Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
File:                     F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer (raw, json)
Hash identifier:          EXbGhRiPvKm3ArsT60bNqZc311/Nk+wcJ8V8Do8XEDQ=
Subject key identifier:   F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       75C58BF54B53BDE9FB64BE27EA73BF2F8F330508
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 22:45:45 +0000
Certificate not after:    Mon 19 Aug 2024 22:50:45 +0000
Subordinate resources:    AS: 271117
                          IP: 179.48.88.0/22
                          IP: 2804:7684::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:8b:f5:4b:53:bd:e9:fb:64:be:27:ea:73:bf:2f:8f:33:05:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 22:45:45 2023 GMT
            Not After : Aug 19 22:50:45 2024 GMT
        Subject: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:0b:44:6d:cf:98:3f:65:ae:4e:71:8c:54:
                    6a:a9:f1:8b:f1:6e:ab:77:0a:d5:3a:c6:aa:d9:d6:
                    ff:1a:98:8d:99:9d:9a:3f:43:ff:4f:11:71:52:76:
                    1a:77:a3:58:b7:7a:94:08:56:fb:c4:35:4d:02:e4:
                    73:4c:f8:f0:5a:ad:56:48:52:4a:9f:25:a1:28:f2:
                    54:8c:a1:3b:e4:0b:78:d5:fc:8f:6d:9c:59:ee:a4:
                    7e:55:8c:81:8c:29:4a:f0:fb:95:b3:dd:ef:c8:0f:
                    aa:64:44:91:09:b3:4c:05:df:db:3c:4e:fc:e2:6d:
                    12:f4:f0:58:d5:d0:d0:09:07:fc:ff:a2:7b:33:d1:
                    43:f8:57:90:0f:6f:b6:fa:5a:e9:8e:ba:e0:3f:11:
                    3e:7d:d9:25:08:88:be:1b:73:05:47:fb:4a:1d:3e:
                    b2:5f:e7:68:29:d2:52:b0:48:39:81:55:52:88:2f:
                    a9:98:e4:4a:4d:da:b6:1e:b5:27:89:fc:7c:45:23:
                    83:5e:fc:38:b2:6e:8a:2d:cc:19:61:39:b1:e8:8f:
                    aa:90:b9:0f:03:bf:82:76:10:5a:af:e5:ce:f9:1d:
                    97:51:73:9e:d3:c3:0c:48:75:fd:8d:86:36:23:df:
                    0d:b4:e7:57:05:f4:9b:bd:20:ee:4e:85:ce:a1:80:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/22
                IPv6:
                  2804:7684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271117

    Signature Algorithm: sha256WithRSAEncryption
         b7:d7:d4:f6:86:11:5e:2d:ab:09:77:97:7b:8b:7c:31:b2:ee:
         b8:3a:32:aa:cd:3c:39:0c:01:4a:d4:5b:5d:af:02:cb:6f:fb:
         9e:91:14:06:46:48:20:03:41:72:51:58:74:b7:2a:44:8c:7f:
         7d:14:d8:3e:66:0c:24:00:b9:6f:2c:d1:f6:6b:b4:28:2a:ab:
         96:b5:fd:ae:b6:2b:7e:b1:29:be:c3:3d:d3:0d:9f:5f:18:1f:
         a7:16:66:91:db:da:e1:c2:c2:ed:28:db:9b:05:2d:be:fd:d2:
         0e:bc:19:44:33:31:b4:a7:1d:05:9b:67:dc:b2:1e:0c:c9:c2:
         58:52:5c:04:a0:63:ba:5d:f3:91:ad:2b:6e:69:85:d9:80:d2:
         5e:66:00:3f:95:ef:bc:0b:e0:25:90:c7:bc:43:d0:22:ff:4d:
         1c:3b:93:e8:e5:70:5d:eb:d5:98:c9:b6:a7:5d:d2:a8:a9:78:
         68:16:88:4d:19:21:ec:43:e6:84:3d:89:b2:0f:31:43:3e:f0:
         62:73:7b:e1:a5:f7:6c:d3:82:5d:74:76:63:74:29:39:b4:2c:
         e6:48:43:a5:2a:c9:b8:4f:ff:1a:ee:ca:02:37:ef:3b:4c:3c:
         4d:6a:8b:00:73:fd:df:cc:57:22:ad:7c:aa:24:0d:6e:b5:7a:
         80:1b:c0:d1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdcWL9UtTven7ZL4n6nO/L48zBQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MjEyMjQ1NDVaFw0yNDA4MTkyMjUwNDVaMDMxMTAvBgNV
BAMTKEYyNThGOTA4RTNGMjY5RUFGQTEzOTI1QTVCNDBENUVGMDkyMUM5Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOwtEbc+YP2WuTnGMVGqp8Yvx
bqt3CtU6xqrZ1v8amI2ZnZo/Q/9PEXFSdhp3o1i3epQIVvvENU0C5HNM+PBarVZI
UkqfJaEo8lSMoTvkC3jV/I9tnFnupH5VjIGMKUrw+5Wz3e/ID6pkRJEJs0wF39s8
TvzibRL08FjV0NAJB/z/onsz0UP4V5APb7b6WumOuuA/ET592SUIiL4bcwVH+0od
PrJf52gp0lKwSDmBVVKIL6mY5EpN2rYetSeJ/HxFI4Ne/DiybootzBlhObHoj6qQ
uQ8Dv4J2EFqv5c75HZdRc57TwwxIdf2NhjYj3w2051cF9Ju9IO5Ohc6hgG2zAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyWPkI4/Jp6voT
klpbQNXvCSHJzDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BSGZialQxcWZlVDhQc2g1cTJ6RmgxeTN5dkZTWFFibVpV
YmJyclpub1pCNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQUhmYmpUMXFmZVQ4UHNoNXEyekZoMXkzeXZGU1hRYm1a
VWJicnJabm9aQjQvMC9GMjU4RjkwOEUzRjI2OUVBRkExMzkyNUE1QjQwRDVFRjA5
MjFDOUNDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMFgwDQQCAAIwBwMF
ACgEdoQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCMNMA0GCSqGSIb3DQEBCwUA
A4IBAQC319T2hhFeLasJd5d7i3wxsu64OjKqzTw5DAFK1FtdrwLLb/uekRQGRkgg
A0FyUVh0typEjH99FNg+ZgwkALlvLNH2a7QoKquWtf2utit+sSm+wz3TDZ9fGB+n
FmaR29rhwsLtKNubBS2+/dIOvBlEMzG0px0Fm2fcsh4MycJYUlwEoGO6XfORrStu
aYXZgNJeZgA/le+8C+AlkMe8Q9Ai/00cO5Po5XBd69WYybanXdKoqXhoFohNGSHs
Q+aEPYmyDzFDPvBic3vhpfds04JddHZjdCk5tCzmSEOlKsm4T/8a7soCN+87TDxN
aosAc/3fzFcirXyqJA1utXqAG8DR
-----END CERTIFICATE-----