Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F0B6EBBD8109B7B9C8195E77B69C0F19FEE70110.cer
File:                     F0B6EBBD8109B7B9C8195E77B69C0F19FEE70110.cer (raw, json)
Hash identifier:          DXJ/G7lrwXDIOPFKuIYLHcXgJp0WCJdE3PwvLFCwE3I=
Subject key identifier:   F0:B6:EB:BD:81:09:B7:B9:C8:19:5E:77:B6:9C:0F:19:FE:E7:01:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D304BC9A154ADD8D923A40FB71E60B549B5C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/F0B6EBBD8109B7B9C8195E77B69C0F19FEE70110.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 09:19:38 +0000
Certificate not after:    Sat 16 Nov 2024 09:24:38 +0000
Subordinate resources:    AS: 270796
                          IP: 189.36.252.0/22
                          IP: 2804:718c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:4b:c9:a1:54:ad:d8:d9:23:a4:0f:b7:1e:60:b5:49:b5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 09:19:38 2023 GMT
            Not After : Nov 16 09:24:38 2024 GMT
        Subject: CN=F0B6EBBD8109B7B9C8195E77B69C0F19FEE70110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:f2:86:2a:56:aa:8a:83:e0:26:a9:98:7d:
                    44:3d:1e:ed:fd:54:6e:d7:64:f0:44:96:8e:9f:d5:
                    9f:6a:f6:37:cf:42:e3:f5:dc:61:6c:39:f2:a0:45:
                    ef:cf:c2:9f:ca:d2:5a:04:21:1c:3b:11:6a:bb:04:
                    e3:77:d6:f7:bd:08:0d:82:b7:58:8b:09:cf:a4:aa:
                    ec:72:04:85:c0:0a:6b:e8:41:cf:d0:67:65:9c:48:
                    f9:42:54:02:60:e2:c4:01:e7:68:a2:55:20:65:54:
                    0c:5c:0f:fe:2a:ca:74:b8:ac:b5:87:6e:b5:c9:2c:
                    18:54:3d:4d:ac:99:18:66:73:31:24:aa:3c:8e:e9:
                    d3:d5:86:ab:ee:97:69:cb:ff:95:20:c7:41:15:13:
                    13:12:75:00:d5:e4:6f:f1:b1:8e:91:9b:6f:79:62:
                    72:8f:59:e0:be:ed:b1:75:73:42:5a:9c:0d:41:b1:
                    28:20:08:38:8f:a8:b7:a6:03:80:32:73:eb:4d:db:
                    ed:2c:88:e0:8c:23:3d:2c:df:f1:80:79:e8:77:61:
                    f6:7e:29:d4:36:5a:d3:dc:3a:d0:3b:16:60:54:a8:
                    ed:88:6e:dc:a4:b4:8a:5a:98:17:ef:8b:a2:83:eb:
                    bc:41:8c:81:48:61:d8:d9:3b:4d:69:64:b6:b3:0d:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:B6:EB:BD:81:09:B7:B9:C8:19:5E:77:B6:9C:0F:19:FE:E7:01:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/0/F0B6EBBD8109B7B9C8195E77B69C0F19FEE70110.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.252.0/22
                IPv6:
                  2804:718c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270796

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:d5:fc:89:60:48:d5:48:a4:26:f2:93:7a:c3:b6:7a:86:
         06:38:35:2c:23:57:46:ad:ca:81:0a:d7:42:79:62:21:ae:d1:
         0a:57:d6:01:28:f7:bd:30:63:c3:0d:a1:4d:11:ac:93:55:55:
         0d:22:76:c6:b9:cf:76:c9:7a:a5:21:88:f5:4a:b7:dd:b9:94:
         75:93:3b:13:5b:9b:a7:2d:c6:16:08:5c:a6:f5:01:93:5d:ec:
         d3:1f:90:27:a7:2e:1a:7f:a4:60:9a:01:f7:ed:28:2d:99:9d:
         48:29:30:16:67:36:bf:59:3e:b2:4a:00:5c:22:93:4f:e5:bd:
         a6:39:69:74:6a:15:32:cf:9f:9c:16:05:67:00:68:f0:38:19:
         90:7f:a0:bc:7b:6b:a1:9a:83:ac:e0:84:d2:bd:93:33:9b:e0:
         88:13:c6:20:03:b0:7c:9b:5c:1f:78:b8:7a:e8:08:7f:c7:b6:
         74:ee:4d:2c:4f:c2:6c:e2:fe:25:43:9b:08:bc:d0:7f:10:47:
         bd:f4:aa:e4:1c:54:71:b2:04:b1:96:7e:92:7f:7d:dc:ea:54:
         7b:74:9f:1d:cd:de:0a:2e:49:8a:2b:3d:72:b5:8c:60:eb:fe:
         e9:55:17:70:bf:ca:6a:fe:3f:7a:0c:69:eb:7e:6f:53:c0:fc:
         3b:b5:ca:b1
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgITfTBLyaFUrdjZI6QPtx5gtUm1yDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFRTkxN0VCQzdBMTU4NzgzQjQ0QkM2RUQ4MjIxNzQzNEYy
OEFERUZCMB4XDTIzMTExODA5MTkzOFoXDTI0MTExNjA5MjQzOFowMzExMC8GA1UE
AxMoRjBCNkVCQkQ4MTA5QjdCOUM4MTk1RTc3QjY5QzBGMTlGRUU3MDExMDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANBx8oYqVqqKg+AmqZh9RD0e7f1U
btdk8ESWjp/Vn2r2N89C4/XcYWw58qBF78/Cn8rSWgQhHDsRarsE43fW970IDYK3
WIsJz6Sq7HIEhcAKa+hBz9BnZZxI+UJUAmDixAHnaKJVIGVUDFwP/irKdListYdu
tcksGFQ9TayZGGZzMSSqPI7p09WGq+6Xacv/lSDHQRUTExJ1ANXkb/GxjpGbb3li
co9Z4L7tsXVzQlqcDUGxKCAIOI+ot6YDgDJz603b7SyI4IwjPSzf8YB56Hdh9n4p
1DZa09w60DsWYFSo7Yhu3KS0ilqYF++LooPrvEGMgUhh2Nk7TWlktrMN+XECAwEA
AaOCAxowggMWMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFPC2672BCbe5yBle
d7acDxn+5wEQMB8GA1UdIwQYMBaAFO6Rfrx6FYeDtEvG7YIhdDTyit77MA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9FRTkxN0VCQzdBMTU4NzgzQjQ0
QkM2RUQ4MjIxNzQzNEYyOEFERUZCLmNybDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQyNWM5
YmI3ZTVjYWM3NDE5ZmE5MTkzNzcwZjY0YTZlZGYyMGMxOS5jZXIwggE/BggrBgEF
BQcBCwSCATEwggEtMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvLzVIMnY3bU41ZzdLQkxIOFJ2ZTVaR21CbUhnN012UkFxbXBh
dDh6S2pwWmNILzAwgYoGCCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdp
c3Ryby5ici9yZXBvLzVIMnY3bU41ZzdLQkxIOFJ2ZTVaR21CbUhnN012UkFxbXBh
dDh6S2pwWmNILzAvRjBCNkVCQkQ4MTA5QjdCOUM4MTk1RTc3QjY5QzBGMTlGRUU3
MDExMC5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvST8MA0EAgACMAcDBQAo
BHGMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQhzDANBgkqhkiG9w0BAQsFAAOC
AQEAjOnV/IlgSNVIpCbyk3rDtnqGBjg1LCNXRq3KgQrXQnliIa7RClfWASj3vTBj
ww2hTRGsk1VVDSJ2xrnPdsl6pSGI9Uq33bmUdZM7E1ubpy3GFghcpvUBk13s0x+Q
J6cuGn+kYJoB9+0oLZmdSCkwFmc2v1k+skoAXCKTT+W9pjlpdGoVMs+fnBYFZwBo
8DgZkH+gvHtroZqDrOCE0r2TM5vgiBPGIAOwfJtcH3i4eugIf8e2dO5NLE/CbOL+
JUObCLzQfxBHvfSq5BxUcbIEsZZ+kn993OpUe3SfHc3eCi5Jiis9crWMYOv+6VUX
cL/Kav4/egxp635vU8D8O7XKsQ==
-----END CERTIFICATE-----