Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB893FC2324141C841B4E9613837252F8D6564D8.cer
File:                     EB893FC2324141C841B4E9613837252F8D6564D8.cer (raw, json)
Hash identifier:          vl6aA8jn0qzFBoULziNAGUC66/MfxAUljOCfpiLHrCw=
Subject key identifier:   EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BE2868E7D1DF449249E5AC2CE8D436F28A5AC22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/EB893FC2324141C841B4E9613837252F8D6564D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 23:08:07 +0000
Certificate not after:    Sat 29 Jun 2024 23:13:07 +0000
Subordinate resources:    AS: 271365
                          IP: 200.53.80.0/22
                          IP: 2804:7a54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:86:8e:7d:1d:f4:49:24:9e:5a:c2:ce:8d:43:6f:28:a5:ac:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 23:08:07 2023 GMT
            Not After : Jun 29 23:13:07 2024 GMT
        Subject: CN=EB893FC2324141C841B4E9613837252F8D6564D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:b6:ba:73:94:fb:69:0c:20:43:b0:e8:6e:
                    f9:98:40:68:f3:2a:da:90:8d:fb:e2:46:f6:89:4e:
                    48:32:9d:27:6a:ea:b6:af:aa:9b:30:81:c4:e7:b2:
                    3a:ce:5f:82:46:22:d1:1d:5e:7d:ce:0b:52:e9:2b:
                    0e:43:8a:98:7d:fe:dd:92:4e:38:7d:be:d6:33:11:
                    4d:d7:3f:fa:59:a3:db:2c:f7:79:32:52:97:6d:b4:
                    af:7c:0e:95:44:94:b6:e3:8d:7f:c9:72:51:48:97:
                    13:e3:e1:01:2d:50:f8:99:92:e7:99:f7:3f:b6:fe:
                    31:dc:4d:53:41:48:b8:5c:77:f0:5e:0c:45:fa:90:
                    56:16:c4:77:cd:7d:a5:dc:82:6c:66:0e:4a:bd:70:
                    36:9d:c9:4e:8f:b2:05:71:37:65:77:18:44:23:fc:
                    47:45:73:30:5c:0f:5e:a4:a8:25:51:05:5f:9e:a3:
                    64:7f:56:88:13:34:62:f2:3c:21:d0:4c:8c:87:80:
                    3c:b5:05:c1:fe:6a:35:e6:17:e3:93:5e:19:ce:a1:
                    4a:e3:68:ca:b9:2d:c6:e5:5d:7c:cf:fe:ea:0f:e6:
                    2e:b1:81:0c:d6:7e:31:3b:df:1c:d9:80:51:b0:c9:
                    29:4d:56:0e:10:4b:44:09:d4:55:b5:33:b7:1b:03:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:89:3F:C2:32:41:41:C8:41:B4:E9:61:38:37:25:2F:8D:65:64:D8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/0/EB893FC2324141C841B4E9613837252F8D6564D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/22
                IPv6:
                  2804:7a54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271365

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:e0:2d:19:e0:6c:c4:68:c3:70:5e:3b:5e:09:af:ba:1d:
         9d:a3:dc:1f:5f:27:f9:b4:09:b0:57:1b:44:3d:73:1b:d6:7c:
         d1:6c:b5:18:89:5e:a4:61:12:ae:24:df:51:51:ce:0d:4b:5d:
         28:c9:a1:44:3c:2d:f8:e6:e0:86:b1:69:21:71:85:ae:57:08:
         f1:93:92:66:86:f3:fa:65:e0:6e:21:74:fa:a7:d5:dc:1b:d2:
         19:d0:d1:d7:ab:4a:2c:ba:82:93:f9:33:c7:84:42:19:30:48:
         1d:bd:6d:ff:70:a5:24:4b:b8:8d:c9:26:70:6b:de:87:9d:7b:
         e7:6b:48:ac:ed:d8:c7:53:0b:4c:e7:62:a0:73:92:b3:58:5d:
         92:f0:22:95:33:ff:af:ed:2c:6d:65:08:37:0e:4d:e6:53:8f:
         63:af:03:9d:b8:b8:38:28:77:64:fb:69:4c:98:46:b6:69:7f:
         80:58:78:41:a7:e9:f9:d3:be:1f:e8:76:e5:06:52:8a:e2:d7:
         57:5b:fc:ca:55:bd:76:37:fd:c9:f8:12:c3:99:71:cc:1f:6a:
         51:e9:81:39:21:a6:2a:08:13:a0:be:4d:94:93:25:d6:6d:59:
         97:06:86:63:5c:a6:42:83:22:a8:62:da:27:8b:aa:dc:57:71:
         77:97:06:27
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUC+KGjn0d9EkknlrCzo1DbyilrCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDEyMzA4MDdaFw0yNDA2MjkyMzEzMDdaMDMxMTAvBgNV
BAMTKEVCODkzRkMyMzI0MTQxQzg0MUI0RTk2MTM4MzcyNTJGOEQ2NTY0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJp7a6c5T7aQwgQ7DobvmYQGjz
KtqQjfviRvaJTkgynSdq6ravqpswgcTnsjrOX4JGItEdXn3OC1LpKw5Diph9/t2S
Tjh9vtYzEU3XP/pZo9ss93kyUpdttK98DpVElLbjjX/JclFIlxPj4QEtUPiZkueZ
9z+2/jHcTVNBSLhcd/BeDEX6kFYWxHfNfaXcgmxmDkq9cDadyU6PsgVxN2V3GEQj
/EdFczBcD16kqCVRBV+eo2R/VogTNGLyPCHQTIyHgDy1BcH+ajXmF+OTXhnOoUrj
aMq5LcblXXzP/uoP5i6xgQzWfjE73xzZgFGwySlNVg4QS0QJ1FW1M7cbA1N5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTriT/CMkFByEG0
6WE4NyUvjWVk2DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BMmtWTHVnclJ1VTc0alhtVjc5WVJhQURXQ2h1cWN3cmZ3
VDdOTVAxb01qeS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQTJrVkx1Z3JSdVU3NGpYbVY3OVlSYUFEV0NodXFjd3Jm
d1Q3Tk1QMW9NankvMC9FQjg5M0ZDMjMyNDE0MUM4NDFCNEU5NjEzODM3MjUyRjhE
NjU2NEQ4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALINVAwDQQCAAIwBwMF
ACgEelQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCQFMA0GCSqGSIb3DQEBCwUA
A4IBAQAL6uAtGeBsxGjDcF47Xgmvuh2do9wfXyf5tAmwVxtEPXMb1nzRbLUYiV6k
YRKuJN9RUc4NS10oyaFEPC345uCGsWkhcYWuVwjxk5JmhvP6ZeBuIXT6p9XcG9IZ
0NHXq0osuoKT+TPHhEIZMEgdvW3/cKUkS7iNySZwa96HnXvna0is7djHUwtM52Kg
c5KzWF2S8CKVM/+v7SxtZQg3Dk3mU49jrwOduLg4KHdk+2lMmEa2aX+AWHhBp+n5
074f6HblBlKK4tdXW/zKVb12N/3J+BLDmXHMH2pR6YE5IaYqCBOgvk2UkyXWbVmX
BoZjXKZCgyKoYtoni6rcV3F3lwYn
-----END CERTIFICATE-----