Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer
File:                     28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.cer (raw, json)
Hash identifier:          Thr4It+OaYDHS+YJ2qFV+TfgTkELN03IGLwxiPMkU/U=
Subject key identifier:   28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       743B16AD49A0E6E7B33DA65DEBF6144F03F5CC73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 12:42:33 +0000
Certificate not after:    Mon 17 Feb 2025 12:47:33 +0000
Subordinate resources:    AS: 268929
                          IP: 45.176.40.0/22
                          IP: 2804:5cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:16:ad:49:a0:e6:e7:b3:3d:a6:5d:eb:f6:14:4f:03:f5:cc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 12:42:33 2024 GMT
            Not After : Feb 17 12:47:33 2025 GMT
        Subject: CN=28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:7d:4f:0e:f4:2f:e8:e3:65:e2:22:87:21:
                    04:cf:16:2f:2d:93:2c:1c:04:4a:27:49:0a:73:9d:
                    bd:e3:2f:b7:61:35:53:e6:7a:60:42:ce:a7:01:a4:
                    aa:1d:b8:44:67:a3:26:0d:77:6d:e8:10:48:80:9c:
                    9f:40:1f:0a:e0:78:14:86:5e:b4:21:52:fe:f3:16:
                    0d:10:a5:1b:38:e9:db:55:a6:62:74:72:d6:eb:88:
                    c1:28:d9:88:e9:ab:93:0a:da:d2:8b:ff:97:f4:21:
                    8b:98:ad:7f:78:53:97:11:14:79:26:28:1d:32:59:
                    8c:04:74:a8:02:08:7f:c1:11:05:4d:1d:68:94:4a:
                    3f:2a:dd:26:5f:14:9e:14:f7:04:d9:c4:95:ce:8c:
                    08:ac:e5:7d:2f:3a:1f:e9:23:7d:eb:bf:73:49:1f:
                    44:e9:3b:cc:99:22:b5:99:72:62:39:31:56:5e:28:
                    b4:36:f2:10:17:c1:3e:69:92:2d:09:7c:fb:b9:c9:
                    a6:ef:7e:5a:17:3b:f6:3b:f7:85:58:fb:0a:5b:c9:
                    56:98:da:8c:7d:e9:22:fa:04:8c:55:b9:85:96:21:
                    6a:c4:b4:c6:84:8e:c8:f7:c9:3f:d4:0d:a3:24:02:
                    70:db:71:f1:a0:51:6e:12:ba:3e:2e:69:f8:95:70:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:FF:8E:C7:AF:22:22:03:EE:7F:9D:6C:62:AE:A1:4C:44:7F:BC:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/0/28FF8EC7AF222203EE7F9D6C62AEA14C447FBC2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.40.0/22
                IPv6:
                  2804:5cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268929

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:af:ab:68:1a:c0:48:be:32:eb:7c:a6:a2:f0:c6:b8:28:
         71:4c:eb:af:0c:d6:8f:46:ad:f5:de:94:27:fd:13:d6:64:d4:
         c9:31:39:29:2c:a8:ae:2c:68:6c:8f:54:dc:91:e0:e7:05:00:
         1c:f7:a7:46:6e:c1:b7:5f:53:67:a7:c9:67:b0:02:f2:cc:15:
         db:ee:d2:df:a6:04:01:5e:98:d6:8d:90:6c:b1:47:a8:48:31:
         69:12:c9:50:a9:d4:51:7b:4f:83:9d:d2:e1:c7:a2:47:ca:20:
         51:17:ff:f8:83:11:89:4f:82:47:a5:30:ae:ba:91:60:2e:0d:
         16:34:e7:fe:fc:ee:b3:61:cc:38:2d:82:d2:58:ae:43:bc:d2:
         b8:6e:5f:a6:a9:ff:43:06:f3:76:50:7e:ad:32:d9:c8:a6:99:
         c2:de:c0:ba:20:27:29:5f:b1:87:0b:b7:da:39:c5:a1:f0:0f:
         b6:33:ee:42:5c:b7:73:00:db:b4:91:28:74:42:36:ee:af:1c:
         46:4f:ab:df:21:dd:8a:96:ca:35:40:41:79:3d:a3:2a:b5:df:
         46:46:55:e1:bd:bd:a9:5d:70:54:59:31:96:ec:15:74:12:28:
         0a:35:f5:89:8a:62:09:bb:a4:31:ae:ce:d0:e5:78:bb:36:f2:
         ea:25:c1:1d
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUdDsWrUmg5uezPaZd6/YUTwP1zHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTkxMjQyMzNaFw0yNTAyMTcxMjQ3MzNaMDMxMTAvBgNV
BAMTKDI4RkY4RUM3QUYyMjIyMDNFRTdGOUQ2QzYyQUVBMTRDNDQ3RkJDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDih31PDvQv6ONl4iKHIQTPFi8t
kywcBEonSQpznb3jL7dhNVPmemBCzqcBpKoduERnoyYNd23oEEiAnJ9AHwrgeBSG
XrQhUv7zFg0QpRs46dtVpmJ0ctbriMEo2Yjpq5MK2tKL/5f0IYuYrX94U5cRFHkm
KB0yWYwEdKgCCH/BEQVNHWiUSj8q3SZfFJ4U9wTZxJXOjAis5X0vOh/pI33rv3NJ
H0TpO8yZIrWZcmI5MVZeKLQ28hAXwT5pki0JfPu5yabvfloXO/Y794VY+wpbyVaY
2ox96SL6BIxVuYWWIWrEtMaEjsj3yT/UDaMkAnDbcfGgUW4Suj4uafiVcK+BAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo/47HryIiA+5/
nWxirqFMRH+8LzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9LSzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZr
b1M5bm9aTWRoLzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9LSzVYa25Xb1dzZHJWZWl3Q1pHemluRnE2Qk5XMXZLTkZr
b1M5bm9aTWRoLzAvMjhGRjhFQzdBRjIyMjIwM0VFN0Y5RDZDNjJBRUExNEM0NDdG
QkMyRi5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLbAoMA0EAgACMAcDBQAo
BFzEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQagTANBgkqhkiG9w0BAQsFAAOC
AQEAIrSvq2gawEi+Mut8pqLwxrgocUzrrwzWj0at9d6UJ/0T1mTUyTE5KSyorixo
bI9U3JHg5wUAHPenRm7Bt19TZ6fJZ7AC8swV2+7S36YEAV6Y1o2QbLFHqEgxaRLJ
UKnUUXtPg53S4ceiR8ogURf/+IMRiU+CR6UwrrqRYC4NFjTn/vzus2HMOC2C0liu
Q7zSuG5fpqn/QwbzdlB+rTLZyKaZwt7AuiAnKV+xhwu32jnFofAPtjPuQly3cwDb
tJEodEI27q8cRk+r3yHdipbKNUBBeT2jKrXfRkZV4b29qV1wVFkxluwVdBIoCjX1
iYpiCbukMa7O0OV4uzby6iXBHQ==
-----END CERTIFICATE-----