Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.cer
File:                     91BD15EB1756919E88F6D9C2E4F6F4F78D853320.cer (raw, json)
Hash identifier:          JBP1qh6E6KjKv3nF83RxSIG5yybvwY7eTYtXtc8tjnY=
Subject key identifier:   91:BD:15:EB:17:56:91:9E:88:F6:D9:C2:E4:F6:F4:F7:8D:85:33:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BE4ED55824E1EB58607511609D674848DEDBFF7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 18:00:28 +0000
Certificate not after:    Tue 23 Jan 2024 18:05:28 +0000
Subordinate resources:    AS: 61722
                          IP: 131.72.36.0/22
                          IP: 2804:1b54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e4:ed:55:82:4e:1e:b5:86:07:51:16:09:d6:74:84:8d:ed:bf:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 18:00:28 2023 GMT
            Not After : Jan 23 18:05:28 2024 GMT
        Subject: CN=91BD15EB1756919E88F6D9C2E4F6F4F78D853320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:47:6d:81:f1:71:d7:8d:bd:06:59:f0:ba:
                    a0:da:06:5a:24:62:23:d2:66:1f:28:7c:56:0b:c2:
                    a4:51:a1:d1:89:d8:c8:35:6e:cf:ef:7a:46:40:f0:
                    95:e5:1d:01:28:fe:fd:cb:71:4e:de:fd:19:87:0a:
                    bc:4c:7a:67:24:3a:d4:ad:59:fc:91:90:03:b5:08:
                    47:a1:2b:da:a1:6c:f6:6a:ae:1d:2e:3f:3a:68:0c:
                    1b:fa:04:92:a2:46:6b:bd:ed:e8:c3:ed:1e:9c:18:
                    e6:96:b7:dc:d0:03:f7:1e:8b:19:93:0b:29:45:65:
                    65:a9:45:5c:dc:2c:be:2d:d5:e2:3c:83:1e:48:de:
                    cb:f2:7a:09:5b:fd:60:1c:11:4d:d6:e0:d8:3b:cc:
                    b2:fb:16:13:b7:14:9c:25:1c:e3:a0:69:57:9e:7e:
                    19:e1:a8:e6:e5:f3:8a:d3:ad:76:db:34:31:de:d5:
                    5c:cf:c7:25:7b:01:2d:14:6c:a0:36:1a:e3:e1:2f:
                    3d:1e:f3:14:f8:51:09:53:15:ad:ed:06:87:fb:14:
                    2d:cd:a9:8b:cb:37:76:02:8c:c0:ac:13:5e:97:79:
                    00:36:51:40:f6:d5:96:f5:e6:f0:63:70:bd:37:02:
                    6b:cd:17:53:36:19:0b:77:56:6e:40:68:32:71:49:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:BD:15:EB:17:56:91:9E:88:F6:D9:C2:E4:F6:F4:F7:8D:85:33:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/91BD15EB1756919E88F6D9C2E4F6F4F78D853320.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.36.0/22
                IPv6:
                  2804:1b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61722

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:be:80:54:5f:62:75:07:b9:71:0a:87:24:72:fb:54:12:
         aa:b6:3b:63:fc:36:98:a2:76:f3:a3:56:dc:57:b3:0f:81:10:
         ee:3f:28:99:09:e5:ac:cb:f8:c8:e4:92:31:9d:44:63:da:a0:
         3c:7a:ff:a8:4c:42:82:0f:50:b9:e9:17:76:a8:0f:69:33:fb:
         cc:50:bb:50:ee:08:c3:50:38:e5:de:e9:38:86:f4:a7:f7:44:
         88:4e:2e:97:33:1e:e0:b9:15:ce:93:f3:a4:3b:6d:24:63:4f:
         9d:e0:c2:a0:a4:bf:08:f9:a5:b8:e4:09:eb:76:b1:5e:c2:d4:
         54:da:7e:2b:fa:db:83:e5:12:83:43:0c:35:2f:44:6b:b1:c5:
         39:c0:d2:30:62:6b:8b:fb:62:11:5d:90:04:b8:09:56:9f:3b:
         d1:12:0f:66:1f:fb:9f:25:f6:f6:11:67:f3:6f:6e:53:7a:7a:
         ec:09:68:20:04:eb:e8:59:dd:08:d3:ad:c1:69:80:c2:38:87:
         fa:3c:02:92:d0:c6:f7:46:fa:be:5e:8a:68:2c:5c:e8:6f:38:
         0b:3c:5e:b1:c2:d2:41:26:d0:a1:b8:d5:48:a4:64:06:25:46:
         97:ee:12:52:ea:9b:e9:9a:c4:23:11:ea:3e:21:da:d3:7d:f3:
         e1:3e:15:07
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUK+TtVYJOHrWGB1EWCdZ0hI3tv/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMjQxODAwMjhaFw0yNDAxMjMxODA1MjhaMDMxMTAvBgNV
BAMTKDkxQkQxNUVCMTc1NjkxOUU4OEY2RDlDMkU0RjZGNEY3OEQ4NTMzMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIkdtgfFx1429BlnwuqDaBlok
YiPSZh8ofFYLwqRRodGJ2Mg1bs/vekZA8JXlHQEo/v3LcU7e/RmHCrxMemckOtSt
WfyRkAO1CEehK9qhbPZqrh0uPzpoDBv6BJKiRmu97ejD7R6cGOaWt9zQA/ceixmT
CylFZWWpRVzcLL4t1eI8gx5I3svyeglb/WAcEU3W4Ng7zLL7FhO3FJwlHOOgaVee
fhnhqObl84rTrXbbNDHe1VzPxyV7AS0UbKA2GuPhLz0e8xT4UQlTFa3tBof7FC3N
qYvLN3YCjMCsE16XeQA2UUD21Zb15vBjcL03AmvNF1M2GQt3Vm5AaDJxSWCpAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRvRXrF1aRnoj2
2cLk9vT3jYUzIDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zektNYUZCUHh1NTF2UUZkcUVYR0pyU0ExRjJ1TlU3Tm5n
MXlzS1BrTEhYRC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zektNYUZCUHh1NTF2UUZkcUVYR0pyU0ExRjJ1TlU3Tm5n
MXlzS1BrTEhYRC8wLzkxQkQxNUVCMTc1NjkxOUU4OEY2RDlDMkU0RjZGNEY3OEQ4
NTMzMjAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAoNIJDANBAIAAjAHAwUA
KAQbVDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8RowDQYJKoZIhvcNAQELBQAD
ggEBAJmwvoBUX2J1B7lxCockcvtUEqq2O2P8NpiidvOjVtxXsw+BEO4/KJkJ5azL
+MjkkjGdRGPaoDx6/6hMQoIPULnpF3aoD2kz+8xQu1DuCMNQOOXe6TiG9Kf3RIhO
LpczHuC5Fc6T86Q7bSRjT53gwqCkvwj5pbjkCet2sV7C1FTafiv624PlEoNDDDUv
RGuxxTnA0jBia4v7YhFdkAS4CVafO9ESD2Yf+58l9vYRZ/NvblN6euwJaCAE6+hZ
3QjTrcFpgMI4h/o8ApLQxvdG+r5eimgsXOhvOAs8XrHC0kEm0KG41UikZAYlRpfu
ElLqm+maxCMR6j4h2tN98+E+FQc=
-----END CERTIFICATE-----