Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer
File:                     F7E422809108C1661A3F43CB3CECF9CB91247E9E.cer (raw, json)
Hash identifier:          ojQ7HiWTQKuzIeGYAjIgyy07jfmMQHjqN08CPFZgRO0=
Subject key identifier:   F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2AAC16B249E035B6ECEEEAC9FEDD9FEDFE3EA6BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 13:11:29 +0000
Certificate not after:    Tue 23 Jul 2024 13:16:29 +0000
Subordinate resources:    AS: 268668
                          IP: 45.164.220.0/22
                          IP: 2804:54c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ac:16:b2:49:e0:35:b6:ec:ee:ea:c9:fe:dd:9f:ed:fe:3e:a6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 13:11:29 2023 GMT
            Not After : Jul 23 13:16:29 2024 GMT
        Subject: CN=F7E422809108C1661A3F43CB3CECF9CB91247E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:b9:41:63:2b:9f:bc:7d:10:aa:a1:f1:ab:
                    05:d3:ea:4b:47:41:f4:4e:73:71:ee:3a:f2:63:fa:
                    a7:2e:60:33:01:26:a1:1b:4c:38:df:ef:a8:3b:c3:
                    77:6a:20:cc:79:59:30:c0:de:85:bd:f6:9f:97:a0:
                    39:d8:8e:b4:92:ce:45:18:85:ad:8d:8a:d2:3e:b1:
                    b7:53:43:b0:87:18:f1:7b:37:9f:34:06:f0:ae:82:
                    4a:83:c2:a8:1c:0c:aa:58:3d:85:47:0a:68:27:43:
                    11:b5:15:87:72:56:e5:85:6c:d5:9b:b7:4d:a8:ee:
                    c2:c5:ba:a6:cf:24:ec:23:e1:1c:96:8b:b7:18:0b:
                    6d:4b:ae:49:8a:77:16:fe:ca:23:1b:50:15:55:2c:
                    c3:a8:dd:7d:f6:47:7d:2e:0e:51:84:27:84:f3:bc:
                    0d:7a:57:1f:54:47:9c:9c:42:23:a7:d7:bc:40:6b:
                    b9:92:b1:19:dd:dc:34:de:8e:59:30:81:65:c5:c5:
                    60:b6:c1:96:de:c7:f1:80:7e:2a:67:91:77:75:eb:
                    d8:e6:44:50:80:32:2e:7b:6d:e0:cf:5b:3e:e9:64:
                    31:39:b6:12:d3:a2:d6:af:d7:95:52:88:32:d8:ce:
                    c6:f2:f0:62:fc:9c:64:c4:47:47:b5:2f:6d:28:66:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:E4:22:80:91:08:C1:66:1A:3F:43:CB:3C:EC:F9:CB:91:24:7E:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/F7E422809108C1661A3F43CB3CECF9CB91247E9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22
                IPv6:
                  2804:54c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268668

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:29:fd:76:d0:84:f3:4f:86:bb:0b:d8:3a:94:41:74:de:
         f2:74:9e:30:fa:bb:39:ee:f6:9e:9d:55:16:c3:01:f3:64:84:
         a7:2a:74:f4:49:fe:39:d9:fd:72:38:9a:22:c3:63:c5:56:51:
         23:9b:24:3a:7c:9d:3f:15:b7:43:bb:96:2b:a7:0e:fa:ac:48:
         46:c0:33:9e:e5:c9:24:8a:7d:3b:3d:19:bd:11:39:57:35:11:
         c7:09:fb:73:d7:8e:54:46:bd:56:43:d9:e1:0d:a3:dc:da:eb:
         2a:12:d2:6d:ff:1a:82:45:0f:f5:dd:1e:74:ef:43:24:b7:6a:
         df:f1:39:4c:ca:8f:9c:cb:7b:5b:e8:c0:85:6e:75:ac:5c:7f:
         3d:f1:0b:2f:0a:8b:ce:97:90:9a:25:a7:e7:f1:2c:03:c0:56:
         72:2e:a8:db:b7:d9:4b:4d:fc:55:aa:25:57:25:5c:34:a1:76:
         05:24:34:9d:fe:4b:15:a9:47:5c:79:ed:c6:4f:7d:32:bc:21:
         bc:79:4b:4e:3a:e8:9d:54:42:16:d7:65:03:f9:0a:45:c0:92:
         51:54:a7:48:ae:d3:f7:f5:ee:19:09:c2:7d:3e:80:51:77:f5:
         18:60:e2:70:9d:7d:d5:65:c4:c1:19:42:a0:07:f5:b9:88:df:
         b2:7a:b9:eb
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKqwWskngNbbs7urJ/t2f7f4+pr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjUxMzExMjlaFw0yNDA3MjMxMzE2MjlaMDMxMTAvBgNV
BAMTKEY3RTQyMjgwOTEwOEMxNjYxQTNGNDNDQjNDRUNGOUNCOTEyNDdFOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfLlBYyufvH0QqqHxqwXT6ktH
QfROc3HuOvJj+qcuYDMBJqEbTDjf76g7w3dqIMx5WTDA3oW99p+XoDnYjrSSzkUY
ha2NitI+sbdTQ7CHGPF7N580BvCugkqDwqgcDKpYPYVHCmgnQxG1FYdyVuWFbNWb
t02o7sLFuqbPJOwj4RyWi7cYC21LrkmKdxb+yiMbUBVVLMOo3X32R30uDlGEJ4Tz
vA16Vx9UR5ycQiOn17xAa7mSsRnd3DTejlkwgWXFxWC2wZbex/GAfipnkXd169jm
RFCAMi57beDPWz7pZDE5thLTotav15VSiDLYzsby8GL8nGTER0e1L20oZqADAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT35CKAkQjBZho/
Q8s87PnLkSR+njAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FcmpCZmNjZkhNcjVUTnNxNVFDZjVDd0diRVZrS2ZzSjdw
ZEZxbWdrTG1DWS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3
cGRGcW1na0xtQ1kvMC9GN0U0MjI4MDkxMDhDMTY2MUEzRjQzQ0IzQ0VDRjlDQjkx
MjQ3RTlFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItpNwwDQQCAAIwBwMF
ACgEVMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBl8MA0GCSqGSIb3DQEBCwUA
A4IBAQAXXyn9dtCE80+GuwvYOpRBdN7ydJ4w+rs57vaenVUWwwHzZISnKnT0Sf45
2f1yOJoiw2PFVlEjmyQ6fJ0/FbdDu5Yrpw76rEhGwDOe5ckkin07PRm9ETlXNRHH
Cftz145URr1WQ9nhDaPc2usqEtJt/xqCRQ/13R5070Mkt2rf8TlMyo+cy3tb6MCF
bnWsXH898QsvCovOl5CaJafn8SwDwFZyLqjbt9lLTfxVqiVXJVw0oXYFJDSd/ksV
qUdcee3GT30yvCG8eUtOOuidVEIW12UD+QpFwJJRVKdIrtP39e4ZCcJ9PoBRd/UY
YOJwnX3VZcTBGUKgB/W5iN+yernr
-----END CERTIFICATE-----