Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer
File:                     D7CECD4025A2731E62E96333D09FB4C510D5C76D.cer (raw, json)
Hash identifier:          gHDUqWVIuJa4PpyDLyyJBj5py2G5tlvILS5mluDo3dI=
Subject key identifier:   D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C502D45FE7BC68E9BC199952E86DD0A570A5BFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 03:10:02 +0000
Certificate not after:    Wed 06 Nov 2024 03:15:02 +0000
Subordinate resources:    AS: 271751
                          IP: 2804:8074::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:50:2d:45:fe:7b:c6:8e:9b:c1:99:95:2e:86:dd:0a:57:0a:5b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 03:10:02 2023 GMT
            Not After : Nov  6 03:15:02 2024 GMT
        Subject: CN=D7CECD4025A2731E62E96333D09FB4C510D5C76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:ca:eb:0a:f4:03:3a:38:a1:f4:7a:d4:a0:
                    94:57:05:53:72:2d:29:fe:8c:74:2c:b3:19:07:f9:
                    a0:b6:5c:d3:60:83:ae:b2:8c:71:72:04:09:62:a2:
                    31:ad:7e:ba:0a:45:0a:f4:98:fe:8b:de:1f:ae:3c:
                    84:a5:48:b6:6d:91:23:85:17:44:f9:d4:e6:4b:ae:
                    ef:e1:d6:dc:fe:97:b8:da:dc:44:e6:93:56:92:e6:
                    8f:40:36:37:43:88:92:55:dc:51:81:67:59:43:1f:
                    8c:50:81:98:64:b6:4c:96:76:87:58:ff:7d:43:65:
                    03:22:93:49:b4:c7:aa:a6:73:ea:32:67:55:c9:43:
                    86:37:9c:b4:e9:71:e3:2d:7f:02:af:36:72:ef:39:
                    83:96:e9:90:fe:2b:13:42:77:36:bc:d1:b5:5b:31:
                    5b:25:f1:55:f8:eb:38:45:53:92:0a:01:06:c9:ab:
                    b5:67:e1:76:ca:01:fd:c6:49:64:74:4c:94:5c:1d:
                    5a:c1:12:e4:df:5c:da:38:8e:9e:6f:ac:f0:a2:fd:
                    6b:c7:14:0c:bb:f5:e2:c9:31:a8:87:be:49:77:91:
                    3c:20:b7:b7:69:ac:aa:fd:1c:7c:53:51:67:5c:42:
                    8e:d5:f0:c9:6b:90:f0:4d:57:1d:de:21:ee:73:5c:
                    9f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:CE:CD:40:25:A2:73:1E:62:E9:63:33:D0:9F:B4:C5:10:D5:C7:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/D7CECD4025A2731E62E96333D09FB4C510D5C76D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8074::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271751

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:74:69:df:f1:c8:46:61:1c:ae:97:07:53:7b:ab:dd:69:
         77:79:b4:56:a5:8c:99:6b:48:c8:8d:3e:ca:59:6a:e4:8a:98:
         47:1a:0e:f0:43:6d:57:f2:cd:d8:e7:ed:96:c2:5b:dd:05:af:
         9e:d9:3a:c1:86:5e:b0:96:c9:2b:62:c1:81:47:ee:c6:b7:a7:
         b5:a4:e9:76:b2:5c:96:22:b0:f8:18:ee:a4:d0:fa:ac:68:bc:
         f9:cf:2e:2a:28:0f:6b:b6:b5:2e:1c:0c:dd:ef:69:4e:02:0b:
         ca:97:8a:60:23:a5:ee:ad:f5:eb:37:d0:af:3e:59:cb:bf:9e:
         5f:d5:1f:30:cd:0b:bb:ec:8d:df:1b:8b:b9:84:d5:81:62:10:
         4b:da:95:39:c5:b3:c8:60:04:b3:d1:90:48:b1:e5:4d:31:39:
         c6:e3:e6:81:11:97:f2:52:b4:68:8f:6e:81:66:4e:63:c8:6b:
         90:2c:d1:57:70:4a:d5:19:f3:f0:45:72:d7:f2:af:48:bc:f7:
         b5:8c:14:fd:1e:a1:59:ec:70:e2:4e:72:4c:01:49:19:72:b3:
         fa:ec:6c:a8:7f:68:38:cd:7a:98:3a:5d:b4:ca:39:6a:17:b1:
         dd:2e:21:03:4f:a1:5c:c4:bd:36:39:9f:ab:3c:83:b6:b3:75:
         60:ec:09:ba
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIULFAtRf57xo6bwZmVLobdClcKW/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzExMDgwMzEwMDJaFw0yNDExMDYwMzE1MDJaMDMxMTAvBgNV
BAMTKEQ3Q0VDRDQwMjVBMjczMUU2MkU5NjMzM0QwOUZCNEM1MTBENUM3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVaMrrCvQDOjih9HrUoJRXBVNy
LSn+jHQssxkH+aC2XNNgg66yjHFyBAliojGtfroKRQr0mP6L3h+uPISlSLZtkSOF
F0T51OZLru/h1tz+l7ja3ETmk1aS5o9ANjdDiJJV3FGBZ1lDH4xQgZhktkyWdodY
/31DZQMik0m0x6qmc+oyZ1XJQ4Y3nLTpceMtfwKvNnLvOYOW6ZD+KxNCdza80bVb
MVsl8VX46zhFU5IKAQbJq7Vn4XbKAf3GSWR0TJRcHVrBEuTfXNo4jp5vrPCi/WvH
FAy79eLJMaiHvkl3kTwgt7dprKr9HHxTUWdcQo7V8MlrkPBNVx3eIe5zXJ+1AgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTXzs1AJaJzHmLp
YzPQn7TFENXHbTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IWjNXZmpQdUc4Wk1CZDlyVkV5ZXh6aDVtdDJWZ1VrR1NB
Wmg4QzVDcTRndi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IWjNXZmpQdUc4Wk1CZDlyVkV5ZXh6aDVtdDJWZ1VrR1NB
Wmg4QzVDcTRndi8wL0Q3Q0VDRDQwMjVBMjczMUU2MkU5NjMzM0QwOUZCNEM1MTBE
NUM3NkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEgHQwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCWHMA0GCSqGSIb3DQEBCwUAA4IBAQCpKHRp3/HIRmEc
rpcHU3ur3Wl3ebRWpYyZa0jIjT7KWWrkiphHGg7wQ21X8s3Y5+2WwlvdBa+e2TrB
hl6wlskrYsGBR+7Gt6e1pOl2slyWIrD4GO6k0PqsaLz5zy4qKA9rtrUuHAzd72lO
AgvKl4pgI6XurfXrN9CvPlnLv55f1R8wzQu77I3fG4u5hNWBYhBL2pU5xbPIYASz
0ZBIseVNMTnG4+aBEZfyUrRoj26BZk5jyGuQLNFXcErVGfPwRXLX8q9IvPe1jBT9
HqFZ7HDiTnJMAUkZcrP67Gyof2g4zXqYOl20yjlqF7HdLiEDT6FcxL02OZ+rPIO2
s3Vg7Am6
-----END CERTIFICATE-----