Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.cer
File:                     428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.cer (raw, json)
Hash identifier:          O1I2JhhBdSptjrlP+XoUKVgsag2N59fc3uOONKqNhS4=
Subject key identifier:   42:8A:79:E1:50:41:62:F3:A8:F4:6A:5C:7E:EC:41:8F:AA:C4:2B:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20459B7B7A913A6BECA1B7A346097CE8470FE5F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Mar 2024 19:13:05 +0000
Certificate not after:    Wed 26 Mar 2025 19:18:05 +0000
Subordinate resources:    AS: 266110
                          IP: 45.5.244.0/22
                          IP: 2804:3acc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:45:9b:7b:7a:91:3a:6b:ec:a1:b7:a3:46:09:7c:e8:47:0f:e5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 19:13:05 2024 GMT
            Not After : Mar 26 19:18:05 2025 GMT
        Subject: CN=428A79E1504162F3A8F46A5C7EEC418FAAC42B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:29:b1:a9:5a:5d:07:b9:92:0e:7e:42:6c:
                    5a:0e:fc:37:04:b4:09:95:a4:30:0c:07:11:0e:f5:
                    f7:e3:41:68:b7:4e:37:2e:28:88:2a:04:c4:bc:1d:
                    5d:8a:55:3b:b6:d8:cf:90:20:3b:37:ec:bd:e5:5d:
                    f3:7c:81:10:00:c2:60:12:a2:d2:28:ad:63:85:49:
                    4b:15:5d:4d:f5:65:4e:01:7c:dc:51:b2:78:f7:a7:
                    e5:f2:58:16:60:3d:57:e4:a0:c9:e9:5b:39:03:46:
                    9f:0f:03:82:94:93:48:c7:dd:3d:24:2a:fd:37:f4:
                    2e:66:17:ef:6b:5d:5d:b2:4f:55:e7:a8:5f:7a:5d:
                    fe:ef:35:9a:ed:d5:c3:5c:d5:1c:fa:2b:9b:01:fd:
                    51:e8:16:7d:2a:c4:4d:d4:65:62:90:33:39:12:9c:
                    b2:73:10:9a:28:09:6b:91:9e:54:3e:7a:52:e6:e0:
                    d7:2e:09:35:fa:72:b4:6f:f1:0f:64:10:c0:05:e8:
                    70:ec:fe:d6:77:a7:f0:a9:50:b9:92:66:7e:b9:b8:
                    2d:d7:92:ee:ff:e5:18:34:f1:38:4a:a1:08:bf:42:
                    fa:70:73:ba:78:16:35:e5:de:4c:d2:0e:d6:e1:65:
                    8a:58:d3:30:0a:a5:29:00:33:10:da:e6:44:61:8e:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:8A:79:E1:50:41:62:F3:A8:F4:6A:5C:7E:EC:41:8F:AA:C4:2B:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/428A79E1504162F3A8F46A5C7EEC418FAAC42B6F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.244.0/22
                IPv6:
                  2804:3acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266110

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:3b:23:39:ad:fc:7f:76:8f:ff:56:89:9c:64:5f:6c:b7:
         e5:29:ce:1e:fd:d3:77:12:cd:82:c4:e3:8d:75:f6:ad:05:79:
         39:4c:cf:b6:0f:ad:ea:07:f9:98:fb:3f:72:8f:b9:8c:fb:fd:
         2a:2d:fd:75:86:5d:aa:44:8a:c2:3c:f0:43:10:24:0f:65:fd:
         22:84:0f:69:f0:3d:0a:54:1b:f5:05:4c:da:82:e9:c4:ac:d3:
         b1:ee:bf:47:6f:39:d4:48:c1:68:4d:06:5a:1f:33:5e:8a:79:
         14:02:d8:b8:b1:84:aa:6b:4e:67:5e:ee:0e:d6:eb:14:33:55:
         95:bd:2e:91:46:56:ab:f2:18:b0:e5:d4:e4:21:4b:24:2f:49:
         ad:cf:5b:57:3e:56:62:b4:ea:ad:38:17:61:52:e4:cf:51:e7:
         50:9c:bb:a9:d1:97:9c:b4:9b:08:8e:51:c8:c3:be:a9:48:ee:
         50:ef:bc:82:43:03:50:5d:02:df:c9:a9:9f:a9:d4:86:09:03:
         6a:0e:d2:cd:d3:04:4c:1d:2d:4e:bb:a8:cc:5f:23:ef:26:ba:
         f1:d2:e9:44:a7:15:46:ac:21:08:d1:5a:1d:33:bf:8e:9f:2c:
         b7:30:5c:9a:d2:22:9b:c6:7e:c0:4b:90:36:99:4a:64:13:31:
         50:f3:5e:7e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIEWbe3qROmvsobejRgl86EcP5fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjcxOTEzMDVaFw0yNTAzMjYxOTE4MDVaMDMxMTAvBgNV
BAMTKDQyOEE3OUUxNTA0MTYyRjNBOEY0NkE1QzdFRUM0MThGQUFDNDJCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqymxqVpdB7mSDn5CbFoO/DcE
tAmVpDAMBxEO9ffjQWi3TjcuKIgqBMS8HV2KVTu22M+QIDs37L3lXfN8gRAAwmAS
otIorWOFSUsVXU31ZU4BfNxRsnj3p+XyWBZgPVfkoMnpWzkDRp8PA4KUk0jH3T0k
Kv039C5mF+9rXV2yT1XnqF96Xf7vNZrt1cNc1Rz6K5sB/VHoFn0qxE3UZWKQMzkS
nLJzEJooCWuRnlQ+elLm4NcuCTX6crRv8Q9kEMAF6HDs/tZ3p/CpULmSZn65uC3X
ku7/5Rg08ThKoQi/Qvpwc7p4FjXl3kzSDtbhZYpY0zAKpSkAMxDa5kRhjv6hAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRCinnhUEFi86j0
alx+7EGPqsQrbzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EZnZFRXNIWTFyU0RtN0d2eXplVWpiVVdiREg3MzJ3c2dx
dVRiRUM3Rm5rRy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3Nn
cXVUYkVDN0Zua0cvMC80MjhBNzlFMTUwNDE2MkYzQThGNDZBNUM3RUVDNDE4RkFB
QzQyQjZGLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBfQwDQQCAAIwBwMF
ACgEOswwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9+MA0GCSqGSIb3DQEBCwUA
A4IBAQCH0zsjOa38f3aP/1aJnGRfbLflKc4e/dN3Es2CxOONdfatBXk5TM+2D63q
B/mY+z9yj7mM+/0qLf11hl2qRIrCPPBDECQPZf0ihA9p8D0KVBv1BUzagunErNOx
7r9HbznUSMFoTQZaHzNeinkUAti4sYSqa05nXu4O1usUM1WVvS6RRlar8hiw5dTk
IUskL0mtz1tXPlZitOqtOBdhUuTPUedQnLup0ZectJsIjlHIw76pSO5Q77yCQwNQ
XQLfyamfqdSGCQNqDtLN0wRMHS1Ou6jMXyPvJrrx0ulEpxVGrCEI0VodM7+Onyy3
MFya0iKbxn7AS5A2mUpkEzFQ815+
-----END CERTIFICATE-----