Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer
File:                     DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.cer (raw, json)
Hash identifier:          SmFRC0ecfaCIcj5A4T9eKAql7y9ieGDVvD6t57B7Ubo=
Subject key identifier:   DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EC9AC144ECCF1CCB2F05698D2D32334E776932C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 12:01:17 +0000
Certificate not after:    Tue 03 Sep 2024 12:06:17 +0000
Subordinate resources:    AS: 263144
                          IP: 191.242.220.0/22
                          IP: 2804:1768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c9:ac:14:4e:cc:f1:cc:b2:f0:56:98:d2:d3:23:34:e7:76:93:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 12:01:17 2023 GMT
            Not After : Sep  3 12:06:17 2024 GMT
        Subject: CN=DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:82:37:0c:f2:2b:57:c6:c9:4b:dd:09:82:
                    48:42:39:4d:79:84:00:3b:ec:3c:e2:23:3f:b0:97:
                    61:42:74:23:46:12:ce:a0:69:2e:8b:7a:35:a0:27:
                    e3:78:64:cb:1f:5b:99:2f:a2:ff:fa:7a:69:86:bd:
                    fe:de:52:f6:5b:6b:08:ec:97:ba:17:1f:27:cd:64:
                    7b:30:a5:6e:31:ba:1f:b1:9a:67:b8:86:e3:0f:4f:
                    d1:72:16:7f:9d:c5:37:c7:1f:43:fa:cc:00:16:d4:
                    fe:d1:11:8f:a9:3b:7e:29:ee:35:83:cd:67:2f:d7:
                    6e:ff:e5:4b:bf:82:ec:08:fe:f3:6c:82:bd:a8:41:
                    da:b7:87:84:ba:48:69:f8:e7:03:6d:eb:f7:c0:50:
                    b9:b1:41:f5:3c:a0:ba:75:96:5b:d4:70:27:ef:27:
                    53:cf:cf:1d:51:46:97:6e:cf:e4:1d:d6:14:65:f3:
                    b5:07:ab:c8:c7:8c:15:ef:62:b0:fe:86:a5:67:19:
                    5d:70:37:7b:b5:01:e5:45:d9:1a:e5:24:52:87:f0:
                    8d:3d:4a:d3:41:39:ae:e6:e5:f0:0c:59:e2:d8:82:
                    5f:5b:7e:10:ab:90:b8:79:d3:97:b2:f6:46:6c:50:
                    61:00:be:50:e9:26:43:49:84:52:03:53:ee:18:9d:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:07:F9:C4:C0:9D:1B:37:7B:6B:EA:E3:CA:FB:18:DF:8E:2A:A9:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/DC07F9C4C09D1B377B6BEAE3CAFB18DF8E2AA9AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.220.0/22
                IPv6:
                  2804:1768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263144

    Signature Algorithm: sha256WithRSAEncryption
         15:68:7b:d5:e0:b0:bd:b9:c0:a1:57:1e:11:07:71:b5:10:cc:
         ed:87:1c:d6:da:b5:73:78:43:b7:9a:0b:e1:f7:7c:7e:90:ae:
         e9:49:a8:37:cd:dc:31:3f:6e:80:fe:1e:12:66:68:55:1b:57:
         d2:d4:68:9e:e5:9f:e3:a4:b7:80:3f:f6:dd:c2:34:e1:e8:f6:
         bb:78:6c:c5:93:be:d9:fb:a1:f9:fe:cd:dc:5f:7c:cc:68:00:
         5a:3f:f8:89:98:fe:a3:61:7f:bb:a3:fc:b6:24:30:d4:a6:f3:
         9e:fe:89:4a:2d:7a:bc:b7:9a:04:7a:49:60:53:07:d4:19:80:
         1b:b9:47:a3:27:6d:65:44:8f:42:19:eb:bd:b9:13:27:bf:3d:
         c1:0d:fc:50:cc:db:60:ce:0d:19:ca:c1:43:7d:0a:13:52:22:
         d6:d8:e9:69:83:72:22:64:b3:1c:c2:36:95:3a:65:7c:d3:a5:
         7d:97:a3:a2:3d:d2:b3:8d:30:ff:b4:f4:d7:fa:97:a3:92:68:
         2e:9f:8e:63:3d:63:a0:71:32:4f:14:89:07:28:b8:73:4a:1d:
         f2:d5:a9:a0:12:97:21:31:a9:04:62:0c:36:99:6f:d3:04:9d:
         2f:0d:9e:67:ac:2c:ad:ce:86:4c:4f:b2:f3:29:91:6f:8a:eb:
         ee:65:4c:d1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTsmsFE7M8cyy8FaY0tMjNOd2kywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MDUxMjAxMTdaFw0yNDA5MDMxMjA2MTdaMDMxMTAvBgNV
BAMTKERDMDdGOUM0QzA5RDFCMzc3QjZCRUFFM0NBRkIxOERGOEUyQUE5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJII3DPIrV8bJS90JgkhCOU15
hAA77DziIz+wl2FCdCNGEs6gaS6LejWgJ+N4ZMsfW5kvov/6emmGvf7eUvZbawjs
l7oXHyfNZHswpW4xuh+xmme4huMPT9FyFn+dxTfHH0P6zAAW1P7REY+pO34p7jWD
zWcv127/5Uu/guwI/vNsgr2oQdq3h4S6SGn45wNt6/fAULmxQfU8oLp1llvUcCfv
J1PPzx1RRpduz+Qd1hRl87UHq8jHjBXvYrD+hqVnGV1wN3u1AeVF2RrlJFKH8I09
StNBOa7m5fAMWeLYgl9bfhCrkLh505ey9kZsUGEAvlDpJkNJhFIDU+4YnfzbAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcB/nEwJ0bN3tr
6uPK+xjfjiqprDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FclIxU0JnTVgxQ3Z6RVgxaWlRczMzeVNkbmRCMjNVR3Vv
b1VEckM2d05RYi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1
b29VRHJDNndOUWIvMC9EQzA3RjlDNEMwOUQxQjM3N0I2QkVBRTNDQUZCMThERjhF
MkFBOUFDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK/8twwDQQCAAIwBwMF
ACgEF2gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPoMA0GCSqGSIb3DQEBCwUA
A4IBAQAVaHvV4LC9ucChVx4RB3G1EMzthxzW2rVzeEO3mgvh93x+kK7pSag3zdwx
P26A/h4SZmhVG1fS1Gie5Z/jpLeAP/bdwjTh6Pa7eGzFk77Z+6H5/s3cX3zMaABa
P/iJmP6jYX+7o/y2JDDUpvOe/olKLXq8t5oEeklgUwfUGYAbuUejJ21lRI9CGeu9
uRMnvz3BDfxQzNtgzg0ZysFDfQoTUiLW2Olpg3IiZLMcwjaVOmV806V9l6OiPdKz
jTD/tPTX+pejkmgun45jPWOgcTJPFIkHKLhzSh3y1amgEpchMakEYgw2mW/TBJ0v
DZ5nrCytzoZMT7LzKZFviuvuZUzR
-----END CERTIFICATE-----