Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.cer
File:                     DFBF57C6F9A11CBB0EE711B27866E30C49559F19.cer (raw, json)
Hash identifier:          ahvoVDPyAHt9iu+QwvPYhyvA3dcUT/DyA1hr3Uwe2WU=
Subject key identifier:   DF:BF:57:C6:F9:A1:1C:BB:0E:E7:11:B2:78:66:E3:0C:49:55:9F:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C4D6E109629F23B73E150A5FB836044838E3D60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 16:48:16 +0000
Certificate not after:    Thu 20 Mar 2025 16:53:16 +0000
Subordinate resources:    AS: 266549
                          IP: 160.238.192.0/22
                          IP: 2804:3db8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:6e:10:96:29:f2:3b:73:e1:50:a5:fb:83:60:44:83:8e:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 16:48:16 2024 GMT
            Not After : Mar 20 16:53:16 2025 GMT
        Subject: CN=DFBF57C6F9A11CBB0EE711B27866E30C49559F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:88:1b:ae:dc:ed:c0:0d:ec:3f:57:94:02:
                    63:4d:45:eb:af:5c:85:e1:e6:58:cb:d8:de:8d:6a:
                    c9:f6:7a:0a:b1:bf:74:1c:79:7a:0f:ec:f5:46:02:
                    8c:31:d2:4b:bb:01:6d:8b:af:e8:cf:bb:98:9d:8f:
                    01:cb:a7:88:8b:7d:03:6b:6f:7e:17:83:af:7c:87:
                    10:1b:f4:3a:35:f2:8f:bc:4b:00:3e:8e:3a:c2:8a:
                    0b:3a:f3:02:55:c6:5e:43:e9:78:9d:e5:04:d5:b0:
                    af:4f:c0:1c:5f:96:56:36:4b:3e:af:71:86:a3:1b:
                    81:5f:44:d0:98:3e:b5:b6:b2:dc:89:2b:82:3e:8e:
                    f6:13:42:55:01:12:5f:02:41:41:af:02:36:6a:82:
                    75:2d:2c:5f:84:56:dd:5c:7e:ef:fe:9b:43:27:f8:
                    a4:10:1d:95:5c:4c:15:96:f2:75:63:60:81:50:84:
                    53:2b:45:a9:76:77:22:17:44:0a:c5:d4:09:e9:8b:
                    63:c8:64:40:33:5a:91:c1:2c:fb:bf:30:b5:66:8c:
                    53:9f:8b:42:a8:be:1e:f7:04:a8:e0:9d:80:31:fe:
                    36:99:a2:48:65:ab:35:82:f0:3a:48:1c:fb:56:8c:
                    69:a0:90:8a:07:69:c9:a6:c2:b7:03:a3:85:28:7c:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:BF:57:C6:F9:A1:1C:BB:0E:E7:11:B2:78:66:E3:0C:49:55:9F:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/1/DFBF57C6F9A11CBB0EE711B27866E30C49559F19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.192.0/22
                IPv6:
                  2804:3db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266549

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:2a:64:8b:ed:e2:b2:47:3b:5f:dd:02:5a:08:8c:29:b0:
         c5:ef:79:f1:aa:81:56:bd:55:79:c9:40:66:26:e6:e8:07:28:
         06:d1:a1:a3:8a:44:6f:9d:30:08:0b:2f:e5:31:72:1f:44:d9:
         ab:09:c8:40:66:4b:58:95:e6:f6:e2:eb:a2:6e:13:ec:ae:36:
         5d:9d:cb:12:49:d8:13:83:97:7b:fa:3e:fd:03:50:8f:4d:e7:
         97:62:0e:3b:6c:da:15:d0:61:9c:7a:4d:d1:79:0c:34:9b:2d:
         99:b3:51:37:8b:5f:72:a9:12:99:cc:1a:26:c7:74:6b:75:81:
         56:a7:d5:6a:66:75:a2:b4:95:21:d0:d4:35:aa:13:36:0f:8b:
         c3:39:8e:69:3a:08:df:6f:ad:22:99:93:0a:8c:46:8d:4a:a3:
         58:35:25:fa:e3:2d:88:56:65:17:7b:da:72:c1:c6:0f:ce:4d:
         ff:f8:a4:8d:61:6a:1c:3e:ce:5c:36:b1:51:78:fc:99:f7:81:
         43:3f:db:eb:d4:fe:fe:6a:0e:33:81:4b:66:29:7b:d4:46:64:
         13:8b:05:68:47:36:ec:d7:5c:4e:45:aa:b1:0e:5c:46:db:17:
         6a:76:98:b1:73:b7:3d:95:10:13:f8:48:77:52:81:73:ae:e5:
         fd:dd:6e:e0
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIULE1uEJYp8jtz4VCl+4NgRIOOPWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjExNjQ4MTZaFw0yNTAzMjAxNjUzMTZaMDMxMTAvBgNV
BAMTKERGQkY1N0M2RjlBMTFDQkIwRUU3MTFCMjc4NjZFMzBDNDk1NTlGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sYgbrtztwA3sP1eUAmNNReuv
XIXh5ljL2N6Nasn2egqxv3QceXoP7PVGAowx0ku7AW2Lr+jPu5idjwHLp4iLfQNr
b34Xg698hxAb9Do18o+8SwA+jjrCigs68wJVxl5D6Xid5QTVsK9PwBxfllY2Sz6v
cYajG4FfRNCYPrW2styJK4I+jvYTQlUBEl8CQUGvAjZqgnUtLF+EVt1cfu/+m0Mn
+KQQHZVcTBWW8nVjYIFQhFMrRal2dyIXRArF1Anpi2PIZEAzWpHBLPu/MLVmjFOf
i0Kovh73BKjgnYAx/jaZokhlqzWC8DpIHPtWjGmgkIoHacmmwrcDo4UofHN9AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfv1fG+aEcuw7n
EbJ4ZuMMSVWfGTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bb21ob1FadW5lQkNxSnRWTU53VjZtQ1hCYmN6NWQ3WWRB
NVBibmJvdkpGQy8xMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Bb21ob1FadW5lQkNxSnRWTU53VjZtQ1hCYmN6NWQ3WWRB
NVBibmJvdkpGQy8xL0RGQkY1N0M2RjlBMTFDQkIwRUU3MTFCMjc4NjZFMzBDNDk1
NTlGMTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqDuwDANBAIAAjAHAwUA
KAQ9uDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEETUwDQYJKoZIhvcNAQELBQAD
ggEBAG2mKmSL7eKyRztf3QJaCIwpsMXvefGqgVa9VXnJQGYm5ugHKAbRoaOKRG+d
MAgLL+Uxch9E2asJyEBmS1iV5vbi66JuE+yuNl2dyxJJ2BODl3v6Pv0DUI9N55di
Djts2hXQYZx6TdF5DDSbLZmzUTeLX3KpEpnMGibHdGt1gVan1WpmdaK0lSHQ1DWq
EzYPi8M5jmk6CN9vrSKZkwqMRo1Ko1g1JfrjLYhWZRd72nLBxg/OTf/4pI1hahw+
zlw2sVF4/Jn3gUM/2+vU/v5qDjOBS2Ype9RGZBOLBWhHNuzXXE5FqrEOXEbbF2p2
mLFztz2VEBP4SHdSgXOu5f3dbuA=
-----END CERTIFICATE-----