Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C369BFA51261164707FB6B5F75426A1F466648D.cer
File:                     1C369BFA51261164707FB6B5F75426A1F466648D.cer (raw, json)
Hash identifier:          MozDbeRiU6icDr17fGsjymL5RM9YnKnjETHBuHCOgds=
Subject key identifier:   1C:36:9B:FA:51:26:11:64:70:7F:B6:B5:F7:54:26:A1:F4:66:64:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FC9A68AF07F4AC7F20610FED98E655820DF9CB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1C369BFA51261164707FB6B5F75426A1F466648D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 16:41:20 +0000
Certificate not after:    Thu 27 Mar 2025 16:46:20 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/22
                          IP: 2804:6060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c9:a6:8a:f0:7f:4a:c7:f2:06:10:fe:d9:8e:65:58:20:df:9c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 16:41:20 2024 GMT
            Not After : Mar 27 16:46:20 2025 GMT
        Subject: CN=1C369BFA51261164707FB6B5F75426A1F466648D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:6a:16:1e:7d:41:c6:f3:3f:4d:b5:f8:4a:
                    d3:90:6c:b9:96:81:00:a6:e2:6a:0b:f4:9f:08:54:
                    3d:f8:fa:01:ed:f5:6e:13:35:72:61:29:02:0b:3f:
                    e1:33:60:3c:27:7d:7c:59:e8:27:12:9b:89:3e:c0:
                    ce:a2:e4:e6:05:d4:8f:65:b9:13:ad:a7:d6:a9:6c:
                    2e:a5:17:fa:bb:45:49:f9:1a:69:0a:71:41:c1:31:
                    6e:7b:4e:e2:67:0c:f8:97:48:cc:69:d6:d5:62:4d:
                    3b:b7:22:71:b4:c3:d5:6b:72:75:17:6a:ed:88:b7:
                    34:a7:da:3f:45:8b:4a:19:e3:b5:c0:83:0d:f7:1a:
                    54:f8:8e:68:a8:b0:c2:09:24:61:2f:b5:b4:9c:51:
                    9a:74:7e:45:cf:0d:72:62:3f:7d:c0:e7:6d:53:d9:
                    c8:ed:c3:41:97:12:c9:e0:b5:ed:19:8e:d3:9a:3e:
                    44:cc:0c:93:58:d4:2f:00:52:e4:e8:7a:f1:bd:15:
                    f0:4a:6e:19:68:9a:4c:cf:27:38:0b:5a:c3:08:48:
                    f0:4c:07:8a:96:2a:a1:1f:79:a0:f3:36:37:0f:20:
                    b6:ee:f2:ec:bc:52:a0:bb:b9:64:2f:19:ed:82:4e:
                    82:e0:f5:56:6a:2b:c3:be:6b:82:08:15:01:f7:83:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:36:9B:FA:51:26:11:64:70:7F:B6:B5:F7:54:26:A1:F4:66:64:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1C369BFA51261164707FB6B5F75426A1F466648D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:85:63:a6:a1:15:40:b9:21:23:50:ce:15:72:f5:5c:36:
         2e:6a:63:ae:73:23:22:1f:6d:f6:8e:f7:63:8e:68:39:21:f0:
         c7:4d:5a:d2:66:1b:9e:1e:81:67:9a:5e:f1:4b:2b:58:25:d2:
         7f:57:b9:d3:fd:eb:34:8d:71:39:64:a8:8a:58:ae:c0:09:82:
         2a:e2:36:2b:72:24:64:b2:d7:06:b3:64:f7:b5:ff:ef:1c:0e:
         b7:66:59:ab:a0:67:26:12:d8:df:02:8e:4e:75:9c:4f:84:c6:
         22:62:95:63:9d:72:76:e1:51:b9:7b:c6:fa:e0:08:ad:d1:13:
         4f:5b:86:27:4a:f4:4c:79:ae:22:a6:2f:27:29:98:51:09:64:
         2c:ae:18:d6:f2:eb:48:6d:8d:df:b8:8d:ff:73:87:df:35:61:
         26:dc:ab:d0:b9:28:0e:99:29:70:d1:4e:02:d3:ac:89:52:d2:
         0e:63:64:d1:91:5b:a6:b7:72:c4:ee:af:90:c7:95:e9:33:3a:
         da:22:33:92:11:63:d4:47:13:f1:c2:38:3a:7e:6c:42:67:8a:
         11:74:93:ff:07:96:bf:10:a5:5b:d8:04:00:43:2b:b2:86:9d:
         0b:7e:ac:76:72:39:f3:a6:93:a8:d8:3b:88:36:55:33:cc:6f:
         32:67:b3:5e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUL8mmivB/SsfyBhD+2Y5lWCDfnLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjgxNjQxMjBaFw0yNTAzMjcxNjQ2MjBaMDMxMTAvBgNV
BAMTKDFDMzY5QkZBNTEyNjExNjQ3MDdGQjZCNUY3NTQyNkExRjQ2NjY0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9z2oWHn1BxvM/TbX4StOQbLmW
gQCm4moL9J8IVD34+gHt9W4TNXJhKQILP+EzYDwnfXxZ6CcSm4k+wM6i5OYF1I9l
uROtp9apbC6lF/q7RUn5GmkKcUHBMW57TuJnDPiXSMxp1tViTTu3InG0w9VrcnUX
au2ItzSn2j9Fi0oZ47XAgw33GlT4jmiosMIJJGEvtbScUZp0fkXPDXJiP33A521T
2cjtw0GXEsngte0ZjtOaPkTMDJNY1C8AUuToevG9FfBKbhlomkzPJzgLWsMISPBM
B4qWKqEfeaDzNjcPILbu8uy8UqC7uWQvGe2CToLg9VZqK8O+a4IIFQH3g9txAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQcNpv6USYRZHB/
trX3VCah9GZkjTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80TjdOaVFBTVYxZ3l4cnl6a3lMMTc5NFhvV3hIcWhaaWNW
Z3pUN21iOHEzei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmlj
Vmd6VDdtYjhxM3ovMC8xQzM2OUJGQTUxMjYxMTY0NzA3RkI2QjVGNzU0MjZBMUY0
NjY2NDhELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIttRgwDQQCAAIwBwMF
ACgEYGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBtrMA0GCSqGSIb3DQEBCwUA
A4IBAQBsDYVjpqEVQLkhI1DOFXL1XDYuamOucyMiH232jvdjjmg5IfDHTVrSZhue
HoFnml7xSytYJdJ/V7nT/es0jXE5ZKiKWK7ACYIq4jYrciRkstcGs2T3tf/vHA63
ZlmroGcmEtjfAo5OdZxPhMYiYpVjnXJ24VG5e8b64Ait0RNPW4YnSvRMea4ipi8n
KZhRCWQsrhjW8utIbY3fuI3/c4ffNWEm3KvQuSgOmSlw0U4C06yJUtIOY2TRkVum
t3LE7q+Qx5XpMzraIjOSEWPURxPxwjg6fmxCZ4oRdJP/B5a/EKVb2AQAQyuyhp0L
fqx2cjnzppOo2DuINlUzzG8yZ7Ne
-----END CERTIFICATE-----