Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
File:                     01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer (raw, json)
Hash identifier:          DS7E1wkqkWxwVswKJ6t4RHUrooMwVxx+QTEaWaZuSZU=
Subject key identifier:   01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       528A028C0DE732B8B1683E281EE3DC765950CD69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 23:01:05 +0000
Certificate not after:    Mon 21 Oct 2024 23:06:05 +0000
Subordinate resources:    AS: 267079
                          IP: 45.227.44.0/22
                          IP: 2804:47d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:02:8c:0d:e7:32:b8:b1:68:3e:28:1e:e3:dc:76:59:50:cd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 23:01:05 2023 GMT
            Not After : Oct 21 23:06:05 2024 GMT
        Subject: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:55:a4:c2:0a:e2:07:db:52:3a:1b:41:7d:
                    ed:09:18:3a:23:45:22:8f:ec:b6:93:1f:03:b8:f9:
                    3f:7d:e7:48:d8:5a:2b:54:27:d5:0d:bc:6a:77:7f:
                    83:9f:f5:90:4d:11:3e:6c:1e:3a:3e:25:ac:ea:98:
                    a0:75:64:70:c9:3b:7d:75:0c:a9:33:dc:af:d7:64:
                    30:6c:b8:e0:79:af:73:be:41:9a:1e:d4:14:39:59:
                    a2:53:c8:5b:ad:61:4d:25:bf:6c:9f:c9:05:15:4b:
                    e6:7d:02:7f:fc:1b:fb:b2:5a:ce:55:33:1e:90:c4:
                    7f:eb:d7:b9:81:b7:c4:de:8d:3c:83:0b:89:0b:5f:
                    e7:37:e8:14:2c:d9:35:9c:2e:fa:d6:c5:55:88:f7:
                    be:ac:06:6b:58:cc:94:c5:53:93:77:3a:06:8b:e7:
                    08:cc:7c:90:ab:7e:0f:61:bb:1e:5e:93:91:b0:fc:
                    5b:b4:37:b4:62:90:3f:f4:cf:3b:61:52:2a:2d:2c:
                    60:14:15:c5:53:d5:59:92:97:4d:b0:ba:2c:18:b2:
                    ce:d5:2c:15:a5:6f:2c:d8:f4:61:f1:dd:fb:e6:2b:
                    f5:b7:7d:f7:4d:2f:be:61:44:16:1a:28:97:4a:9f:
                    5c:b2:6d:b2:52:fe:2f:5e:97:9a:2c:8c:95:c7:3b:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/22
                IPv6:
                  2804:47d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267079

    Signature Algorithm: sha256WithRSAEncryption
         38:8b:3c:34:a5:a8:06:7f:34:db:e6:45:01:ae:8a:d0:9b:8a:
         d2:87:7b:21:f9:65:42:2b:82:c9:a1:8a:0c:20:88:5d:df:69:
         c7:38:46:01:62:71:0d:81:a7:3e:ba:2b:01:ed:5f:91:28:df:
         33:bc:25:89:60:a2:27:c7:83:4f:08:1c:33:a7:1d:a9:4a:3b:
         2b:38:82:73:4d:f5:c6:01:ef:91:44:1f:e9:d4:ff:96:69:7e:
         06:11:f9:12:ed:dd:10:65:41:0d:09:4d:b8:ae:28:76:3d:82:
         6b:1f:34:e9:f2:5b:4b:82:b9:8f:f2:a9:f7:e1:03:72:51:e4:
         9e:44:7e:63:89:08:e9:25:c3:b9:3e:97:d6:91:f6:40:f2:9e:
         7c:2f:4c:d0:40:0f:2e:d6:4e:ef:fb:da:93:29:0f:34:ef:4f:
         6f:53:ad:36:a2:ce:cb:a6:98:58:cc:c0:73:42:67:12:72:8b:
         e3:3f:01:32:8d:c3:09:92:79:ee:2e:cd:e2:23:ae:3c:70:74:
         ca:08:cb:d0:cb:4c:c6:23:1d:ec:61:0d:d9:5f:a0:37:8a:75:
         39:5f:6b:ed:41:d9:4b:8a:f9:d0:84:0c:6b:1c:40:4b:e9:aa:
         e2:b9:b8:ae:76:c3:81:81:5f:3e:10:e3:39:50:ea:7b:d9:41:
         b3:d3:a1:f5
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUUooCjA3nMrixaD4oHuPcdllQzWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEwMjMyMzAxMDVaFw0yNDEwMjEyMzA2MDVaMDMxMTAvBgNV
BAMTKDAxQjA2NDMzRTYxNDRDNkFBQTVENTYxODZFRUU3ODQwMTA1QTZGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbd1WkwgriB9tSOhtBfe0JGDoj
RSKP7LaTHwO4+T9950jYWitUJ9UNvGp3f4Of9ZBNET5sHjo+JazqmKB1ZHDJO311
DKkz3K/XZDBsuOB5r3O+QZoe1BQ5WaJTyFutYU0lv2yfyQUVS+Z9An/8G/uyWs5V
Mx6QxH/r17mBt8TejTyDC4kLX+c36BQs2TWcLvrWxVWI976sBmtYzJTFU5N3OgaL
5wjMfJCrfg9hux5ek5Gw/Fu0N7RikD/0zzthUiotLGAUFcVT1VmSl02wuiwYss7V
LBWlbyzY9GHx3fvmK/W3ffdNL75hRBYaKJdKn1yybbJS/i9el5osjJXHO41JAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBsGQz5hRMaqpd
Vhhu7nhAEFpvtTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82d2NVWjZ5Y0dNWjRYQ285ZjNReWR0SmlVR0ZqcHNyb3hj
aXVmV1pmZHJBdS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94
Y2l1ZldaZmRyQXUvMC8wMUIwNjQzM0U2MTQ0QzZBQUE1RDU2MTg2RUVFNzg0MDEw
NUE2RkI1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4ywwDQQCAAIwBwMF
ACgER9QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBNHMA0GCSqGSIb3DQEBCwUA
A4IBAQA4izw0pagGfzTb5kUBrorQm4rSh3sh+WVCK4LJoYoMIIhd32nHOEYBYnEN
gac+uisB7V+RKN8zvCWJYKInx4NPCBwzpx2pSjsrOIJzTfXGAe+RRB/p1P+WaX4G
EfkS7d0QZUENCU24rih2PYJrHzTp8ltLgrmP8qn34QNyUeSeRH5jiQjpJcO5PpfW
kfZA8p58L0zQQA8u1k7v+9qTKQ80709vU602os7LpphYzMBzQmcScovjPwEyjcMJ
knnuLs3iI648cHTKCMvQy0zGIx3sYQ3ZX6A3inU5X2vtQdlLivnQhAxrHEBL6ari
ubiudsOBgV8+EOM5UOp72UGz06H1
-----END CERTIFICATE-----