Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EE4C47063B292D20B4937B11BD7E49BF3FDD5C6E.cer
File:                     EE4C47063B292D20B4937B11BD7E49BF3FDD5C6E.cer (raw, json)
Hash identifier:          NvTE0+kGJjAalExce/81/GAYEuGwhv/Ea0VrVXw9/Uo=
Subject key identifier:   EE:4C:47:06:3B:29:2D:20:B4:93:7B:11:BD:7E:49:BF:3F:DD:5C:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54994C90D37927E21E282E6E8082EA87F047B81F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/EE4C47063B292D20B4937B11BD7E49BF3FDD5C6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 17:59:44 +0000
Certificate not after:    Mon 17 Mar 2025 18:04:44 +0000
Subordinate resources:    AS: 61936
                          IP: 201.158.8.0/21
                          IP: 2804:1880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:99:4c:90:d3:79:27:e2:1e:28:2e:6e:80:82:ea:87:f0:47:b8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 17:59:44 2024 GMT
            Not After : Mar 17 18:04:44 2025 GMT
        Subject: CN=EE4C47063B292D20B4937B11BD7E49BF3FDD5C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:32:8a:7b:3a:56:a6:21:a5:78:c9:2b:eb:
                    63:16:b5:9d:2e:a0:fd:e1:f6:6d:a2:56:88:88:72:
                    d2:15:7a:59:eb:e8:9d:01:ce:62:10:d1:fe:0d:21:
                    49:12:22:08:e8:9b:9c:c7:60:3b:45:a3:e4:12:2a:
                    f8:cf:19:0f:ce:95:aa:63:e5:63:7e:87:b8:55:d7:
                    8d:2f:ae:90:a1:ce:74:6e:84:9b:10:50:fa:d6:4c:
                    80:4b:87:92:e7:e1:0f:8f:41:7a:f3:e0:11:13:2d:
                    93:85:a7:71:9e:26:a4:ad:63:46:ab:f4:ac:87:3e:
                    d6:3e:8b:78:d7:ee:57:9c:bc:12:32:0c:88:9d:a4:
                    31:6b:0e:e0:eb:1e:2c:d6:09:02:e2:16:79:69:91:
                    7d:3f:8c:3f:07:08:4f:76:a0:51:71:e0:bd:14:1d:
                    5d:8d:02:5d:fd:94:b1:13:52:22:2a:75:5c:48:a8:
                    85:90:66:83:9d:b9:c4:f1:1f:e1:c4:39:76:f0:c6:
                    a0:87:17:90:2a:6f:3b:18:3e:73:ee:04:15:05:aa:
                    f0:be:e5:01:cc:3b:d1:f3:3f:0e:4c:5a:17:c2:f0:
                    1b:e8:d6:8f:40:60:44:38:a4:aa:5d:6a:07:ca:a7:
                    00:29:05:ee:2b:e0:4c:81:fc:8d:4f:0d:4a:19:c1:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:4C:47:06:3B:29:2D:20:B4:93:7B:11:BD:7E:49:BF:3F:DD:5C:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/EE4C47063B292D20B4937B11BD7E49BF3FDD5C6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.8.0/21
                IPv6:
                  2804:1880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61936

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:9a:79:8d:5a:27:f3:0d:61:e7:37:80:e3:ae:48:08:1d:
         30:d6:d6:a7:5f:d5:99:5e:c4:1f:a8:5b:1a:a6:b7:39:40:85:
         a4:04:2d:fa:80:82:e5:4d:da:99:3e:15:d5:06:0d:48:b9:cd:
         46:25:0c:df:61:bc:7c:fe:06:3e:2c:bf:1e:c7:da:83:87:a0:
         8e:27:5e:83:e7:ac:ad:11:73:f1:ba:67:25:52:fc:b7:97:bd:
         dc:18:61:9e:cb:d7:73:38:2b:a5:c3:48:f8:ec:b3:9d:16:92:
         81:5a:0b:56:e0:00:74:e1:d9:bd:43:56:56:77:4a:f9:9f:a2:
         0c:ac:0e:0b:cd:e3:51:6d:63:39:49:b5:1d:1a:2a:2e:08:e7:
         4d:67:df:36:7b:8a:b8:94:d3:4b:e2:60:5e:31:8d:1b:87:45:
         3b:5b:ed:3e:23:d8:1c:ae:c8:7a:94:4b:25:5f:fd:48:67:2f:
         27:bd:ea:b5:bc:4c:a4:b7:ad:5a:8c:6d:6e:f5:f9:1b:be:13:
         fc:ec:e0:df:0e:f0:10:ad:52:b0:91:69:c9:5c:c8:be:cf:f0:
         d1:f2:80:eb:61:27:74:ba:df:4b:cb:30:55:05:9d:e6:e0:0b:
         cf:91:40:65:df:56:92:df:45:83:c8:5a:ab:ee:fb:5e:08:ff:
         6a:76:c9:67
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUVJlMkNN5J+IeKC5ugILqh/BHuB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTgxNzU5NDRaFw0yNTAzMTcxODA0NDRaMDMxMTAvBgNV
BAMTKEVFNEM0NzA2M0IyOTJEMjBCNDkzN0IxMUJEN0U0OUJGM0ZERDVDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CjKKezpWpiGleMkr62MWtZ0u
oP3h9m2iVoiIctIVelnr6J0BzmIQ0f4NIUkSIgjom5zHYDtFo+QSKvjPGQ/Olapj
5WN+h7hV140vrpChznRuhJsQUPrWTIBLh5Ln4Q+PQXrz4BETLZOFp3GeJqStY0ar
9KyHPtY+i3jX7lecvBIyDIidpDFrDuDrHizWCQLiFnlpkX0/jD8HCE92oFFx4L0U
HV2NAl39lLETUiIqdVxIqIWQZoOducTxH+HEOXbwxqCHF5AqbzsYPnPuBBUFqvC+
5QHMO9HzPw5MWhfC8Bvo1o9AYEQ4pKpdagfKpwApBe4r4EyB/I1PDUoZwQtVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTuTEcGOyktILST
exG9fkm/P91cbjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQ1h2RlVZdjg0N004S05BSEZESmlvdVRxSkJ0MlZRTnFt
RU5UcU14WEZNTi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5x
bUVOVHFNeFhGTU4vMC9FRTRDNDcwNjNCMjkyRDIwQjQ5MzdCMTFCRDdFNDlCRjNG
REQ1QzZFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAPJnggwDQQCAAIwBwMF
ACgEGIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPHwMA0GCSqGSIb3DQEBCwUA
A4IBAQCK2Zp5jVon8w1h5zeA465ICB0w1tanX9WZXsQfqFsaprc5QIWkBC36gILl
TdqZPhXVBg1Iuc1GJQzfYbx8/gY+LL8ex9qDh6COJ16D56ytEXPxumclUvy3l73c
GGGey9dzOCulw0j47LOdFpKBWgtW4AB04dm9Q1ZWd0r5n6IMrA4LzeNRbWM5SbUd
GiouCOdNZ982e4q4lNNL4mBeMY0bh0U7W+0+I9gcrsh6lEslX/1IZy8nveq1vEyk
t61ajG1u9fkbvhP87ODfDvAQrVKwkWnJXMi+z/DR8oDrYSd0ut9LyzBVBZ3m4AvP
kUBl31aS30WDyFqr7vteCP9qdsln
-----END CERTIFICATE-----