Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer
File:                     FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.cer (raw, json)
Hash identifier:          Lb/4qPL+34zR+PLaW32FXn/Ut7I+qh5cwJMgpgt82/8=
Subject key identifier:   FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D5CA7943A0794E0ABB7435B56C58E61C1461B0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 18:47:23 +0000
Certificate not after:    Wed 29 May 2024 18:52:23 +0000
Subordinate resources:    AS: 271637
                          IP: 179.63.0.0/22
                          IP: 2804:7ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5c:a7:94:3a:07:94:e0:ab:b7:43:5b:56:c5:8e:61:c1:46:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 18:47:23 2023 GMT
            Not After : May 29 18:52:23 2024 GMT
        Subject: CN=FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b0:73:ce:33:76:38:81:2c:f2:21:6e:dc:99:
                    a8:28:10:32:a6:e0:f3:8a:e7:62:ff:59:b5:6e:00:
                    27:08:cd:91:18:20:ad:58:4b:b0:69:47:3e:72:15:
                    2a:f4:19:a9:04:3c:13:63:52:51:17:cb:20:49:31:
                    37:43:44:85:c3:50:fc:95:b4:6a:be:6c:c9:11:a0:
                    3d:6a:a4:32:17:ca:01:bf:b3:34:a8:ed:ae:f7:f2:
                    39:be:4b:04:a9:32:58:4b:73:09:9d:45:75:73:4b:
                    88:91:d5:48:a9:e9:d0:88:0c:0f:47:9a:87:d9:ce:
                    07:9d:94:cc:91:89:ff:39:dd:13:a6:8c:60:77:fa:
                    35:70:ed:b0:a4:59:27:a9:4e:f9:b9:d4:2f:48:0a:
                    be:c1:49:32:82:c7:b8:12:f7:61:05:6d:c8:40:49:
                    46:01:df:3f:eb:72:a9:8c:3e:c9:47:2c:63:18:eb:
                    03:f8:7f:cc:42:f8:61:55:b3:21:aa:46:c8:13:7b:
                    a1:95:0a:b0:d4:ba:c2:a5:4b:c5:c8:47:3d:2e:bb:
                    3c:55:5e:8d:30:9b:4b:96:e2:79:92:f6:e9:1a:c2:
                    e8:a1:b4:09:ab:e2:01:90:95:56:da:21:77:a6:26:
                    14:4a:dd:24:0f:e5:b4:81:45:56:51:2f:b3:6e:95:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:9D:2B:73:0F:68:F9:B5:3C:50:DD:3E:51:45:FC:3E:08:CF:84:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/0/FC9D2B730F68F9B53C50DD3E5145FC3E08CF84F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.0.0/22
                IPv6:
                  2804:7ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271637

    Signature Algorithm: sha256WithRSAEncryption
         34:99:6f:d3:26:68:53:f4:08:21:0f:25:00:7c:37:d9:09:56:
         64:ab:51:70:b3:07:14:44:45:ea:9e:be:6a:2b:62:bc:42:87:
         90:fa:5d:a5:92:6a:8f:0a:d1:ec:4f:c6:f9:2c:10:fb:d5:3b:
         dc:6d:49:4d:cf:29:3d:de:b1:24:dc:ff:49:6e:b9:53:16:5e:
         b6:80:d5:77:3e:97:cd:00:6d:92:1f:0e:87:b3:23:06:2f:6e:
         af:4f:e4:88:df:f2:38:b6:59:38:f7:f8:dd:83:c8:fa:bd:a8:
         39:06:0a:8b:8a:45:63:6e:ba:95:53:08:32:6f:f4:b7:66:13:
         68:9c:a4:f2:a4:4f:c9:60:6e:34:97:bc:34:cd:48:45:06:98:
         bf:38:c1:f2:1a:61:fc:d7:b9:ac:47:45:44:1e:18:39:2d:6a:
         a5:81:66:54:42:ef:c0:ef:71:b2:e4:06:b6:0c:66:4d:47:88:
         e5:6b:1e:6e:d6:14:b9:71:ab:17:5d:04:60:ed:57:56:16:02:
         26:85:6c:fe:03:03:bc:26:d6:51:6e:f8:2e:f0:3f:b5:10:f6:
         e6:df:10:f9:f2:52:a2:42:a4:b2:31:27:e7:d7:0c:76:d7:c3:
         47:04:d0:c0:6e:5a:71:a0:a8:fe:4b:3a:17:c6:c0:98:a6:5a:
         c5:0e:16:66
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTVynlDoHlOCrt0NbVsWOYcFGGwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MzExODQ3MjNaFw0yNDA1MjkxODUyMjNaMDMxMTAvBgNV
BAMTKEZDOUQyQjczMEY2OEY5QjUzQzUwREQzRTUxNDVGQzNFMDhDRjg0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4sHPOM3Y4gSzyIW7cmagoEDKm
4POK52L/WbVuACcIzZEYIK1YS7BpRz5yFSr0GakEPBNjUlEXyyBJMTdDRIXDUPyV
tGq+bMkRoD1qpDIXygG/szSo7a738jm+SwSpMlhLcwmdRXVzS4iR1Uip6dCIDA9H
mofZzgedlMyRif853ROmjGB3+jVw7bCkWSepTvm51C9ICr7BSTKCx7gS92EFbchA
SUYB3z/rcqmMPslHLGMY6wP4f8xC+GFVsyGqRsgTe6GVCrDUusKlS8XIRz0uuzxV
Xo0wm0uW4nmS9ukawuihtAmr4gGQlVbaIXemJhRK3SQP5bSBRVZRL7NulW4ZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT8nStzD2j5tTxQ
3T5RRfw+CM+E+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HaHR0M0hScnpWeVphWXhteWJHcXd5Zll4Z3pXbzFZbXBr
dkdEWENtVmZMNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HaHR0M0hScnpWeVphWXhteWJHcXd5Zll4Z3pXbzFZbXBr
dkdEWENtVmZMNC8wL0ZDOUQyQjczMEY2OEY5QjUzQzUwREQzRTUxNDVGQzNFMDhD
Rjg0RjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArM/ADANBAIAAjAHAwUA
KAR+pDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEJRUwDQYJKoZIhvcNAQELBQAD
ggEBADSZb9MmaFP0CCEPJQB8N9kJVmSrUXCzBxREReqevmorYrxCh5D6XaWSao8K
0exPxvksEPvVO9xtSU3PKT3esSTc/0luuVMWXraA1Xc+l80AbZIfDoezIwYvbq9P
5Ijf8ji2WTj3+N2DyPq9qDkGCouKRWNuupVTCDJv9LdmE2icpPKkT8lgbjSXvDTN
SEUGmL84wfIaYfzXuaxHRUQeGDktaqWBZlRC78DvcbLkBrYMZk1HiOVrHm7WFLlx
qxddBGDtV1YWAiaFbP4DA7wm1lFu+C7wP7UQ9ubfEPnyUqJCpLIxJ+fXDHbXw0cE
0MBuWnGgqP5LOhfGwJimWsUOFmY=
-----END CERTIFICATE-----