Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer
File:                     088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.cer (raw, json)
Hash identifier:          Chmuq9Y4X7jgjYPi90zA0DZU7QifW0F+Oebg8vrzuss=
Subject key identifier:   08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62D88D169BA852F57ED8AD73305BD5153EB2731C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 02:32:16 +0000
Certificate not after:    Wed 09 Apr 2025 02:37:16 +0000
Subordinate resources:    AS: 270466
                          IP: 200.106.136.0/22
                          IP: 2804:6c68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:8d:16:9b:a8:52:f5:7e:d8:ad:73:30:5b:d5:15:3e:b2:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 02:32:16 2024 GMT
            Not After : Apr  9 02:37:16 2025 GMT
        Subject: CN=088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:73:52:27:30:e3:d6:7f:75:1c:6b:1b:66:
                    19:b0:3e:84:f9:0b:b8:7a:e6:48:f3:14:2c:ef:2d:
                    37:75:ba:14:c6:65:8a:e2:4f:39:0c:af:3a:8d:15:
                    4e:04:35:7e:2c:42:04:50:82:1f:a1:0f:f4:d2:1d:
                    a7:70:ad:83:cf:62:c1:9d:b0:33:39:be:91:c7:dd:
                    94:9b:31:93:53:f8:63:e1:a6:52:f8:0c:9f:81:0a:
                    44:a1:a5:e4:02:75:f4:2d:c1:f2:e1:71:75:dd:64:
                    17:f4:4b:7a:d5:01:79:33:e8:35:95:5e:87:85:f4:
                    88:31:1e:bb:f8:92:65:bd:1f:7c:e1:c5:79:6b:ee:
                    f4:4a:b6:ce:88:3d:cd:6e:2b:4a:bc:5e:f2:c6:de:
                    e2:aa:e8:7b:e1:71:ba:89:c7:fa:49:6a:e7:56:4e:
                    1d:2e:64:92:21:ab:7c:53:96:54:92:94:14:c4:0f:
                    ad:b3:d8:ef:7d:44:9c:17:0f:19:0a:01:7c:04:1f:
                    05:70:4d:b4:2a:19:ed:e6:62:b5:63:bc:b0:7c:d2:
                    fb:af:9e:1f:2e:4c:17:00:c4:ae:c1:12:45:9f:e1:
                    51:74:e4:95:e2:3e:9a:1a:76:89:56:ab:56:74:f0:
                    39:de:09:ed:df:94:73:87:90:cf:5f:a8:22:d3:ae:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:8F:5B:84:BD:C5:7F:A6:2F:17:69:CA:CB:1C:DE:D1:DF:9B:AB:B9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/0/088F5B84BDC57FA62F1769CACB1CDED1DF9BABB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.136.0/22
                IPv6:
                  2804:6c68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270466

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:e5:68:93:fd:33:9d:14:f7:3e:ea:41:a9:6b:7a:c0:7b:
         f9:b5:f9:c4:3f:4d:39:ea:67:f5:ab:74:60:4f:98:97:94:3f:
         a0:64:5c:3e:51:66:f3:4b:1a:95:ae:77:db:28:3b:3a:cf:43:
         58:2d:1b:50:e2:dd:ff:6d:3e:2c:38:7c:34:51:ab:b9:1c:77:
         db:75:27:a7:a2:6b:50:f9:30:7e:53:0d:5d:1c:cd:08:49:b0:
         15:c9:10:3a:8d:7d:82:58:51:ab:6c:f4:75:06:62:41:ea:7b:
         0c:6f:38:ce:38:60:6a:8e:0e:f0:84:38:79:2f:ec:d3:04:cf:
         a0:6e:fe:ce:a2:98:bd:4f:94:c3:83:29:19:99:9b:26:58:45:
         5f:72:35:99:e4:ce:1e:9f:46:29:4c:82:c3:31:0a:57:07:78:
         67:f1:b7:e4:52:1b:6f:6c:bd:8b:19:bb:5f:c8:f5:07:b4:c3:
         6a:6e:f3:2a:35:d6:ed:d3:c7:4d:14:4f:d4:42:63:0c:5d:07:
         b2:34:a3:51:1a:0c:44:e9:49:0a:29:11:32:b4:59:c4:ef:bd:
         9b:6c:3a:a7:09:77:d8:25:4c:71:4a:31:b8:ef:4c:72:b9:b1:
         21:1e:c1:16:87:19:a4:61:ed:8a:74:e4:69:df:0b:bb:0d:c6:
         7f:81:e4:51
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUYtiNFpuoUvV+2K1zMFvVFT6ycxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTAwMjMyMTZaFw0yNTA0MDkwMjM3MTZaMDMxMTAvBgNV
BAMTKDA4OEY1Qjg0QkRDNTdGQTYyRjE3NjlDQUNCMUNERUQxREY5QkFCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajXNSJzDj1n91HGsbZhmwPoT5
C7h65kjzFCzvLTd1uhTGZYriTzkMrzqNFU4ENX4sQgRQgh+hD/TSHadwrYPPYsGd
sDM5vpHH3ZSbMZNT+GPhplL4DJ+BCkShpeQCdfQtwfLhcXXdZBf0S3rVAXkz6DWV
XoeF9IgxHrv4kmW9H3zhxXlr7vRKts6IPc1uK0q8XvLG3uKq6HvhcbqJx/pJaudW
Th0uZJIhq3xTllSSlBTED62z2O99RJwXDxkKAXwEHwVwTbQqGe3mYrVjvLB80vuv
nh8uTBcAxK7BEkWf4VF05JXiPpoadolWq1Z08DneCe3flHOHkM9fqCLTrjt3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIj1uEvcV/pi8X
acrLHN7R35uruTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EQTdNcXJEcEZ4OUprOE44a0dFWkRiMmppajh5Z3ZmWm5o
Q3R4WTZCVkF1YS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EQTdNcXJEcEZ4OUprOE44a0dFWkRiMmppajh5Z3ZmWm5o
Q3R4WTZCVkF1YS8wLzA4OEY1Qjg0QkRDNTdGQTYyRjE3NjlDQUNCMUNERUQxREY5
QkFCQjkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAshqiDANBAIAAjAHAwUA
KARsaDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIIIwDQYJKoZIhvcNAQELBQAD
ggEBAJAe5WiT/TOdFPc+6kGpa3rAe/m1+cQ/TTnqZ/WrdGBPmJeUP6BkXD5RZvNL
GpWud9soOzrPQ1gtG1Di3f9tPiw4fDRRq7kcd9t1J6eia1D5MH5TDV0czQhJsBXJ
EDqNfYJYUats9HUGYkHqewxvOM44YGqODvCEOHkv7NMEz6Bu/s6imL1PlMODKRmZ
myZYRV9yNZnkzh6fRilMgsMxClcHeGfxt+RSG29svYsZu1/I9Qe0w2pu8yo11u3T
x00UT9RCYwxdB7I0o1EaDETpSQopETK0WcTvvZtsOqcJd9glTHFKMbjvTHK5sSEe
wRaHGaRh7Yp05GnfC7sNxn+B5FE=
-----END CERTIFICATE-----