Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer
File:                     28857FFB1C89717722FA38DFF8D836C0ED8999DF.cer (raw, json)
Hash identifier:          rniD7BCJ+vktuwotivREsQ4nvrpKBY2CJsd+hJ+ehCA=
Subject key identifier:   28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5F6792D53AE17753DCFABA0CAE2D07DB90938CA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 02:05:13 +0000
Certificate not after:    Tue 14 May 2024 02:10:13 +0000
Subordinate resources:    AS: 272242
                          IP: 2804:8424::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:92:d5:3a:e1:77:53:dc:fa:ba:0c:ae:2d:07:db:90:93:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 16 02:05:13 2023 GMT
            Not After : May 14 02:10:13 2024 GMT
        Subject: CN=28857FFB1C89717722FA38DFF8D836C0ED8999DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:bb:b6:14:8d:d9:b1:0e:19:ba:4f:05:0a:
                    96:c2:5f:ce:b0:2a:08:0f:c0:0d:43:44:3e:94:76:
                    df:a8:14:66:d0:e9:de:a5:79:8e:4b:ae:23:7b:12:
                    dc:1b:68:66:e3:91:46:8b:50:8c:81:6c:83:f9:0e:
                    fd:2d:3c:f4:cb:5b:d3:84:f4:cb:ea:51:ad:93:85:
                    0c:da:20:aa:f8:67:37:15:04:0f:b2:b5:31:71:04:
                    a5:8c:e1:e3:70:2a:f7:ea:ce:22:50:e1:dd:01:d6:
                    76:90:8b:a3:b4:a9:66:f8:67:b0:39:62:13:ec:22:
                    64:46:bb:80:1f:65:b5:9b:33:b2:64:ea:10:78:19:
                    fe:8b:f1:a9:dc:4d:75:d2:96:69:48:e8:73:fc:66:
                    71:d1:89:13:7a:92:c2:08:92:45:61:9a:ab:68:bd:
                    b9:50:96:bc:67:d5:cb:2f:f8:42:8a:8f:ea:cd:db:
                    27:57:9f:76:82:28:91:35:83:7e:65:9b:d7:d8:fa:
                    3d:2a:25:93:1f:1b:1e:f0:e0:40:23:44:58:45:4f:
                    28:c2:3c:f5:81:00:03:ce:8d:a7:9d:ef:c4:73:53:
                    d1:29:7e:88:00:34:3b:63:aa:bb:27:46:76:9a:f5:
                    3b:36:ce:50:15:55:a0:fa:b5:63:ef:3c:3a:da:2d:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:85:7F:FB:1C:89:71:77:22:FA:38:DF:F8:D8:36:C0:ED:89:99:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qsW2WhpTs6xD1DrP4Fxf2Yee5otGfw47tHiGqEMHegr/0/28857FFB1C89717722FA38DFF8D836C0ED8999DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272242

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:cd:ae:7a:61:77:ed:07:3d:06:ba:d6:c9:c7:95:d8:82:
         e6:05:13:05:a2:11:c5:b7:a1:a0:88:e7:89:16:dd:5b:26:2d:
         06:6e:70:80:9d:1b:81:f4:76:e6:29:e7:64:e4:e5:62:d5:05:
         b7:f7:9f:3a:3c:6a:46:b3:1e:d9:0e:97:76:65:84:6e:48:49:
         ef:6b:de:7d:d6:13:ad:d0:66:0c:5b:f7:d4:e9:a7:90:c6:21:
         b3:c1:3e:0b:e4:fb:76:92:7f:55:a6:fa:8c:a0:65:97:0f:20:
         ec:a2:86:de:ec:80:c2:a7:1b:e9:21:20:cb:7a:3e:18:67:ad:
         e7:1c:d5:a4:d4:7f:2b:e4:75:25:a7:c7:b5:bc:fd:26:a2:8e:
         c3:7c:c1:bc:53:5c:16:f2:46:1d:1f:11:6f:fd:52:7e:9c:02:
         d4:fd:e8:5c:a0:fa:cd:c0:ff:84:2c:00:33:c1:6e:5b:40:e9:
         e8:62:99:e5:2f:6e:c8:4a:de:fc:cc:2b:57:42:31:b6:0d:dc:
         25:6f:33:1f:43:6a:5c:46:6b:0d:bb:5d:41:35:a3:d7:6d:69:
         11:f1:43:69:c7:52:21:1f:29:34:d8:8f:e7:4f:14:3a:23:5c:
         3b:86:18:c8:da:76:0b:07:8b:a4:e1:55:9c:b7:d2:3e:13:57:
         95:99:23:16
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUX2eS1Trhd1Pc+roMri0H25CTjKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MTYwMjA1MTNaFw0yNDA1MTQwMjEwMTNaMDMxMTAvBgNV
BAMTKDI4ODU3RkZCMUM4OTcxNzcyMkZBMzhERkY4RDgzNkMwRUQ4OTk5REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnLu2FI3ZsQ4Zuk8FCpbCX86w
KggPwA1DRD6Udt+oFGbQ6d6leY5LriN7EtwbaGbjkUaLUIyBbIP5Dv0tPPTLW9OE
9MvqUa2ThQzaIKr4ZzcVBA+ytTFxBKWM4eNwKvfqziJQ4d0B1naQi6O0qWb4Z7A5
YhPsImRGu4AfZbWbM7Jk6hB4Gf6L8ancTXXSlmlI6HP8ZnHRiRN6ksIIkkVhmqto
vblQlrxn1csv+EKKj+rN2ydXn3aCKJE1g35lm9fY+j0qJZMfGx7w4EAjRFhFTyjC
PPWBAAPOjaed78RzU9EpfogANDtjqrsnRnaa9Ts2zlAVVaD6tWPvPDraLVvTAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQohX/7HIlxdyL6
ON/42DbA7YmZ3zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zcXNXMldocFRzNnhEMURyUDRGeGYyWWVlNW90R2Z3NDd0
SGlHcUVNSGVnci8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zcXNXMldocFRzNnhEMURyUDRGeGYyWWVlNW90R2Z3NDd0
SGlHcUVNSGVnci8wLzI4ODU3RkZCMUM4OTcxNzcyMkZBMzhERkY4RDgzNkMwRUQ4
OTk5REYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEhCQwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCdyMA0GCSqGSIb3DQEBCwUAA4IBAQBrUc2uemF37Qc9
BrrWyceV2ILmBRMFohHFt6GgiOeJFt1bJi0GbnCAnRuB9HbmKedk5OVi1QW39586
PGpGsx7ZDpd2ZYRuSEnva9591hOt0GYMW/fU6aeQxiGzwT4L5Pt2kn9VpvqMoGWX
DyDsoobe7IDCpxvpISDLej4YZ63nHNWk1H8r5HUlp8e1vP0moo7DfMG8U1wW8kYd
HxFv/VJ+nALU/ehcoPrNwP+ELAAzwW5bQOnoYpnlL27ISt78zCtXQjG2DdwlbzMf
Q2pcRmsNu11BNaPXbWkR8UNpx1IhHyk02I/nTxQ6I1w7hhjI2nYLB4uk4VWct9I+
E1eVmSMW
-----END CERTIFICATE-----