Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B6D48C207EA40240748529DE546BE889AF23E84.cer
File:                     2B6D48C207EA40240748529DE546BE889AF23E84.cer (raw, json)
Hash identifier:          xQhPpCxeebaIl/VxRkaOzb1eP2zY2TQvxBVd7k8lreQ=
Subject key identifier:   2B:6D:48:C2:07:EA:40:24:07:48:52:9D:E5:46:BE:88:9A:F2:3E:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1FB2027E4B359FEFBA5D94402939C6C02C182C54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2B6D48C207EA40240748529DE546BE889AF23E84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 11:53:07 +0000
Certificate not after:    Thu 13 Feb 2025 11:58:07 +0000
Subordinate resources:    AS: 265984
                          IP: 181.191.4.0/22
                          IP: 2804:40d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b2:02:7e:4b:35:9f:ef:ba:5d:94:40:29:39:c6:c0:2c:18:2c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 11:53:07 2024 GMT
            Not After : Feb 13 11:58:07 2025 GMT
        Subject: CN=2B6D48C207EA40240748529DE546BE889AF23E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:66:43:2f:f1:67:53:32:0a:19:0a:11:15:
                    6c:24:47:cf:2e:3b:d4:11:25:f1:70:fd:66:b2:26:
                    00:5c:6b:68:61:65:40:27:b0:db:d5:4a:bf:ff:e6:
                    4f:bf:f4:9e:30:ec:69:75:56:2f:c8:e8:73:81:ba:
                    d8:2d:78:93:90:c2:50:d0:fc:9b:85:a9:0c:4f:2b:
                    42:82:b5:87:10:e1:cd:80:2e:ed:cc:83:ae:ab:79:
                    37:3b:c9:f9:19:7c:aa:ed:a8:14:b6:68:55:28:93:
                    0e:24:07:1b:25:39:74:f2:33:09:a8:49:07:00:34:
                    e1:34:23:f3:41:a7:93:66:2d:1b:18:23:6a:6c:f1:
                    c6:b0:b2:63:50:8f:4d:fc:75:ca:aa:9b:6a:7a:f1:
                    45:cc:e1:f0:e3:ed:9b:13:a1:7d:3e:ae:f8:cd:7f:
                    17:b1:43:22:d8:60:d6:90:cb:97:08:d2:04:04:94:
                    3e:35:ca:e2:95:47:f3:0c:e6:0e:c9:05:f3:d7:e0:
                    ab:29:5a:6f:26:34:9e:80:52:f9:ec:16:74:53:2d:
                    4d:07:ca:98:75:83:d1:da:fc:5d:61:d5:3f:d9:2e:
                    c9:d9:d9:76:d6:20:24:30:a0:f4:7c:cd:d3:bf:6b:
                    33:d9:57:28:7b:11:6c:42:cf:f8:ef:3d:3d:51:56:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:6D:48:C2:07:EA:40:24:07:48:52:9D:E5:46:BE:88:9A:F2:3E:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/2B6D48C207EA40240748529DE546BE889AF23E84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.4.0/22
                IPv6:
                  2804:40d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265984

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:8e:13:27:f8:f3:56:1d:28:20:77:3b:55:c3:4d:94:42:
         ff:7f:c8:12:44:7a:f2:d3:0f:11:88:32:f3:4c:5d:f4:b9:7a:
         f7:22:f1:e7:9c:41:d1:41:e1:96:b9:b8:3b:c9:0c:1f:3d:dc:
         ee:20:c2:30:76:62:44:f1:ab:7d:50:b5:4f:8d:9a:88:54:bd:
         48:59:35:7d:b9:5a:62:c8:1f:b1:f0:36:37:0b:c0:0e:c0:47:
         55:89:9b:61:7d:07:7e:69:7d:e3:38:e2:af:de:0d:26:6a:3b:
         b5:fb:4b:b8:7f:ba:02:6e:3a:3e:96:b9:36:56:ba:45:41:82:
         96:75:dd:eb:84:7e:da:65:33:11:1e:58:f5:9d:ad:4c:2b:d0:
         36:5a:73:1f:46:cb:4e:16:c2:5c:22:5a:5a:7c:3b:05:a5:11:
         7f:8c:53:98:af:d8:e0:3c:1b:d6:af:2f:84:24:fd:cc:d3:51:
         30:36:19:71:c0:8e:4a:22:62:b8:4f:c9:26:81:cc:1b:60:5a:
         b3:1d:cd:a1:ba:f3:dd:e1:7e:a8:92:d0:2e:ce:9e:87:f1:c7:
         45:fd:16:0c:16:2c:16:7c:b8:3f:80:53:8f:e8:6b:29:58:36:
         2c:d3:d5:60:94:51:f1:53:b4:1e:8f:71:05:00:9b:88:01:ce:
         72:14:eb:a3
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUH7ICfks1n++6XZRAKTnGwCwYLFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxMTUzMDdaFw0yNTAyMTMxMTU4MDdaMDMxMTAvBgNV
BAMTKDJCNkQ0OEMyMDdFQTQwMjQwNzQ4NTI5REU1NDZCRTg4OUFGMjNFODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJGZDL/FnUzIKGQoRFWwkR88u
O9QRJfFw/WayJgBca2hhZUAnsNvVSr//5k+/9J4w7Gl1Vi/I6HOButgteJOQwlDQ
/JuFqQxPK0KCtYcQ4c2ALu3Mg66reTc7yfkZfKrtqBS2aFUokw4kBxslOXTyMwmo
SQcANOE0I/NBp5NmLRsYI2ps8cawsmNQj038dcqqm2p68UXM4fDj7ZsToX0+rvjN
fxexQyLYYNaQy5cI0gQElD41yuKVR/MM5g7JBfPX4KspWm8mNJ6AUvnsFnRTLU0H
yph1g9Ha/F1h1T/ZLsnZ2XbWICQwoPR8zdO/azPZVyh7EWxCz/jvPT1RVlsBAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrbUjCB+pAJAdI
Up3lRr6ImvI+hDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GZUp4YVlRc2JLalRZNUhocmdHZms2Y1p6WFczVGRlTk11
TVVoU0F3dnZxeC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRmVKeGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5N
dU1VaFNBd3Z2cXgvMC8yQjZENDhDMjA3RUE0MDI0MDc0ODUyOURFNTQ2QkU4ODlB
RjIzRTg0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1vwQwDQQCAAIwBwMF
ACgEQNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA8AMA0GCSqGSIb3DQEBCwUA
A4IBAQCV7Y4TJ/jzVh0oIHc7VcNNlEL/f8gSRHry0w8RiDLzTF30uXr3IvHnnEHR
QeGWubg7yQwfPdzuIMIwdmJE8at9ULVPjZqIVL1IWTV9uVpiyB+x8DY3C8AOwEdV
iZthfQd+aX3jOOKv3g0maju1+0u4f7oCbjo+lrk2VrpFQYKWdd3rhH7aZTMRHlj1
na1MK9A2WnMfRstOFsJcIlpafDsFpRF/jFOYr9jgPBvWry+EJP3M01EwNhlxwI5K
ImK4T8kmgcwbYFqzHc2huvPd4X6oktAuzp6H8cdF/RYMFiwWfLg/gFOP6GspWDYs
09VglFHxU7Qej3EFAJuIAc5yFOuj
-----END CERTIFICATE-----