Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.cer
File:                     2B459FB80D38F6E1C89A79735D843E8119304AE4.cer (raw, json)
Hash identifier:          xdGORu3bnfSwK2xR1kibh6Z2/KzJf/DnOI6Atj8Zw1s=
Subject key identifier:   2B:45:9F:B8:0D:38:F6:E1:C8:9A:79:73:5D:84:3E:81:19:30:4A:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D7E8917923C1590C4435780D0B0731AD56BF9DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 20:37:06 +0000
Certificate not after:    Mon 13 Jan 2025 20:42:06 +0000
Subordinate resources:    AS: 267208
                          IP: 45.230.200.0/22
                          IP: 2804:49e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7e:89:17:92:3c:15:90:c4:43:57:80:d0:b0:73:1a:d5:6b:f9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 20:37:06 2024 GMT
            Not After : Jan 13 20:42:06 2025 GMT
        Subject: CN=2B459FB80D38F6E1C89A79735D843E8119304AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:d7:06:12:3e:97:f1:99:49:6e:c0:fe:69:
                    0c:d0:3e:b7:5b:d2:8a:83:43:24:71:ad:b5:bd:4c:
                    aa:46:e8:a9:f4:cd:0a:82:d6:f9:4c:dd:cf:56:15:
                    0c:70:32:04:fe:1a:95:b1:e7:d8:8e:85:4b:c2:e4:
                    20:09:63:b5:1a:6f:96:28:16:27:7a:c4:35:a7:8a:
                    a3:82:3a:03:1c:8a:cc:80:69:f2:dd:49:24:f9:ad:
                    0d:6d:43:a3:0b:3a:70:54:80:9b:48:d6:74:9a:17:
                    0d:28:6f:99:74:3e:ba:4f:17:bb:bf:57:5e:5a:0b:
                    b9:e1:e0:8b:b6:36:58:4d:55:2a:a5:d0:e9:e6:50:
                    5e:ae:7d:a3:12:76:f4:00:ad:cc:e5:35:31:90:9d:
                    af:bc:c9:69:20:1d:56:7a:b8:9d:77:a7:82:0a:84:
                    f7:60:1a:d2:8f:bb:4f:69:03:16:b5:63:be:75:1b:
                    04:01:40:bc:80:a2:1c:be:fb:3b:be:db:47:6f:8d:
                    a5:dc:d1:3f:e8:08:f7:7b:31:23:56:32:dd:48:80:
                    85:98:1d:a3:f5:76:0e:bc:fc:9f:52:30:21:f5:60:
                    7c:91:9f:0e:b2:7a:a5:64:36:9d:6d:63:35:bd:bd:
                    b5:bf:1b:63:a3:0a:fa:8e:15:75:51:85:37:78:b5:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:45:9F:B8:0D:38:F6:E1:C8:9A:79:73:5D:84:3E:81:19:30:4A:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22
                IPv6:
                  2804:49e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267208

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:b3:cf:35:e8:09:65:b2:8a:9b:49:21:34:ae:da:3e:63:
         5f:ac:37:1f:b0:74:fd:6a:d0:0b:c5:8e:2e:92:72:12:3f:b0:
         4a:11:af:25:c6:de:0b:b3:b2:01:3f:34:86:f1:7a:d9:4b:ea:
         ff:54:8e:9e:56:91:5e:8b:fc:2a:7c:1b:aa:fa:6d:6d:c0:92:
         fb:51:4d:fa:ec:66:c6:8a:82:52:6d:af:0d:54:7b:37:80:d6:
         bf:e8:3f:de:62:52:3f:a7:72:a1:f6:0b:7e:f1:62:3a:d6:7d:
         c4:3c:31:9b:38:0c:3b:70:9b:b4:02:98:36:39:f2:17:a4:c9:
         cd:16:48:43:15:a3:a6:66:d3:c0:90:a1:53:cd:f2:c3:36:09:
         01:0d:02:60:5c:aa:d4:14:ec:05:6e:ec:94:ce:20:28:f3:42:
         66:fb:02:e3:47:fb:c0:8a:3c:4f:b2:f9:7f:9c:43:01:6e:1e:
         41:37:8b:0c:c3:a7:18:fe:96:c1:e2:c2:1a:5b:82:b5:2b:d3:
         a6:4d:44:bf:af:6e:f1:59:a9:b1:9a:71:38:98:43:84:c1:f6:
         a0:04:50:e4:6f:80:cd:c1:83:ea:66:a9:b2:18:06:74:1e:ee:
         1d:f1:a3:71:79:1b:e1:f9:e4:8d:bf:b7:91:e7:6c:77:45:65:
         b5:e2:a9:a6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUDX6JF5I8FZDEQ1eA0LBzGtVr+d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTUyMDM3MDZaFw0yNTAxMTMyMDQyMDZaMDMxMTAvBgNV
BAMTKDJCNDU5RkI4MEQzOEY2RTFDODlBNzk3MzVEODQzRTgxMTkzMDRBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7tcGEj6X8ZlJbsD+aQzQPrdb
0oqDQyRxrbW9TKpG6Kn0zQqC1vlM3c9WFQxwMgT+GpWx59iOhUvC5CAJY7Uab5Yo
Fid6xDWniqOCOgMcisyAafLdSST5rQ1tQ6MLOnBUgJtI1nSaFw0ob5l0PrpPF7u/
V15aC7nh4Iu2NlhNVSql0OnmUF6ufaMSdvQArczlNTGQna+8yWkgHVZ6uJ13p4IK
hPdgGtKPu09pAxa1Y751GwQBQLyAohy++zu+20dvjaXc0T/oCPd7MSNWMt1IgIWY
HaP1dg68/J9SMCH1YHyRnw6yeqVkNp1tYzW9vbW/G2OjCvqOFXVRhTd4te4jAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrRZ+4DTj24cia
eXNdhD6BGTBK5DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaUN4cHZQWW00TmJoM2NweHVVSHI2emRBTVNhZlA3bmhR
SzhUbTNEVWdNcy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmlDeHB2UFltNE5iaDNjcHh1VUhyNnpkQU1TYWZQN25o
UUs4VG0zRFVnTXMvMC8yQjQ1OUZCODBEMzhGNkUxQzg5QTc5NzM1RDg0M0U4MTE5
MzA0QUU0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5sgwDQQCAAIwBwMF
ACgESegwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBPIMA0GCSqGSIb3DQEBCwUA
A4IBAQAMDLPPNegJZbKKm0khNK7aPmNfrDcfsHT9atALxY4uknISP7BKEa8lxt4L
s7IBPzSG8XrZS+r/VI6eVpFei/wqfBuq+m1twJL7UU367GbGioJSba8NVHs3gNa/
6D/eYlI/p3Kh9gt+8WI61n3EPDGbOAw7cJu0Apg2OfIXpMnNFkhDFaOmZtPAkKFT
zfLDNgkBDQJgXKrUFOwFbuyUziAo80Jm+wLjR/vAijxPsvl/nEMBbh5BN4sMw6cY
/pbB4sIaW4K1K9OmTUS/r27xWamxmnE4mEOEwfagBFDkb4DNwYPqZqmyGAZ0Hu4d
8aNxeRvh+eSNv7eR52x3RWW14qmm
-----END CERTIFICATE-----