2C68B46B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.88.0/22
                IPv6:
                  2804:4678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266991

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:c4:c4:a3:c1:f6:56:b9:a5:6e:a5:65:4d:88:f8:25:75:
         26:a2:02:05:40:48:fd:2e:4b:35:62:9c:6e:82:a9:cf:9e:6c:
         77:c6:05:78:e6:dd:d0:3d:eb:9a:4d:2c:64:9c:c9:32:d8:a5:
         fd:0f:55:a7:be:56:55:05:50:b0:d9:50:68:f2:e5:31:79:d0:
         00:a2:5d:da:22:96:c3:13:c4:4b:87:79:2f:b5:37:9d:d5:82:
         22:04:9e:bb:dc:0b:2d:42:63:37:61:d6:21:13:c2:8f:38:32:
         06:ad:6a:2f:09:2a:5d:42:aa:31:d2:e2:36:8d:c1:5b:26:11:
         dc:da:5d:9c:0c:d9:05:bb:51:99:88:9f:61:27:59:16:b5:2f:
         75:cc:74:e6:d7:44:7f:e7:a5:89:ae:f9:1b:b9:6d:98:20:c9:
         40:3f:27:7a:7f:35:6d:b8:fc:15:92:23:27:21:06:d6:ae:b5:
         ca:34:25:36:11:4b:74:dd:a1:11:20:a0:de:e3:81:44:ab:3b:
         d2:27:8a:f2:20:05:46:21:ee:91:a7:bf:7b:c8:3a:11:73:d7:
         8d:ab:30:9d:07:25:7f:90:86:a0:45:79:c7:8d:79:d0:43:8a:
         58:c8:6c:bb:b0:67:45:11:5b:73:79:f1:c5:55:1b:eb:41:60:
         f0:83:79:af
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUB7W0fiRSTo+iqdDpf0gM2sZzGhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA0MTgyMTI1MTJaFw0yNDA0MTYyMTMwMTJaMDMxMTAvBgNV
BAMTKEQzNUYyNTU3QTg0RUFFNjI5MENERUVFNDEzNTM1MkEyQzY4QjQ2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtUwgTH519jc8xeg3AD+h+jJ2
cuFfp9F5SvqkzZZC/dDblFSMutHwiDBXgSvUj5w9YNfnsVEMpU3b8ksvmoYv+gwo
oZHHGWelfEWDgBj/AQBUPvfNJ0Cws9EO40usqZVs0FCweklFSCoNf+11cArkqVNQ
EqZMsRajoo6+IF/k7Qbzh/soTQPihCTGmQ61vr3piHaP+PxS7lOQhUIlXGOu7jTS
2Mvi8SEAkqcD0WnVrWqBcHiuyYCILlf2DktoQsruwF5gazX+UZL1WpnjUcTB2DOs
CK3gieUKdQzUNIeVdyAe3TwR2/bCGXKXYkeUO2pSr75Wwoi7oyT4fdbnZponAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTXyVXqE6uYpDN
7uQTU1KixotGuDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BeUxuU0poSE5MRzl6cGQ5MWRIZVNlak16WUt3a2k2ZVlT
aVNYSkFtS1U3Mi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXlMblNKaEhOTEc5enBkOTFkSGVTZWpNellLd2tpNmVZ
U2lTWEpBbUtVNzIvMC9EMzVGMjU1N0E4NEVBRTYyOTBDREVFRTQxMzUzNTJBMkM2
OEI0NkI4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4lgwDQQCAAIwBwMF
ACgERngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBLvMA0GCSqGSIb3DQEBCwUA
A4IBAQClx8TEo8H2VrmlbqVlTYj4JXUmogIFQEj9Lks1YpxugqnPnmx3xgV45t3Q
PeuaTSxknMky2KX9D1WnvlZVBVCw2VBo8uUxedAAol3aIpbDE8RLh3kvtTed1YIi
BJ673AstQmM3YdYhE8KPODIGrWovCSpdQqox0uI2jcFbJhHc2l2cDNkFu1GZiJ9h
J1kWtS91zHTm10R/56WJrvkbuW2YIMlAPyd6fzVtuPwVkiMnIQbWrrXKNCU2EUt0
3aERIKDe44FEqzvSJ4ryIAVGIe6Rp797yDoRc9eNqzCdByV/kIagRXnHjXnQQ4pY
yGy7sGdFEVtzefHFVRvrQWDwg3mv
-----END CERTIFICATE-----