Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer
File:                     0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.cer (raw, json)
Hash identifier:          U9XDDCwH/AlAcfhPXMk//3k4idgpXw4yXix2uDea3E8=
Subject key identifier:   0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AB083651DDF3EF1C9D9A08DB5B49FADF688184A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 14:49:55 +0000
Certificate not after:    Mon 17 Feb 2025 14:54:55 +0000
Subordinate resources:    AS: 265937
                          IP: 164.163.28.0/22
                          IP: 2804:4024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b0:83:65:1d:df:3e:f1:c9:d9:a0:8d:b5:b4:9f:ad:f6:88:18:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 14:49:55 2024 GMT
            Not After : Feb 17 14:54:55 2025 GMT
        Subject: CN=0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:8f:5e:26:5b:b5:35:0d:85:14:50:96:fd:
                    77:d3:1f:65:71:1e:62:70:62:68:01:62:b8:21:83:
                    21:63:33:31:b0:43:8d:a8:64:5e:a3:d6:c4:4c:db:
                    f3:a3:77:71:20:21:3c:59:c9:74:8e:98:f7:7f:8e:
                    94:71:6a:c0:59:53:cf:ba:2b:3d:39:50:ec:a2:c3:
                    07:05:37:f1:b7:2c:1d:f4:93:3f:13:6d:3b:45:96:
                    fa:25:79:e0:dc:0d:cb:d7:b8:11:b1:99:fa:48:2c:
                    6d:5d:f2:20:4a:3c:f4:cf:45:7b:91:2a:b2:ac:4b:
                    73:57:52:2f:1c:98:30:eb:f3:26:8a:a5:d0:64:b5:
                    e2:b4:34:09:d4:11:73:d6:57:e0:14:b4:11:27:2f:
                    fa:2e:01:45:ac:1d:78:2d:a1:ce:6c:7a:0f:fb:e2:
                    7f:34:ae:47:96:e7:5a:43:59:f0:3a:79:86:b5:14:
                    89:f7:4a:42:44:14:58:ab:57:d2:2e:72:c5:05:97:
                    5f:6c:7f:33:2a:5f:dc:39:3d:e7:ba:31:37:f4:b5:
                    c3:f2:47:a7:95:d6:0b:af:3d:09:77:c9:ac:42:34:
                    f4:9f:58:20:7e:92:a5:83:f6:7e:b5:b9:2e:3b:8d:
                    3f:44:60:c2:35:22:a2:71:9e:ce:f6:c0:bf:3d:01:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:49:84:FF:BE:02:3C:CC:1B:7F:A4:F3:9E:F6:B2:8B:D4:02:92:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/0/0E4984FFBE023CCC1B7FA4F39EF6B28BD40292F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.28.0/22
                IPv6:
                  2804:4024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265937

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:ce:63:5f:48:72:67:a4:c9:07:5a:6b:39:51:b3:08:fb:
         57:36:2a:0f:0a:aa:67:f5:99:6a:c5:c2:dd:f3:08:73:b8:9b:
         01:1a:4d:20:11:7f:ea:b2:d9:9e:0a:01:41:93:3f:be:ec:77:
         ff:8d:11:a6:c1:c9:02:de:fc:3d:13:0d:a4:18:ae:b2:5e:d8:
         51:a5:a7:9c:6f:64:7d:c2:10:7a:1b:49:72:76:2c:0b:f5:d5:
         aa:3f:74:a4:14:b5:14:a0:2d:66:be:8b:23:4c:cd:d7:9c:f6:
         95:8d:69:71:bd:1e:6e:ce:77:a3:38:bc:27:78:18:66:4b:b6:
         28:10:e1:ba:5a:e8:f2:80:f3:26:74:d4:9d:42:0e:0f:97:1a:
         f7:f0:92:9b:7d:75:12:54:80:85:59:e1:27:d0:6d:e5:27:0d:
         3d:a9:39:5f:84:38:35:d7:79:b5:d3:cd:d0:31:4c:6e:a1:f9:
         7d:8a:69:82:d5:b3:1f:b7:bb:66:47:62:73:b6:cc:b4:bd:69:
         18:94:92:24:33:b3:1c:8a:96:76:18:37:ec:97:ef:52:ba:cb:
         f6:96:58:0a:8b:44:38:50:6e:45:6a:d2:88:97:55:d7:94:8e:
         84:1e:67:bc:95:4d:f9:bd:b4:26:7c:de:13:1e:24:97:15:5c:
         ed:47:37:77
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWrCDZR3fPvHJ2aCNtbSfrfaIGEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTkxNDQ5NTVaFw0yNTAyMTcxNDU0NTVaMDMxMTAvBgNV
BAMTKDBFNDk4NEZGQkUwMjNDQ0MxQjdGQTRGMzlFRjZCMjhCRDQwMjkyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqo9eJlu1NQ2FFFCW/XfTH2Vx
HmJwYmgBYrghgyFjMzGwQ42oZF6j1sRM2/Ojd3EgITxZyXSOmPd/jpRxasBZU8+6
Kz05UOyiwwcFN/G3LB30kz8TbTtFlvoleeDcDcvXuBGxmfpILG1d8iBKPPTPRXuR
KrKsS3NXUi8cmDDr8yaKpdBkteK0NAnUEXPWV+AUtBEnL/ouAUWsHXgtoc5seg/7
4n80rkeW51pDWfA6eYa1FIn3SkJEFFirV9IucsUFl19sfzMqX9w5Pee6MTf0tcPy
R6eV1guvPQl3yaxCNPSfWCB+kqWD9n61uS47jT9EYMI1IqJxns72wL89AZSlAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOSYT/vgI8zBt/
pPOe9rKL1AKS8TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yblFxN3FmTDFmNGZqYVU0anhUN3ZUNlkya2FtbTFwMmt0
MmtYekNvNnBBMy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMm5RcTdxZkwxZjRmamFVNGp4VDd2VDZZMmthbW0xcDJr
dDJrWHpDbzZwQTMvMC8wRTQ5ODRGRkJFMDIzQ0NDMUI3RkE0RjM5RUY2QjI4QkQ0
MDI5MkYxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKkoxwwDQQCAAIwBwMF
ACgEQCQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA7RMA0GCSqGSIb3DQEBCwUA
A4IBAQAhKs5jX0hyZ6TJB1prOVGzCPtXNioPCqpn9ZlqxcLd8whzuJsBGk0gEX/q
stmeCgFBkz++7Hf/jRGmwckC3vw9Ew2kGK6yXthRpaecb2R9whB6G0lydiwL9dWq
P3SkFLUUoC1mvosjTM3XnPaVjWlxvR5uznejOLwneBhmS7YoEOG6WujygPMmdNSd
Qg4Plxr38JKbfXUSVICFWeEn0G3lJw09qTlfhDg113m1083QMUxuofl9immC1bMf
t7tmR2Jztsy0vWkYlJIkM7McipZ2GDfsl+9Susv2llgKi0Q4UG5FatKIl1XXlI6E
Hme8lU35vbQmfN4THiSXFVztRzd3
-----END CERTIFICATE-----