Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.cer
File:                     076E1DCF19E7E161675DB8D57DA07849D8049D3C.cer (raw, json)
Hash identifier:          M6rEd5UXkJjOf8UZewYk3kMCB4dWis7atXArdaTf9Ec=
Subject key identifier:   07:6E:1D:CF:19:E7:E1:61:67:5D:B8:D5:7D:A0:78:49:D8:04:9D:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33215AADBA6B44153608D2F32ED7D4B60493FBCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 11:44:25 +0000
Certificate not after:    Mon 10 Mar 2025 11:49:25 +0000
Subordinate resources:    AS: 266610
                          IP: 45.7.68.0/22
                          IP: 2804:3ea0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:5a:ad:ba:6b:44:15:36:08:d2:f3:2e:d7:d4:b6:04:93:fb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 11:44:25 2024 GMT
            Not After : Mar 10 11:49:25 2025 GMT
        Subject: CN=076E1DCF19E7E161675DB8D57DA07849D8049D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:60:25:2f:f6:65:f1:ac:ec:cc:1a:67:e6:
                    85:7c:33:0b:14:d3:fc:9b:a5:68:b5:e8:ab:c5:03:
                    cc:a3:84:0c:92:d5:d2:ed:05:4e:a1:1d:90:3b:87:
                    ab:50:5d:0c:2b:d3:f5:5c:1a:be:15:7d:0a:a5:b9:
                    bb:e0:ad:5f:25:4d:be:a5:f7:b1:36:e8:49:ad:51:
                    f4:8e:fc:fa:d3:5c:90:25:18:f1:4b:54:00:81:ed:
                    7a:59:26:ad:31:5b:b8:2d:3f:7d:09:35:63:5e:e6:
                    b4:6a:1a:6e:bf:de:dd:14:47:c4:60:80:67:5f:4c:
                    d0:74:4e:3d:ba:e8:24:30:50:e2:5f:e0:c1:15:b5:
                    de:43:85:02:71:4b:03:be:2a:da:cc:94:28:61:2e:
                    ac:f4:26:9f:45:7a:6e:9f:74:c2:b2:6b:81:8d:3c:
                    9d:b7:24:76:23:b5:b3:36:e7:dc:bd:46:f2:17:b3:
                    1e:60:97:a8:b8:a8:85:a5:84:f6:b5:91:10:76:e4:
                    d8:04:75:ae:f9:35:ab:23:49:d2:f0:17:04:22:45:
                    d2:b7:75:d7:9e:4c:92:0f:48:a0:c9:1e:ef:08:f4:
                    a2:50:aa:b7:3a:0f:e8:ee:0b:71:f0:11:58:ec:f0:
                    09:0b:32:b1:3d:5f:d1:4c:f5:07:ce:af:28:43:3b:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:6E:1D:CF:19:E7:E1:61:67:5D:B8:D5:7D:A0:78:49:D8:04:9D:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/076E1DCF19E7E161675DB8D57DA07849D8049D3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/22
                IPv6:
                  2804:3ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266610

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:4c:c1:8c:18:34:f9:04:69:f9:14:b9:0f:c4:ae:2a:a4:
         a1:fb:c1:3a:93:c2:64:bc:ce:e6:c3:15:63:62:7e:c0:01:15:
         6f:56:2d:57:19:64:5d:0f:17:07:6e:33:98:be:ac:c8:08:c8:
         12:85:9f:cc:e2:c9:fc:43:9f:71:7e:d8:88:00:ee:0a:ea:30:
         6f:1b:ce:6d:0c:46:b5:99:ad:e7:92:14:d5:07:ec:09:d5:c5:
         57:5f:33:f9:8d:c7:c7:6f:e6:e6:78:7d:25:55:d3:54:26:05:
         dd:da:9c:c3:0d:bf:a6:4e:40:9b:da:63:b8:d0:ac:4d:0a:c2:
         49:17:25:b7:9a:48:d3:b3:f6:a9:1f:5f:2d:13:fa:02:e4:f2:
         9a:6c:7f:39:ca:19:d1:95:aa:94:78:98:5f:30:8e:88:0b:df:
         51:c4:c6:79:7d:49:f9:d2:87:24:4a:1c:46:45:18:e6:f9:7a:
         1b:6b:41:99:74:3b:d3:7e:cc:72:80:21:4e:e9:47:54:fe:62:
         1b:1f:de:82:76:6b:ee:5c:ea:e8:fb:62:06:d2:d1:9a:cc:ad:
         e0:1a:ec:8d:bb:30:c1:61:4b:10:ab:ce:e1:6f:53:c6:53:bc:
         8d:b3:76:15:f2:e0:b4:88:c7:2f:a9:af:74:e9:0c:73:4b:b6:
         c3:75:cb:a1
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMyFarbprRBU2CNLzLtfUtgST+8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTExMTQ0MjVaFw0yNTAzMTAxMTQ5MjVaMDMxMTAvBgNV
BAMTKDA3NkUxRENGMTlFN0UxNjE2NzVEQjhENTdEQTA3ODQ5RDgwNDlEM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXGAlL/Zl8azszBpn5oV8MwsU
0/ybpWi16KvFA8yjhAyS1dLtBU6hHZA7h6tQXQwr0/VcGr4VfQqlubvgrV8lTb6l
97E26EmtUfSO/PrTXJAlGPFLVACB7XpZJq0xW7gtP30JNWNe5rRqGm6/3t0UR8Rg
gGdfTNB0Tj266CQwUOJf4MEVtd5DhQJxSwO+KtrMlChhLqz0Jp9Fem6fdMKya4GN
PJ23JHYjtbM259y9RvIXsx5gl6i4qIWlhPa1kRB25NgEda75NasjSdLwFwQiRdK3
ddeeTJIPSKDJHu8I9KJQqrc6D+juC3HwEVjs8AkLMrE9X9FM9QfOryhDO1TdAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHbh3PGefhYWdd
uNV9oHhJ2ASdPDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby85a2FadDVqVWpvMTJoTE1qZURCd2pLSjE1SmgyNVRnR21z
TGF6ZUFGQkpWYS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vOWthWnQ1alVqbzEyaExNamVEQndqS0oxNUpoMjVUZ0dt
c0xhemVBRkJKVmEvMC8wNzZFMURDRjE5RTdFMTYxNjc1REI4RDU3REEwNzg0OUQ4
MDQ5RDNDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItB0QwDQQCAAIwBwMF
ACgEPqAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBFyMA0GCSqGSIb3DQEBCwUA
A4IBAQAba0zBjBg0+QRp+RS5D8SuKqSh+8E6k8JkvM7mwxVjYn7AARVvVi1XGWRd
DxcHbjOYvqzICMgShZ/M4sn8Q59xftiIAO4K6jBvG85tDEa1ma3nkhTVB+wJ1cVX
XzP5jcfHb+bmeH0lVdNUJgXd2pzDDb+mTkCb2mO40KxNCsJJFyW3mkjTs/apH18t
E/oC5PKabH85yhnRlaqUeJhfMI6IC99RxMZ5fUn50ockShxGRRjm+Xoba0GZdDvT
fsxygCFO6UdU/mIbH96CdmvuXOro+2IG0tGazK3gGuyNuzDBYUsQq87hb1PGU7yN
s3YV8uC0iMcvqa906QxzS7bDdcuh
-----END CERTIFICATE-----