Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.cer
File:                     1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.cer (raw, json)
Hash identifier:          AoPV4h3W5KIeGjb/+DhysnGj4gkV9GnrwgpgDF4Wyb4=
Subject key identifier:   1E:2E:42:BF:80:43:6E:9A:3F:BC:6D:BB:ED:C0:16:55:69:12:AA:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       752FA82FE80627FEAC0F3B207F9FA274FD70993D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 16:55:38 +0000
Certificate not after:    Wed 19 Feb 2025 17:00:38 +0000
Subordinate resources:    AS: 268078
                          IP: 45.168.176.0/22
                          IP: 2804:57a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2f:a8:2f:e8:06:27:fe:ac:0f:3b:20:7f:9f:a2:74:fd:70:99:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 21 16:55:38 2024 GMT
            Not After : Feb 19 17:00:38 2025 GMT
        Subject: CN=1E2E42BF80436E9A3FBC6DBBEDC016556912AA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:7e:e7:f5:8e:2e:f0:c3:67:40:a2:f4:2a:
                    6a:51:3a:c5:6d:d7:ef:a0:0b:4c:2c:77:f1:3a:f6:
                    91:f2:ba:c8:1f:84:05:64:94:81:51:bd:06:9d:da:
                    42:5c:b6:de:24:dc:06:d9:b5:fe:6f:56:06:ae:66:
                    19:99:fe:eb:b6:d2:10:25:44:37:68:0e:4b:c7:82:
                    14:26:b5:d1:96:3f:68:77:07:62:5e:9e:fc:65:19:
                    1f:bc:51:e7:ab:b0:30:3b:b3:f7:76:e3:63:5d:2b:
                    c8:36:de:82:2e:fa:ff:7d:ce:f0:65:06:60:73:da:
                    96:71:36:90:09:39:9a:f5:7b:a0:c1:ec:5d:d1:26:
                    80:1e:c0:2e:ce:ef:b2:d7:54:0a:5e:38:4d:5b:49:
                    ec:f7:02:4e:17:6f:85:69:b7:84:af:fb:1e:3e:2e:
                    36:dd:00:21:b8:f0:6b:e2:70:8d:34:fc:4a:07:28:
                    45:c5:89:e1:2b:f2:a8:89:aa:e0:3e:97:35:c2:36:
                    cd:4b:ed:4d:f6:78:1d:5f:98:df:c7:70:67:d4:4d:
                    12:e3:55:ae:f6:1c:0e:96:10:18:f4:ee:de:92:cc:
                    32:6e:d3:a5:82:f0:50:f4:f1:ea:da:8c:3b:ed:56:
                    1f:3b:b6:25:b1:19:81:3c:0b:da:bc:88:aa:a0:47:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:2E:42:BF:80:43:6E:9A:3F:BC:6D:BB:ED:C0:16:55:69:12:AA:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGSPpTZpxKvYSXnvVpmyd2NBF4UwbzvH19sYSf8siSp/0/1E2E42BF80436E9A3FBC6DBBEDC016556912AA75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.176.0/22
                IPv6:
                  2804:57a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268078

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:02:1d:bd:be:cb:a9:8f:52:4f:a0:20:4a:69:c4:32:44:
         d1:df:8a:a6:30:da:61:e1:2c:ff:13:df:bc:32:0c:ed:86:90:
         1f:a9:f4:6b:ff:78:7c:30:7e:6c:fc:e3:7d:39:56:32:be:18:
         48:9e:9d:25:cf:cf:b2:96:72:73:c7:10:5b:07:f0:09:61:da:
         3e:4f:39:73:bd:cb:29:8c:6d:bb:d4:88:fe:aa:97:66:d0:ea:
         00:74:1c:c4:34:3e:36:43:6f:dd:75:3c:de:7d:86:a3:d8:b4:
         f0:d5:dd:17:22:78:91:e5:08:27:f7:67:27:40:9c:51:a5:cb:
         8b:f8:9f:39:6c:4d:a6:c4:df:79:b1:08:94:cf:78:47:81:bf:
         8d:38:fb:ec:9a:ab:06:df:35:1a:a1:8e:9a:27:e7:34:6c:5f:
         d8:b1:08:fd:91:c1:3f:e7:d3:bd:d2:94:9f:8a:2d:f7:c0:76:
         70:1a:08:11:64:c7:f4:21:a5:85:0f:c6:2c:5b:e2:2f:f4:2b:
         40:a0:69:ad:ad:74:28:f4:8d:ff:c6:30:16:b7:c9:57:15:79:
         de:67:a2:80:11:93:75:69:00:fa:d3:3b:c5:e4:db:52:31:51:
         8d:75:a7:87:c9:61:3b:44:0a:52:3b:c5:4a:5a:f8:fc:2a:83:
         0f:11:f8:64
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUdS+oL+gGJ/6sDzsgf5+idP1wmT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjExNjU1MzhaFw0yNTAyMTkxNzAwMzhaMDMxMTAvBgNV
BAMTKDFFMkU0MkJGODA0MzZFOUEzRkJDNkRCQkVEQzAxNjU1NjkxMkFBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHH7n9Y4u8MNnQKL0KmpROsVt
1++gC0wsd/E69pHyusgfhAVklIFRvQad2kJctt4k3AbZtf5vVgauZhmZ/uu20hAl
RDdoDkvHghQmtdGWP2h3B2JenvxlGR+8UeersDA7s/d242NdK8g23oIu+v99zvBl
BmBz2pZxNpAJOZr1e6DB7F3RJoAewC7O77LXVApeOE1bSez3Ak4Xb4Vpt4Sv+x4+
LjbdACG48GvicI00/EoHKEXFieEr8qiJquA+lzXCNs1L7U32eB1fmN/HcGfUTRLj
Va72HA6WEBj07t6SzDJu06WC8FD08erajDvtVh87tiWxGYE8C9q8iKqgR3SrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQeLkK/gENumj+8
bbvtwBZVaRKqdTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EdkdTUHBUWnB4S3ZZU1hudlZwbXlkMk5CRjRVd2J6dkgx
OXNZU2Y4c2lTcC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRHZHU1BwVFpweEt2WVNYbnZWcG15ZDJOQkY0VXdienZI
MTlzWVNmOHNpU3AvMC8xRTJFNDJCRjgwNDM2RTlBM0ZCQzZEQkJFREMwMTY1NTY5
MTJBQTc1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItqLAwDQQCAAIwBwMF
ACgEV6gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBcuMA0GCSqGSIb3DQEBCwUA
A4IBAQCCngIdvb7LqY9ST6AgSmnEMkTR34qmMNph4Sz/E9+8MgzthpAfqfRr/3h8
MH5s/ON9OVYyvhhInp0lz8+ylnJzxxBbB/AJYdo+TzlzvcspjG271Ij+qpdm0OoA
dBzEND42Q2/ddTzefYaj2LTw1d0XIniR5Qgn92cnQJxRpcuL+J85bE2mxN95sQiU
z3hHgb+NOPvsmqsG3zUaoY6aJ+c0bF/YsQj9kcE/59O90pSfii33wHZwGggRZMf0
IaWFD8YsW+Iv9CtAoGmtrXQo9I3/xjAWt8lXFXneZ6KAEZN1aQD60zvF5NtSMVGN
daeHyWE7RApSO8VKWvj8KoMPEfhk
-----END CERTIFICATE-----