Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/028B43AD112899168CE5212FE3FB097B8D664FD2.cer
File:                     028B43AD112899168CE5212FE3FB097B8D664FD2.cer (raw, json)
Hash identifier:          vYAfuitNbqY/aqUI7/OER2vPPtiG3DSy4mMP72NcCXQ=
Subject key identifier:   02:8B:43:AD:11:28:99:16:8C:E5:21:2F:E3:FB:09:7B:8D:66:4F:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FDF423E533BD03A92B31D10635DCADAA4CFBF1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/028B43AD112899168CE5212FE3FB097B8D664FD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 07:16:13 +0000
Certificate not after:    Tue 11 Mar 2025 07:21:13 +0000
Subordinate resources:    AS: 263252
                          IP: 168.197.228.0/22
                          IP: 189.201.232.0/21
                          IP: 2804:17cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:42:3e:53:3b:d0:3a:92:b3:1d:10:63:5d:ca:da:a4:cf:bf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 07:16:13 2024 GMT
            Not After : Mar 11 07:21:13 2025 GMT
        Subject: CN=028B43AD112899168CE5212FE3FB097B8D664FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:94:4f:aa:a8:32:d3:be:66:12:94:e5:1a:
                    6a:ac:2c:2b:f5:be:1f:3b:cd:03:08:d0:dc:0f:e1:
                    6a:1b:92:23:14:54:21:32:26:21:47:f3:bb:c7:5d:
                    bd:9d:54:13:4d:02:de:7b:42:d9:07:ac:fa:9e:6a:
                    e7:27:99:69:de:2d:1e:85:44:6e:26:83:db:72:d9:
                    9f:ae:33:44:f0:2b:a2:38:25:95:0b:04:6d:f7:a3:
                    a1:32:a4:95:a4:64:74:b1:35:97:d4:3d:19:f9:9c:
                    d8:a1:a5:3c:61:d5:ad:95:82:a1:8a:d3:3b:95:1b:
                    98:35:82:93:29:81:ac:d0:d2:66:4f:4a:c8:b1:e8:
                    c0:16:67:54:0b:b0:ba:84:73:cf:b7:5e:9a:89:92:
                    ad:0b:f0:7d:ff:ba:a5:37:90:82:77:fc:dc:ad:81:
                    d2:28:19:2f:77:87:dc:cd:a2:91:bb:5e:02:4c:6d:
                    18:89:32:8c:39:90:a3:80:98:44:1d:5c:0e:47:b1:
                    1a:99:d9:18:9a:a7:84:11:88:a6:b4:2e:9f:38:60:
                    62:cd:6d:e4:d5:d9:58:3d:75:bb:17:00:6a:6d:48:
                    cc:d2:68:69:16:0a:a5:53:2d:a2:78:68:c8:79:92:
                    c7:58:11:38:91:55:d9:a5:79:9b:14:08:c6:32:af:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:8B:43:AD:11:28:99:16:8C:E5:21:2F:E3:FB:09:7B:8D:66:4F:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/028B43AD112899168CE5212FE3FB097B8D664FD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.228.0/22
                  189.201.232.0/21
                IPv6:
                  2804:17cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263252

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:1c:25:62:49:f9:74:79:d6:c6:86:78:0a:18:ed:af:ab:
         b6:97:e4:2d:2f:97:15:1f:a9:f4:a2:62:4e:c1:20:7c:f0:af:
         83:ad:0f:c0:21:2c:aa:e8:cc:28:fd:5f:f1:8a:8e:ce:f7:96:
         bd:47:3f:81:e3:c3:2c:e1:d7:d2:4a:d3:e2:bb:39:f8:96:99:
         8b:5f:e3:21:8e:67:89:25:14:18:ad:6e:f4:c7:cb:8d:c5:2e:
         ba:7e:54:b0:32:5f:83:f8:3e:90:af:3b:f8:ba:75:0d:42:bd:
         c7:13:3c:5f:da:f4:9d:e3:1a:00:bc:4a:b6:ef:79:ea:5c:86:
         64:bb:88:8b:28:a8:f1:0a:e0:1c:b9:66:5e:b9:e6:91:9b:35:
         46:c8:20:28:a2:b9:8b:b9:d1:d1:75:77:c4:d9:3f:d6:d7:62:
         19:3a:83:bf:b4:aa:e3:84:e8:0d:52:19:37:62:77:0b:db:dd:
         23:9b:47:44:5c:f0:0c:bb:19:5a:b4:e1:0a:8c:c4:93:3b:16:
         31:f0:ad:d5:45:25:43:28:65:d2:a2:34:f4:a3:97:a7:07:5e:
         e8:8e:a2:30:43:49:67:84:73:87:92:d7:d1:97:4c:75:ec:1e:
         25:0c:26:e5:ce:74:4a:c3:41:a6:e5:dc:64:07:ac:d0:1d:eb:
         fd:0f:e8:f2
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUT99CPlM70DqSsx0QY13K2qTPvxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTIwNzE2MTNaFw0yNTAzMTEwNzIxMTNaMDMxMTAvBgNV
BAMTKDAyOEI0M0FEMTEyODk5MTY4Q0U1MjEyRkUzRkIwOTdCOEQ2NjRGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgtJRPqqgy075mEpTlGmqsLCv1
vh87zQMI0NwP4WobkiMUVCEyJiFH87vHXb2dVBNNAt57QtkHrPqeaucnmWneLR6F
RG4mg9ty2Z+uM0TwK6I4JZULBG33o6EypJWkZHSxNZfUPRn5nNihpTxh1a2VgqGK
0zuVG5g1gpMpgazQ0mZPSsix6MAWZ1QLsLqEc8+3XpqJkq0L8H3/uqU3kIJ3/Nyt
gdIoGS93h9zNopG7XgJMbRiJMow5kKOAmEQdXA5HsRqZ2Riap4QRiKa0Lp84YGLN
beTV2Vg9dbsXAGptSMzSaGkWCqVTLaJ4aMh5ksdYETiRVdmleZsUCMYyr8KHAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCi0OtESiZFozl
IS/j+wl7jWZP0jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ycW9zRUZIVlFiZVF2eThpa3RkTnpwV05IS2NCMXplVjRt
U2Q2RjFlYTFXTi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8ycW9zRUZIVlFiZVF2eThpa3RkTnpwV05IS2NCMXplVjRt
U2Q2RjFlYTFXTi8wLzAyOEI0M0FEMTEyODk5MTY4Q0U1MjEyRkUzRkIwOTdCOEQ2
NjRGRDIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAqjF5AMEA73J6DANBAIA
AjAHAwUAKAQXzDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBFQwDQYJKoZIhvcN
AQELBQADggEBAF5EHCViSfl0edbGhngKGO2vq7aX5C0vlxUfqfSiYk7BIHzwr4Ot
D8AhLKrozCj9X/GKjs73lr1HP4Hjwyzh19JK0+K7OfiWmYtf4yGOZ4klFBitbvTH
y43FLrp+VLAyX4P4PpCvO/i6dQ1CvccTPF/a9J3jGgC8SrbveepchmS7iIsoqPEK
4By5Zl655pGbNUbIICiiuYu50dF1d8TZP9bXYhk6g7+0quOE6A1SGTdidwvb3SOb
R0Rc8Ay7GVq04QqMxJM7FjHwrdVFJUMoZdKiNPSjl6cHXuiOojBDSWeEc4eS19GX
THXsHiUMJuXOdErDQabl3GQHrNAd6/0P6PI=
-----END CERTIFICATE-----