Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F58D20EF5F0EF376FEEF8D2AACC2C0FD57655A70.cer
File:                     F58D20EF5F0EF376FEEF8D2AACC2C0FD57655A70.cer (raw, json)
Hash identifier:          NGJWvGbfhU9OnPCSgXpv30p6RfGzD3pSMEAu/7/Ceos=
Subject key identifier:   F5:8D:20:EF:5F:0E:F3:76:FE:EF:8D:2A:AC:C2:C0:FD:57:65:5A:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46720CFE5D10329F622EB1536B3391164C74D789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/F58D20EF5F0EF376FEEF8D2AACC2C0FD57655A70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 19:07:19 +0000
Certificate not after:    Wed 18 Sep 2024 19:12:19 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:72:0c:fe:5d:10:32:9f:62:2e:b1:53:6b:33:91:16:4c:74:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 19:07:19 2023 GMT
            Not After : Sep 18 19:12:19 2024 GMT
        Subject: CN=F58D20EF5F0EF376FEEF8D2AACC2C0FD57655A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:91:d9:65:48:8f:34:58:a3:3e:cd:38:06:
                    3d:7d:f1:39:ae:7d:37:c3:af:f1:e9:9c:68:3c:09:
                    1f:2f:d9:ff:46:a4:67:bb:e3:90:9d:7d:08:9f:2d:
                    89:15:a5:33:22:01:59:b8:e3:6e:ce:10:ae:31:ea:
                    64:1b:85:f2:f8:53:90:69:74:dc:ed:19:d8:95:d0:
                    e4:fd:15:15:97:ce:af:de:fa:91:6b:34:a8:59:c5:
                    d1:20:5f:52:8f:e7:97:50:8a:6c:0e:fb:20:a2:af:
                    e9:13:7a:63:41:94:9b:03:a6:43:ff:95:d0:19:50:
                    36:fa:f7:c1:e6:32:5f:29:cb:fd:39:0c:77:73:8f:
                    fb:1b:9b:a8:7f:49:3a:62:f4:17:76:84:26:aa:64:
                    e7:da:bd:a6:0a:bf:00:5a:f1:b7:9f:b8:a3:19:36:
                    54:c3:0d:02:b4:3d:01:3d:d0:a1:1a:3a:37:cf:e1:
                    63:3f:c1:77:b7:b3:b7:ec:21:5c:6a:a1:88:b7:a4:
                    29:98:ed:c8:c2:14:9c:3b:bd:a5:fc:82:9d:5d:aa:
                    67:ee:a6:d3:72:cd:12:3e:6a:e3:f8:f4:b6:4c:10:
                    1d:e0:df:a5:16:f3:b8:23:c8:81:dc:e5:e5:d0:65:
                    35:f7:72:2a:81:32:bf:d2:86:3b:70:0c:fe:0d:12:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:8D:20:EF:5F:0E:F3:76:FE:EF:8D:2A:AC:C2:C0:FD:57:65:5A:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/F58D20EF5F0EF376FEEF8D2AACC2C0FD57655A70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         53:13:5d:20:89:8b:78:a1:51:fe:4a:87:ed:41:82:fa:0b:96:
         47:d7:1f:a5:c3:36:ba:8f:3c:87:0f:fc:f6:3e:a5:37:24:e0:
         9c:c9:b6:74:71:99:45:65:c8:3c:2c:eb:28:f5:09:72:b0:b9:
         ed:fd:ec:09:68:56:21:d7:1a:2d:33:2f:ec:76:f4:ef:a8:c1:
         77:26:2e:65:b9:ec:6d:d6:70:3c:c3:e9:95:9a:bd:20:ac:32:
         10:71:5c:8d:8b:6a:a4:22:17:84:f6:04:87:b6:86:fd:d8:98:
         8b:fb:95:3d:48:4d:48:a4:f6:9c:e8:f0:18:fa:36:0b:cf:31:
         63:0e:2b:b8:e1:a2:f8:d6:cd:b2:5a:4c:f4:72:02:94:a3:5f:
         ee:45:0b:96:7e:e7:38:e4:0d:37:84:67:55:de:95:3e:57:50:
         21:fc:c4:95:f8:82:21:b4:cd:50:9f:48:88:4c:7f:ea:17:3a:
         01:21:48:10:0b:f4:d2:3b:9d:af:ae:dc:a5:55:1c:76:9e:96:
         a0:6e:fe:80:12:e1:09:7f:f2:66:f0:1a:31:3e:ae:c2:5e:ab:
         ad:1b:80:07:89:26:33:49:bf:d7:51:f0:f2:f9:54:ff:2b:d6:
         ba:5b:84:0a:d1:68:82:3d:0c:21:43:76:2f:cd:f0:33:8c:3c:
         10:7a:e9:fa
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIURnIM/l0QMp9iLrFTazORFkx014kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjAxOTA3MTlaFw0yNDA5MTgxOTEyMTlaMDMxMTAvBgNV
BAMTKEY1OEQyMEVGNUYwRUYzNzZGRUVGOEQyQUFDQzJDMEZENTc2NTVBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZpHZZUiPNFijPs04Bj198Tmu
fTfDr/HpnGg8CR8v2f9GpGe745CdfQifLYkVpTMiAVm4427OEK4x6mQbhfL4U5Bp
dNztGdiV0OT9FRWXzq/e+pFrNKhZxdEgX1KP55dQimwO+yCir+kTemNBlJsDpkP/
ldAZUDb698HmMl8py/05DHdzj/sbm6h/STpi9Bd2hCaqZOfavaYKvwBa8befuKMZ
NlTDDQK0PQE90KEaOjfP4WM/wXe3s7fsIVxqoYi3pCmY7cjCFJw7vaX8gp1dqmfu
ptNyzRI+auP49LZMEB3g36UW87gjyIHc5eXQZTX3ciqBMr/ShjtwDP4NEtDHAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1jSDvXw7zdv7v
jSqswsD9V2VacDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83MjVERThWdUMxTEV0eTVIRFBCb2ZlaUVSQ1RDOUszOHU4
VVA2U2JoNXc5bS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1
OFVQNlNiaDV3OW0vMC9GNThEMjBFRjVGMEVGMzc2RkVFRjhEMkFBQ0MyQzBGRDU3
NjU1QTcwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7gQwDQQCAAIwBwMF
ACgETygwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBgUMA0GCSqGSIb3DQEBCwUA
A4IBAQBTE10giYt4oVH+SoftQYL6C5ZH1x+lwza6jzyHD/z2PqU3JOCcybZ0cZlF
Zcg8LOso9QlysLnt/ewJaFYh1xotMy/sdvTvqMF3Ji5luext1nA8w+mVmr0grDIQ
cVyNi2qkIheE9gSHtob92JiL+5U9SE1IpPac6PAY+jYLzzFjDiu44aL41s2yWkz0
cgKUo1/uRQuWfuc45A03hGdV3pU+V1Ah/MSV+IIhtM1Qn0iITH/qFzoBIUgQC/TS
O52vrtylVRx2npagbv6AEuEJf/Jm8BoxPq7CXqutG4AHiSYzSb/XUfDy+VT/K9a6
W4QK0WiCPQwhQ3YvzfAzjDwQeun6
-----END CERTIFICATE-----