Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DE93C72F22244480C517BC4501B196642FEC83A3.cer
File:                     DE93C72F22244480C517BC4501B196642FEC83A3.cer (raw, json)
Hash identifier:          iRJJiT6KJQQqYXJB47wMrxW7BtdVorOfSaqt+rNpLqQ=
Subject key identifier:   DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10F54710565BE4E12A567359917792C29EF95894
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 Jan 2024 19:49:15 +0000
Certificate not after:    Fri 17 Jan 2025 19:54:15 +0000
Subordinate resources:    AS: 266303
                          IP: 170.79.172.0/22
                          IP: 2804:35bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:47:10:56:5b:e4:e1:2a:56:73:59:91:77:92:c2:9e:f9:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 19:49:15 2024 GMT
            Not After : Jan 17 19:54:15 2025 GMT
        Subject: CN=DE93C72F22244480C517BC4501B196642FEC83A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:fb:25:0a:8d:2d:3a:2e:54:c1:f1:85:38:
                    41:24:f2:30:c1:cd:d8:1d:eb:f7:9a:ba:9c:e9:3b:
                    6a:cd:8d:d9:19:23:bf:98:55:c2:2e:e8:b0:29:c8:
                    70:9f:78:de:f5:1a:35:b9:1c:5d:bf:08:1f:2d:c0:
                    8e:dc:fa:af:fc:f1:12:96:bd:dd:70:c7:f4:c9:df:
                    56:5e:d6:78:f6:23:c1:9b:aa:6d:1b:84:22:c5:cc:
                    a8:b5:5c:e8:81:cf:4c:3e:d8:18:92:3f:21:70:0a:
                    15:b0:d8:4c:2d:72:6c:11:42:43:8e:63:b3:6e:61:
                    7d:5e:3d:a5:8d:1b:66:8e:75:70:04:3b:ee:af:55:
                    9f:5e:3a:ee:74:f5:63:3d:4a:7d:11:56:f5:2a:6f:
                    b1:1e:fe:79:ca:43:d2:bf:cc:43:ba:be:04:78:26:
                    d1:66:4e:78:cc:66:58:ff:99:d0:53:79:95:97:b2:
                    e2:c6:58:42:fb:97:cd:fc:37:a1:60:3a:00:16:dc:
                    e1:b5:c8:fc:20:6e:47:56:c8:d1:15:8d:18:5f:d8:
                    03:2d:b5:26:6d:7e:ec:d3:81:4b:fa:d4:95:82:89:
                    29:66:2d:32:8c:43:a8:6e:44:41:cb:6f:8e:a1:b2:
                    94:21:e4:37:c6:e9:70:3d:1e:0a:95:ca:1d:5d:17:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:93:C7:2F:22:24:44:80:C5:17:BC:45:01:B1:96:64:2F:EC:83:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/DE93C72F22244480C517BC4501B196642FEC83A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.172.0/22
                IPv6:
                  2804:35bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266303

    Signature Algorithm: sha256WithRSAEncryption
         36:55:39:9c:a2:9a:a2:5d:f7:f8:0d:1c:87:81:d4:b9:36:4f:
         ba:82:87:ad:a0:e3:17:7b:49:a4:c5:46:c2:00:42:94:7e:62:
         1d:aa:94:3b:89:3c:e4:ec:13:c9:8b:cd:32:32:58:30:64:b9:
         38:72:74:66:43:97:bb:2d:0f:41:00:8a:a7:0e:02:37:52:73:
         b7:0d:17:29:c3:d9:27:90:0f:36:76:aa:56:7a:4a:5a:86:b6:
         d7:52:fd:e5:b4:6f:7f:96:d3:1a:ec:6c:90:82:b5:91:c5:7c:
         d2:bb:c1:65:9d:a5:97:a7:fa:64:59:bb:ab:01:72:b6:f6:d3:
         3d:9c:30:2f:e6:73:cd:52:ba:d5:1a:f3:0e:59:45:f1:2a:4c:
         c5:54:92:1d:9c:bd:7f:37:46:86:8c:ea:93:e3:ed:3d:47:13:
         dc:9f:4b:68:1e:ec:84:92:b6:c5:f9:4c:84:b1:5a:28:91:df:
         e0:b0:ee:83:41:09:42:41:a4:ba:39:2e:39:5c:63:a7:35:b9:
         c1:bb:f6:98:63:ae:4e:30:6c:58:51:e8:f7:74:5a:6c:e6:de:
         2b:cc:2b:4c:08:ec:2f:db:0d:7d:fd:c2:00:7d:65:76:66:5d:
         f5:32:bf:cc:50:27:e6:80:0c:62:3e:26:d6:50:bd:5e:82:73:
         70:73:98:63
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEPVHEFZb5OEqVnNZkXeSwp75WJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTkxOTQ5MTVaFw0yNTAxMTcxOTU0MTVaMDMxMTAvBgNV
BAMTKERFOTNDNzJGMjIyNDQ0ODBDNTE3QkM0NTAxQjE5NjY0MkZFQzgzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9fslCo0tOi5UwfGFOEEk8jDB
zdgd6/eaupzpO2rNjdkZI7+YVcIu6LApyHCfeN71GjW5HF2/CB8twI7c+q/88RKW
vd1wx/TJ31Ze1nj2I8Gbqm0bhCLFzKi1XOiBz0w+2BiSPyFwChWw2EwtcmwRQkOO
Y7NuYX1ePaWNG2aOdXAEO+6vVZ9eOu509WM9Sn0RVvUqb7Ee/nnKQ9K/zEO6vgR4
JtFmTnjMZlj/mdBTeZWXsuLGWEL7l838N6FgOgAW3OG1yPwgbkdWyNEVjRhf2AMt
tSZtfuzTgUv61JWCiSlmLTKMQ6huREHLb46hspQh5DfG6XA9HgqVyh1dF74HAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTek8cvIiREgMUX
vEUBsZZkL+yDozAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zZjdoWEs4UTNLUDhCWnVwaUV3TFYxcTFMN0JtUlJLckIx
YlJYNEpWcUU0VC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM2Y3aFhLOFEzS1A4Qlp1cGlFd0xWMXExTDdCbVJSS3JC
MWJSWDRKVnFFNFQvMC9ERTkzQzcyRjIyMjQ0NDgwQzUxN0JDNDUwMUIxOTY2NDJG
RUM4M0EzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKqT6wwDQQCAAIwBwMF
ACgENbwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBA/MA0GCSqGSIb3DQEBCwUA
A4IBAQA2VTmcopqiXff4DRyHgdS5Nk+6goetoOMXe0mkxUbCAEKUfmIdqpQ7iTzk
7BPJi80yMlgwZLk4cnRmQ5e7LQ9BAIqnDgI3UnO3DRcpw9knkA82dqpWekpahrbX
Uv3ltG9/ltMa7GyQgrWRxXzSu8FlnaWXp/pkWburAXK29tM9nDAv5nPNUrrVGvMO
WUXxKkzFVJIdnL1/N0aGjOqT4+09RxPcn0toHuyEkrbF+UyEsVookd/gsO6DQQlC
QaS6OS45XGOnNbnBu/aYY65OMGxYUej3dFps5t4rzCtMCOwv2w19/cIAfWV2Zl31
Mr/MUCfmgAxiPibWUL1egnNwc5hj
-----END CERTIFICATE-----