Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer
File:                     E9A6A6503F4282A7AF294B34F602D222F92F0C7C.cer (raw, json)
Hash identifier:          TV+Yxn+k+qhXGnKro8Vc34RLyAXZfk2AZ3DwUTGY4lQ=
Subject key identifier:   E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10FF06887FADFD9462E84B65D2390355FCABA299
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:37:46 +0000
Certificate not after:    Thu 27 Jun 2024 14:42:46 +0000
Subordinate resources:    AS: 270279
                          IP: 200.124.172.0/22
                          IP: 2804:6994::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ff:06:88:7f:ad:fd:94:62:e8:4b:65:d2:39:03:55:fc:ab:a2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:37:46 2023 GMT
            Not After : Jun 27 14:42:46 2024 GMT
        Subject: CN=E9A6A6503F4282A7AF294B34F602D222F92F0C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:27:60:33:e0:aa:ce:d5:81:36:e7:06:c7:
                    89:b8:86:64:6f:3f:c7:84:8b:ff:3a:74:07:9a:73:
                    76:31:ab:db:a0:16:31:50:dc:e6:30:b6:56:7a:ed:
                    b9:68:57:3c:e6:d2:cd:cb:bd:a2:ed:99:12:c0:0f:
                    98:46:59:5e:df:e8:77:28:4c:d2:21:52:7f:c1:c0:
                    14:ff:4a:b4:a6:4b:73:dd:05:a0:49:4b:20:42:4f:
                    5e:88:4a:08:a5:de:15:dd:7d:fe:8d:45:94:1f:a8:
                    98:2b:aa:6e:f8:52:5f:10:20:74:87:f2:30:16:47:
                    bb:97:b9:c1:45:e4:41:a5:26:0e:21:16:86:1b:f5:
                    0e:b8:f9:3a:1b:5a:17:b3:8d:5c:89:38:4f:37:88:
                    74:ce:e4:94:14:36:8a:45:09:76:e7:51:85:06:c7:
                    4d:a2:49:e4:7e:df:bd:33:52:c7:79:6c:b6:05:89:
                    58:f8:20:de:5e:38:9a:3b:39:9d:f2:ff:56:0d:d1:
                    ba:6e:80:59:12:38:3b:40:fd:20:ce:3b:86:3e:c6:
                    cd:63:b5:1f:85:70:69:95:f4:2e:14:8a:5c:7e:c2:
                    aa:db:0d:a3:ed:89:c2:ba:6e:10:4a:bb:f7:5d:32:
                    2b:1e:c7:e4:3c:e8:db:3e:f2:b7:08:db:b8:81:78:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:A6:A6:50:3F:42:82:A7:AF:29:4B:34:F6:02:D2:22:F9:2F:0C:7C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/E9A6A6503F4282A7AF294B34F602D222F92F0C7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/22
                IPv6:
                  2804:6994::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270279

    Signature Algorithm: sha256WithRSAEncryption
         67:30:a1:72:28:fb:d3:0a:fa:1a:42:92:21:11:9c:32:14:df:
         44:29:3c:f8:9c:50:86:2d:f8:c4:41:1c:66:4c:6a:b8:0f:3a:
         d9:a8:e1:12:d3:2b:2d:48:44:a3:29:e2:f5:4f:35:15:20:66:
         a4:df:14:44:e3:a0:16:3b:9f:c4:b3:cd:7d:fb:df:0e:00:86:
         f4:0e:ef:2e:40:7d:2f:29:88:ab:cc:ae:0f:75:d7:47:c9:b4:
         a0:1c:06:15:32:93:5f:f1:4c:83:1d:0f:7c:2c:60:fa:cc:c6:
         b3:0d:be:89:7e:f9:3d:6c:02:16:c7:13:35:31:5b:c6:55:cb:
         ed:53:17:79:ed:d8:e6:bd:ff:12:f3:e1:6e:87:71:69:b6:4e:
         bb:cb:bd:64:65:7f:6d:52:33:8b:7e:62:ff:dc:77:67:e3:e5:
         d3:28:41:ce:63:a9:23:f2:e3:9d:5d:57:99:c2:33:de:45:51:
         d2:fc:eb:15:62:33:13:15:72:e0:9a:88:35:b4:59:3c:7f:38:
         da:4f:77:80:ff:f2:3f:5c:47:b2:e8:6a:6c:3d:d2:a0:47:8f:
         2c:b3:6c:41:8c:d4:0b:2b:e8:93:db:cb:43:5d:d1:6d:4f:bb:
         12:24:59:d7:03:b1:74:34:d1:7c:b4:a8:cd:3d:8f:3e:cd:ff:
         1c:d9:79:0d
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUEP8GiH+t/ZRi6Etl0jkDVfyropkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjkxNDM3NDZaFw0yNDA2MjcxNDQyNDZaMDMxMTAvBgNV
BAMTKEU5QTZBNjUwM0Y0MjgyQTdBRjI5NEIzNEY2MDJEMjIyRjkyRjBDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64ydgM+CqztWBNucGx4m4hmRv
P8eEi/86dAeac3Yxq9ugFjFQ3OYwtlZ67bloVzzm0s3LvaLtmRLAD5hGWV7f6Hco
TNIhUn/BwBT/SrSmS3PdBaBJSyBCT16ISgil3hXdff6NRZQfqJgrqm74Ul8QIHSH
8jAWR7uXucFF5EGlJg4hFoYb9Q64+TobWhezjVyJOE83iHTO5JQUNopFCXbnUYUG
x02iSeR+370zUsd5bLYFiVj4IN5eOJo7OZ3y/1YN0bpugFkSODtA/SDOO4Y+xs1j
tR+FcGmV9C4Uilx+wqrbDaPticK6bhBKu/ddMisex+Q86Ns+8rcI27iBeCSHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTppqZQP0KCp68p
SzT2AtIi+S8MfDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS3hlVVdpWUtvdkJCVkFWNTlDY1FBdUNZUVo0c3plcUFE
Y2QzaHBSZkxDUi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CS3hlVVdpWUtvdkJCVkFWNTlDY1FBdUNZUVo0c3plcUFE
Y2QzaHBSZkxDUi8wL0U5QTZBNjUwM0Y0MjgyQTdBRjI5NEIzNEY2MDJEMjIyRjky
RjBDN0MubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsh8rDANBAIAAjAHAwUA
KARplDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEH8cwDQYJKoZIhvcNAQELBQAD
ggEBAGcwoXIo+9MK+hpCkiERnDIU30QpPPicUIYt+MRBHGZMargPOtmo4RLTKy1I
RKMp4vVPNRUgZqTfFETjoBY7n8SzzX373w4AhvQO7y5AfS8piKvMrg9110fJtKAc
BhUyk1/xTIMdD3wsYPrMxrMNvol++T1sAhbHEzUxW8ZVy+1TF3nt2Oa9/xLz4W6H
cWm2TrvLvWRlf21SM4t+Yv/cd2fj5dMoQc5jqSPy451dV5nCM95FUdL86xViMxMV
cuCaiDW0WTx/ONpPd4D/8j9cR7Loamw90qBHjyyzbEGM1Asr6JPby0Nd0W1PuxIk
WdcDsXQ00Xy0qM09jz7N/xzZeQ0=
-----END CERTIFICATE-----