Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.cer
File:                     FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.cer (raw, json)
Hash identifier:          1JKlj2bWjpEO39sKi2vLCtVwF/Rxoqx/ENg+d2n4mik=
Subject key identifier:   FB:EB:41:8D:F0:26:8B:98:F4:8F:D5:0A:02:C2:4F:BA:8F:61:71:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       49DD6C7BE107297BAAC0788FDA70FB0ADCF91BA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 12:58:25 +0000
Certificate not after:    Tue 25 Jun 2024 13:03:25 +0000
Subordinate resources:    AS: 53139
                          IP: 168.197.204.0/22
                          IP: 187.109.80.0/20
                          IP: 2804:31d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dd:6c:7b:e1:07:29:7b:aa:c0:78:8f:da:70:fb:0a:dc:f9:1b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 12:58:25 2023 GMT
            Not After : Jun 25 13:03:25 2024 GMT
        Subject: CN=FBEB418DF0268B98F48FD50A02C24FBA8F6171EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:d5:c0:66:40:04:62:08:00:45:77:7d:82:
                    8b:fc:14:50:63:ed:1a:e7:73:e2:80:b0:6b:32:f3:
                    7a:25:0d:73:7e:90:28:b1:e9:f6:53:65:0d:86:a0:
                    25:75:b8:96:95:85:bd:31:04:93:ed:ed:78:87:d3:
                    87:91:81:e6:c3:d9:ff:92:dd:bc:71:30:eb:9c:bc:
                    5d:1a:4d:56:53:8a:30:79:10:f2:23:92:83:9c:ca:
                    a4:6f:dd:63:ba:06:9b:89:a3:c5:61:e7:de:d5:e4:
                    ee:8d:b2:70:11:58:7a:13:fa:07:b2:f2:ce:96:12:
                    13:3a:4c:cb:a0:5c:9e:1b:55:76:41:63:28:18:b1:
                    39:1b:5d:59:75:b6:d7:20:4c:bd:65:d3:49:32:c7:
                    e8:56:75:14:c0:ff:f5:77:e4:81:e9:51:a7:a4:76:
                    44:11:b9:ff:96:50:64:b7:24:9f:1f:9a:2e:7b:0c:
                    86:bb:02:0f:5a:45:96:1c:f7:97:02:14:cb:28:94:
                    bc:2e:1d:f4:20:d2:21:b4:f3:26:f8:80:77:43:ff:
                    82:89:20:00:4a:a5:dd:cd:9c:61:a2:a6:dd:70:0c:
                    f1:c1:26:e9:89:94:c9:8a:33:d7:ab:20:83:f7:38:
                    16:4c:85:05:cb:9d:aa:a5:7c:e3:6b:28:af:e9:ef:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:EB:41:8D:F0:26:8B:98:F4:8F:D5:0A:02:C2:4F:BA:8F:61:71:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FBEB418DF0268B98F48FD50A02C24FBA8F6171EA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.204.0/22
                  187.109.80.0/20
                IPv6:
                  2804:31d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53139

    Signature Algorithm: sha256WithRSAEncryption
         02:19:62:13:16:38:4d:21:ca:1b:b6:e0:e4:f1:98:d7:25:35:
         4a:47:bf:df:58:1e:26:d5:6b:81:95:48:01:5e:ff:bd:6a:e1:
         10:52:9c:17:16:f9:e8:dd:da:2f:29:30:62:ee:99:60:ab:12:
         68:03:d8:91:d5:c0:2a:d8:42:8f:bf:f2:35:be:b3:77:a5:ee:
         1b:69:31:04:be:97:42:91:ef:2c:81:a4:e8:d4:02:9b:ca:27:
         49:cc:47:0f:68:38:64:15:3c:1b:db:6f:4f:6b:ab:e4:7c:59:
         79:01:fd:ef:44:1c:8d:39:8e:2f:79:5b:2f:7b:75:ca:99:39:
         66:e4:67:c0:ec:f0:4b:97:ae:4e:e2:37:ec:2f:a7:95:48:33:
         4e:0f:32:19:d6:70:26:3d:57:f0:7c:62:40:cb:65:00:bc:69:
         09:16:2f:96:09:e5:d5:0a:c7:eb:9c:36:9a:80:52:03:9d:4d:
         be:18:24:78:b4:b6:b1:05:6e:48:51:ee:28:d0:1f:1b:e6:5e:
         ab:69:e8:23:b7:cc:01:a2:1b:38:6c:16:c2:71:ac:fd:cf:e0:
         db:86:93:88:1a:f0:7e:57:9f:7f:45:1b:86:f1:3b:ac:cc:5b:
         23:34:85:3e:92:98:40:fd:17:1b:30:26:59:20:2b:d6:0d:ab:
         8f:e5:d0:58
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUSd1se+EHKXuqwHiP2nD7Ctz5G6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA2MjcxMjU4MjVaFw0yNDA2MjUxMzAzMjVaMDMxMTAvBgNV
BAMTKEZCRUI0MThERjAyNjhCOThGNDhGRDUwQTAyQzI0RkJBOEY2MTcxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjtXAZkAEYggARXd9gov8FFBj
7Rrnc+KAsGsy83olDXN+kCix6fZTZQ2GoCV1uJaVhb0xBJPt7XiH04eRgebD2f+S
3bxxMOucvF0aTVZTijB5EPIjkoOcyqRv3WO6BpuJo8Vh597V5O6NsnARWHoT+gey
8s6WEhM6TMugXJ4bVXZBYygYsTkbXVl1ttcgTL1l00kyx+hWdRTA//V35IHpUaek
dkQRuf+WUGS3JJ8fmi57DIa7Ag9aRZYc95cCFMsolLwuHfQg0iG08yb4gHdD/4KJ
IABKpd3NnGGipt1wDPHBJumJlMmKM9erIIP3OBZMhQXLnaqlfONrKK/p77TrAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT760GN8CaLmPSP
1QoCwk+6j2Fx6jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EaWVkVTlCN002TnhYcjV4UWhKZGZ0MTdITnNqUVMzZGc2
aVVIckpaaVZBdi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2Rn
NmlVSHJKWmlWQXYvMC9GQkVCNDE4REYwMjY4Qjk4RjQ4RkQ1MEEwMkMyNEZCQThG
NjE3MUVBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoxcwDBAS7bVAwDQQC
AAIwBwMFACgEMdQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM+TMA0GCSqGSIb3
DQEBCwUAA4IBAQACGWITFjhNIcobtuDk8ZjXJTVKR7/fWB4m1WuBlUgBXv+9auEQ
UpwXFvno3dovKTBi7plgqxJoA9iR1cAq2EKPv/I1vrN3pe4baTEEvpdCke8sgaTo
1AKbyidJzEcPaDhkFTwb229Pa6vkfFl5Af3vRByNOY4veVsve3XKmTlm5GfA7PBL
l65O4jfsL6eVSDNODzIZ1nAmPVfwfGJAy2UAvGkJFi+WCeXVCsfrnDaagFIDnU2+
GCR4tLaxBW5IUe4o0B8b5l6raegjt8wBohs4bBbCcaz9z+DbhpOIGvB+V59/RRuG
8TuszFsjNIU+kphA/RcbMCZZICvWDauP5dBY
-----END CERTIFICATE-----