Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer
File:                     28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.cer (raw, json)
Hash identifier:          5RnrZd6KXdX33kNQX1RUPDIcfIN709pUKfqCKiLlSWo=
Subject key identifier:   28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66655455D4F2E559ECD5491A3A75542353501B2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 18:35:13 +0000
Certificate not after:    Tue 01 Apr 2025 18:40:13 +0000
Subordinate resources:    AS: 262945
                          IP: 177.154.24.0/22
                          IP: 2804:e9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:65:54:55:d4:f2:e5:59:ec:d5:49:1a:3a:75:54:23:53:50:1b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 18:35:13 2024 GMT
            Not After : Apr  1 18:40:13 2025 GMT
        Subject: CN=28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:bb:b0:db:ce:0f:6d:73:f5:b1:cc:bb:22:
                    98:dc:2b:f0:70:4d:47:14:c9:39:67:1d:25:80:07:
                    d4:cc:da:45:40:f4:96:10:0a:ec:83:18:66:fb:8e:
                    29:22:00:5e:6f:5b:fc:0e:92:2a:b3:f9:3f:b0:a2:
                    bb:aa:5c:aa:ae:e2:3e:60:1a:2f:9c:11:99:62:4c:
                    7a:a0:d2:ff:30:d3:93:8c:66:cf:fb:f5:97:5c:83:
                    96:39:b0:40:b5:cc:ce:31:cb:9b:d5:cd:cc:bd:ba:
                    7f:70:d4:da:7a:9a:b1:90:50:fe:9a:ca:f6:2a:e3:
                    cb:7a:4e:14:85:9a:88:22:9b:ec:69:b0:fc:49:b1:
                    14:e8:21:02:1f:30:e9:02:95:c7:61:a1:2a:6e:48:
                    12:af:90:d5:16:8c:d4:bd:fa:2a:6b:7f:a0:b6:1f:
                    78:c0:1f:70:5a:33:8e:bb:b9:f1:cd:78:94:a8:f7:
                    8c:ef:ca:02:9b:cd:58:54:16:80:89:e5:6f:43:15:
                    26:07:22:58:ca:9e:0c:70:f0:1c:ac:ff:8d:1e:2a:
                    b1:88:76:b8:83:00:a5:fa:34:3e:60:f2:f0:87:53:
                    b5:0a:95:9f:ac:ae:50:20:64:7c:ca:77:f5:a9:33:
                    66:2e:9d:63:29:d5:6a:68:33:a4:ed:78:9b:27:b5:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:E0:59:6E:CD:47:44:C8:A4:FE:7F:3B:94:A6:12:BE:A4:82:D9:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/0/28E0596ECD4744C8A4FE7F3B94A612BEA482D9EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.24.0/22
                IPv6:
                  2804:e9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262945

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:69:09:8d:2b:70:18:cf:ab:49:4d:f3:89:89:df:8c:06:
         ec:7b:10:c5:f2:3c:3b:47:3a:60:da:da:e1:1c:b1:eb:5b:cb:
         f1:0f:8b:2f:a0:e9:fd:67:20:7e:7d:cf:7a:f8:21:d0:f7:c6:
         26:a1:af:e4:0b:60:ff:9f:cc:65:74:17:c9:aa:e8:d5:23:59:
         c6:63:63:75:15:de:34:a1:b3:f9:51:79:80:34:aa:93:23:e2:
         0d:02:d1:32:35:21:f0:ce:49:7b:ec:30:a1:3a:e0:fe:84:32:
         86:c9:f5:a0:48:c8:41:a8:dc:58:22:d1:f7:dd:7d:30:11:3a:
         18:14:3c:06:b2:52:9f:4a:80:5a:49:95:40:6a:68:b1:0e:18:
         b8:6e:ea:5b:43:fb:cc:fe:6e:db:9d:79:2f:d7:27:a7:0c:33:
         b7:9f:db:9d:d1:4a:67:f3:73:ff:c2:20:8a:e9:23:5e:dd:af:
         8d:16:53:d9:91:ab:b1:50:b1:0f:48:fd:87:9f:26:3a:e7:eb:
         db:e7:9f:11:7c:b4:40:fa:68:49:24:ef:b1:75:83:8e:32:58:
         d9:de:bd:3e:b4:24:52:55:e1:3e:fb:90:35:57:9d:1f:2b:78:
         a0:c4:9f:4e:f1:3f:2c:2b:69:0c:05:e2:55:9c:42:3c:8a:53:
         8f:8e:b1:dd
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUZmVUVdTy5Vns1UkaOnVUI1NQGyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDIxODM1MTNaFw0yNTA0MDExODQwMTNaMDMxMTAvBgNV
BAMTKDI4RTA1OTZFQ0Q0NzQ0QzhBNEZFN0YzQjk0QTYxMkJFQTQ4MkQ5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSLuw284PbXP1scy7IpjcK/Bw
TUcUyTlnHSWAB9TM2kVA9JYQCuyDGGb7jikiAF5vW/wOkiqz+T+woruqXKqu4j5g
Gi+cEZliTHqg0v8w05OMZs/79Zdcg5Y5sEC1zM4xy5vVzcy9un9w1Np6mrGQUP6a
yvYq48t6ThSFmogim+xpsPxJsRToIQIfMOkClcdhoSpuSBKvkNUWjNS9+iprf6C2
H3jAH3BaM467ufHNeJSo94zvygKbzVhUFoCJ5W9DFSYHIljKngxw8Bys/40eKrGI
driDAKX6ND5g8vCHU7UKlZ+srlAgZHzKd/WpM2YunWMp1WpoM6TteJsntaa1AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo4FluzUdEyKT+
fzuUphK+pILZ7DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IUFdNVDdyUHJLbmlSRTFCbzh5dVlGOGttd1VKS2V6dnpH
NjhDYlZxV0NQai8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IUFdNVDdyUHJLbmlSRTFCbzh5dVlGOGttd1VKS2V6dnpH
NjhDYlZxV0NQai8wLzI4RTA1OTZFQ0Q0NzQ0QzhBNEZFN0YzQjk0QTYxMkJFQTQ4
MkQ5RUMubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArGaGDANBAIAAjAHAwUA
KAQOnDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAyEwDQYJKoZIhvcNAQELBQAD
ggEBABqlaQmNK3AYz6tJTfOJid+MBux7EMXyPDtHOmDa2uEcsetby/EPiy+g6f1n
IH59z3r4IdD3xiahr+QLYP+fzGV0F8mq6NUjWcZjY3UV3jShs/lReYA0qpMj4g0C
0TI1IfDOSXvsMKE64P6EMobJ9aBIyEGo3Fgi0ffdfTAROhgUPAayUp9KgFpJlUBq
aLEOGLhu6ltD+8z+btudeS/XJ6cMM7ef253RSmfzc//CIIrpI17dr40WU9mRq7FQ
sQ9I/YefJjrn69vnnxF8tED6aEkk77F1g44yWNnevT60JFJV4T77kDVXnR8reKDE
n07xPywraQwF4lWcQjyKU4+Osd0=
-----END CERTIFICATE-----