Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F84A9CEEE274C47E29A60C0C0049B91721B42F3E.cer
File:                     F84A9CEEE274C47E29A60C0C0049B91721B42F3E.cer (raw, json)
Hash identifier:          7qJzIQrR6AWDJqJxf264muO6Pca/nomR51WOpYyR70I=
Subject key identifier:   F8:4A:9C:EE:E2:74:C4:7E:29:A6:0C:0C:00:49:B9:17:21:B4:2F:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6974497D0394EA0600DBFDF2712B16BC78259789
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/F84A9CEEE274C47E29A60C0C0049B91721B42F3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Mar 2024 12:55:09 +0000
Certificate not after:    Fri 28 Mar 2025 13:00:09 +0000
Subordinate resources:    AS: 265949
                          IP: 164.163.96.0/22
                          IP: 2804:4048::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:49:7d:03:94:ea:06:00:db:fd:f2:71:2b:16:bc:78:25:97:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 29 12:55:09 2024 GMT
            Not After : Mar 28 13:00:09 2025 GMT
        Subject: CN=F84A9CEEE274C47E29A60C0C0049B91721B42F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:fe:68:e5:2c:6b:63:d5:8f:1e:7f:08:7f:
                    5d:75:bc:c0:2c:17:31:5b:d9:9c:3b:22:f3:30:17:
                    4c:9d:11:24:fd:a6:ca:93:6e:7f:78:32:40:8a:b0:
                    cb:7c:58:8a:f1:60:ce:61:bb:6f:a4:e2:3b:7f:3f:
                    2e:07:0d:ce:a2:bf:b6:4a:fe:87:90:b6:0e:2e:de:
                    bc:24:ea:fb:6f:72:88:b2:bd:3e:8a:91:16:a9:c7:
                    37:70:88:c2:10:d6:fa:e4:e3:ce:da:5e:10:18:74:
                    8a:76:4e:82:21:ae:d9:95:7b:fb:61:32:05:fe:d3:
                    1d:81:c4:dd:c6:19:60:bd:9d:c3:4e:51:ef:8e:f8:
                    d8:5b:5a:77:34:a6:4b:55:2a:d4:6c:13:93:29:ef:
                    ec:4d:8d:74:af:0e:6c:92:76:51:22:c4:07:3d:c6:
                    a0:1e:50:33:18:33:2d:3e:2c:69:82:73:92:7c:60:
                    f7:81:6c:67:10:de:f2:f1:d4:c6:28:95:2b:80:2e:
                    1b:dc:3c:91:2d:b5:11:cc:63:61:44:a9:1e:d8:98:
                    d6:ad:c7:ef:f1:bb:a4:88:90:2f:3d:c1:54:52:be:
                    55:7c:d2:40:d6:ba:ef:df:f1:bd:3e:f6:e9:86:14:
                    51:15:c8:59:9b:1c:eb:32:87:0c:cd:df:20:dc:c1:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F8:4A:9C:EE:E2:74:C4:7E:29:A6:0C:0C:00:49:B9:17:21:B4:2F:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/F84A9CEEE274C47E29A60C0C0049B91721B42F3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.96.0/22
                IPv6:
                  2804:4048::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265949

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:b0:93:06:92:0e:8e:4a:5d:4d:0a:75:7b:79:53:53:f3:
         2b:75:c7:83:db:75:74:af:97:df:5b:6c:f4:1b:93:55:e8:7b:
         74:7a:bc:bf:fe:ed:b7:fd:d4:5a:1a:cd:90:b1:9a:9e:e5:33:
         d9:f9:5c:44:77:03:de:a5:f5:65:22:1d:3a:f5:e4:2f:49:32:
         22:28:f6:54:7d:a9:40:e4:b8:8d:4f:ae:9a:90:e3:fc:d7:b1:
         4c:f3:9e:83:85:2b:a7:53:6f:30:63:d8:f6:b9:a3:c8:f9:d7:
         c6:fe:59:e6:2a:26:91:c6:62:2b:3f:ce:08:2c:21:d7:d2:8c:
         4e:cb:c9:dd:30:49:4d:17:dc:e6:63:05:8b:65:ef:8f:8c:59:
         7b:2d:81:71:78:87:5d:11:26:19:d5:09:92:99:f5:33:8c:16:
         7a:20:79:fb:0f:c8:47:0e:08:90:e7:98:68:d1:bd:8b:62:eb:
         a9:d8:37:d8:e6:00:a5:f6:21:4e:ed:f1:a3:50:a5:72:e7:a0:
         2b:ce:67:b9:60:e5:04:73:4c:ae:b7:ad:5e:12:8d:df:39:fd:
         1f:23:6a:64:72:94:f7:c6:3e:5f:c6:62:31:a3:55:48:7d:77:
         3c:e8:e2:37:ce:bf:8c:44:f9:4c:50:17:a8:06:5c:38:a3:7a:
         2b:ae:c9:23
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUaXRJfQOU6gYA2/3ycSsWvHgll4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjkxMjU1MDlaFw0yNTAzMjgxMzAwMDlaMDMxMTAvBgNV
BAMTKEY4NEE5Q0VFRTI3NEM0N0UyOUE2MEMwQzAwNDlCOTE3MjFCNDJGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnuv5o5SxrY9WPHn8If111vMAs
FzFb2Zw7IvMwF0ydEST9psqTbn94MkCKsMt8WIrxYM5hu2+k4jt/Py4HDc6iv7ZK
/oeQtg4u3rwk6vtvcoiyvT6KkRapxzdwiMIQ1vrk487aXhAYdIp2ToIhrtmVe/th
MgX+0x2BxN3GGWC9ncNOUe+O+NhbWnc0pktVKtRsE5Mp7+xNjXSvDmySdlEixAc9
xqAeUDMYMy0+LGmCc5J8YPeBbGcQ3vLx1MYolSuALhvcPJEttRHMY2FEqR7YmNat
x+/xu6SIkC89wVRSvlV80kDWuu/f8b0+9umGFFEVyFmbHOsyhwzN3yDcwbNNAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4Spzu4nTEfimm
DAwASbkXIbQvPjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EOXdBVzlnbVhTbW8yc2U1YlBrRFRpTDVWRTN6N29YVUFl
aGFDSzJneldlWi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVB
ZWhhQ0syZ3pXZVovMC9GODRBOUNFRUUyNzRDNDdFMjlBNjBDMEMwMDQ5QjkxNzIx
QjQyRjNFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKko2AwDQQCAAIwBwMF
ACgEQEgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA7dMA0GCSqGSIb3DQEBCwUA
A4IBAQAG5bCTBpIOjkpdTQp1e3lTU/MrdceD23V0r5ffW2z0G5NV6Ht0ery//u23
/dRaGs2QsZqe5TPZ+VxEdwPepfVlIh069eQvSTIiKPZUfalA5LiNT66akOP817FM
856DhSunU28wY9j2uaPI+dfG/lnmKiaRxmIrP84ILCHX0oxOy8ndMElNF9zmYwWL
Ze+PjFl7LYFxeIddESYZ1QmSmfUzjBZ6IHn7D8hHDgiQ55ho0b2LYuup2DfY5gCl
9iFO7fGjUKVy56Arzme5YOUEc0yut61eEo3fOf0fI2pkcpT3xj5fxmIxo1VIfXc8
6OI3zr+MRPlMUBeoBlw4o3orrskj
-----END CERTIFICATE-----