Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer
File:                     F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer (raw, json)
Hash identifier:          bZcFYcVyr5pgSpT2Q4UcxNWG83cTsUwcrfMFoW27PrY=
Subject key identifier:   F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0732BFBE73C81DB232C68449CE89852B2ECFEA47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 08:39:06 +0000
Certificate not after:    Fri 28 Jun 2024 08:44:06 +0000
Subordinate resources:    AS: 264011
                          IP: 143.0.136.0/22
                          IP: 2804:2960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:32:bf:be:73:c8:1d:b2:32:c6:84:49:ce:89:85:2b:2e:cf:ea:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 08:39:06 2023 GMT
            Not After : Jun 28 08:44:06 2024 GMT
        Subject: CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:a4:fb:9b:aa:5a:cd:8b:d6:d9:12:38:30:
                    63:bb:26:94:b1:65:35:f0:1b:b2:48:7b:56:99:0d:
                    8d:37:f1:f9:20:6e:9b:5e:33:0f:03:85:b4:29:29:
                    94:68:25:76:6a:c4:30:6b:38:47:45:2c:11:c0:49:
                    7a:ad:c3:5b:3a:5c:6f:4c:ca:7b:82:90:97:34:e8:
                    d7:c8:81:74:e3:b9:cc:84:4a:d2:8d:ae:fe:60:54:
                    e7:bf:71:fe:55:1c:ec:36:62:96:9e:4a:e6:69:4f:
                    75:54:47:04:14:26:92:30:ff:90:0c:3f:71:4d:7a:
                    9a:6e:ca:67:c6:d2:cf:91:f6:d8:03:1d:e1:07:70:
                    5a:24:b9:c8:bb:c3:90:49:f3:ba:5f:84:66:64:d1:
                    3b:b8:6c:0b:95:0b:0a:a3:c4:46:5c:d0:45:1f:ba:
                    2f:b2:15:3a:f8:21:75:b7:dc:f2:94:37:74:66:b7:
                    22:96:32:b4:06:e0:7b:06:9c:cc:aa:0a:18:11:24:
                    82:54:79:7d:71:14:92:e7:1c:85:f0:a4:b5:fa:80:
                    53:7b:c3:85:2b:e6:4d:9d:fa:ee:ab:4b:68:4b:9c:
                    13:2a:2b:5b:a0:09:f6:2c:2d:79:0a:88:e5:56:b3:
                    28:6e:46:77:f2:51:c7:60:87:09:db:c1:33:b3:2a:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22
                IPv6:
                  2804:2960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264011

    Signature Algorithm: sha256WithRSAEncryption
         af:77:e2:cb:88:7f:af:d6:3a:5a:5f:18:55:ab:e8:3d:ba:b4:
         4c:d0:02:2d:dc:20:2d:9a:21:37:26:dc:0c:1b:20:a2:84:77:
         ce:29:75:27:64:de:4f:2d:62:fa:bb:e7:96:4f:2a:90:6a:e5:
         a0:a1:a7:33:52:ee:3a:e9:73:1a:d2:36:63:4e:ed:c9:16:53:
         81:67:2e:64:b3:01:0f:c6:e2:c5:b7:6a:b5:ad:94:9e:cb:c2:
         a3:a4:81:16:d2:43:d5:84:4c:c2:ab:ea:84:4f:a5:c1:c0:44:
         db:31:75:aa:63:8b:35:38:f1:b8:49:ce:81:a8:ee:da:a2:6e:
         ea:a8:8e:bd:0b:dd:50:cb:5c:3f:ac:0c:79:c4:71:19:cd:f2:
         ab:ea:ac:ad:58:51:6d:75:4b:1a:24:85:18:8d:c3:39:32:cd:
         7c:f2:56:e8:c9:22:09:f3:f2:81:f6:53:57:5b:28:b1:02:9b:
         d9:93:f1:c4:12:d0:50:9d:63:a3:32:21:7e:b3:8c:b4:f7:a2:
         7f:49:f4:90:12:60:f2:d1:1b:00:05:8a:eb:67:8b:d2:10:be:
         0d:23:cf:2a:64:f2:5b:b0:ec:ad:ec:c8:9e:7d:10:bc:a6:78:
         e5:95:d2:cf:ed:64:d0:8c:d6:df:19:bb:85:80:fa:b2:e2:b3:
         e8:b4:b5:d6
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUBzK/vnPIHbIyxoRJzomFKy7P6kcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MzAwODM5MDZaFw0yNDA2MjgwODQ0MDZaMDMxMTAvBgNV
BAMTKEY5RENGRTE4QTMyMzkxMEJDMEVDRkM2NTMxNjNFNDMxQzExNjFGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20qT7m6pazYvW2RI4MGO7JpSx
ZTXwG7JIe1aZDY038fkgbpteMw8DhbQpKZRoJXZqxDBrOEdFLBHASXqtw1s6XG9M
ynuCkJc06NfIgXTjucyEStKNrv5gVOe/cf5VHOw2YpaeSuZpT3VURwQUJpIw/5AM
P3FNeppuymfG0s+R9tgDHeEHcFokuci7w5BJ87pfhGZk0Tu4bAuVCwqjxEZc0EUf
ui+yFTr4IXW33PKUN3RmtyKWMrQG4HsGnMyqChgRJIJUeX1xFJLnHIXwpLX6gFN7
w4Ur5k2d+u6rS2hLnBMqK1ugCfYsLXkKiOVWsyhuRnfyUcdghwnbwTOzKut1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT53P4YoyORC8Ds
/GUxY+QxwRYfOzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80aU1tcEpBYTI5dXpza2luZ040Mm5qdjVNZDdVWkIzclNp
bUEya1lyRjRSVi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80aU1tcEpBYTI5dXpza2luZ040Mm5qdjVNZDdVWkIzclNp
bUEya1lyRjRSVi8wL0Y5RENGRTE4QTMyMzkxMEJDMEVDRkM2NTMxNjNFNDMxQzEx
NjFGM0IubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAo8AiDANBAIAAjAHAwUA
KAQpYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEB0swDQYJKoZIhvcNAQELBQAD
ggEBAK934suIf6/WOlpfGFWr6D26tEzQAi3cIC2aITcm3AwbIKKEd84pdSdk3k8t
Yvq755ZPKpBq5aChpzNS7jrpcxrSNmNO7ckWU4FnLmSzAQ/G4sW3arWtlJ7LwqOk
gRbSQ9WETMKr6oRPpcHARNsxdapjizU48bhJzoGo7tqibuqojr0L3VDLXD+sDHnE
cRnN8qvqrK1YUW11SxokhRiNwzkyzXzyVujJIgnz8oH2U1dbKLECm9mT8cQS0FCd
Y6MyIX6zjLT3on9J9JASYPLRGwAFiutni9IQvg0jzypk8luw7K3syJ59ELymeOWV
0s/tZNCM1t8Zu4WA+rLis+i0tdY=
-----END CERTIFICATE-----