Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2B87B88FB4107377B1B3DA934801B74900693940.cer
File:                     2B87B88FB4107377B1B3DA934801B74900693940.cer (raw, json)
Hash identifier:          ygTuZO5UaxavrJCG53hWzLq3EJ8DNNs7F/uOf8B2z7I=
Subject key identifier:   2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       167A4588F9D98A4866939E807A99B07D1DE99211
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 17:23:27 +0000
Certificate not after:    Wed 12 Feb 2025 17:28:27 +0000
Subordinate resources:    AS: 269710
                          IP: 190.112.148.0/22
                          IP: 2804:68b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7a:45:88:f9:d9:8a:48:66:93:9e:80:7a:99:b0:7d:1d:e9:92:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 17:23:27 2024 GMT
            Not After : Feb 12 17:28:27 2025 GMT
        Subject: CN=2B87B88FB4107377B1B3DA934801B74900693940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:36:a1:0b:ff:2f:5d:db:1d:46:0f:63:2f:
                    9d:e7:c3:9c:a6:09:80:da:7e:5b:8c:4c:f3:c5:18:
                    09:fd:56:3e:56:c6:72:3e:85:de:a3:c4:79:f9:c1:
                    c7:be:db:42:f8:40:9d:92:11:b4:3d:3b:6d:d3:f2:
                    fd:a4:a3:3a:97:2e:67:2b:b7:f4:cc:23:b4:d3:9f:
                    5e:42:3c:25:45:d7:3f:5e:78:d2:e5:7a:56:3e:41:
                    57:7f:79:97:0f:26:7f:c6:8b:55:a8:be:ea:9f:20:
                    25:18:b5:36:57:6b:91:5d:8b:09:f6:31:f0:1c:f3:
                    29:3f:2d:8f:5e:cc:47:d1:80:40:99:7d:77:95:58:
                    03:1a:08:80:27:52:06:64:fc:1d:3e:ce:82:d6:d0:
                    78:74:3a:93:35:98:e7:89:6d:4d:c8:4a:1e:ac:0d:
                    7a:f3:bf:15:1d:33:e1:25:df:83:44:ef:5c:15:83:
                    42:57:2b:34:1b:f0:3d:07:75:15:88:91:8d:b3:a1:
                    49:85:d1:2d:74:7a:76:cb:8e:1f:59:67:32:65:af:
                    ba:2f:22:de:76:92:f7:b6:e6:21:cb:72:f1:b2:f9:
                    b3:4f:c2:2b:f4:b2:64:a1:fb:f8:f7:a8:87:1b:ba:
                    c2:17:a3:d9:ec:a5:36:39:94:f2:e9:45:dd:7a:c2:
                    9c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.148.0/22
                IPv6:
                  2804:68b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269710

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:c9:72:7b:5e:ae:f4:85:b0:c0:04:37:b4:da:28:61:70:
         72:d4:fd:a8:6d:d2:83:ec:19:8c:1a:ee:5a:d7:63:76:a2:d7:
         b8:2d:83:82:ab:77:e3:8d:19:1b:a2:b3:b4:d8:84:4d:32:25:
         e2:5c:58:90:01:f5:10:ef:8a:31:03:53:25:4d:b3:c3:06:d3:
         01:9e:ba:74:a2:38:86:2b:a5:dc:5b:92:39:63:f2:85:25:b6:
         45:85:b4:1a:5d:03:d4:7f:bf:9e:f4:0d:b3:93:b3:36:55:15:
         dd:cc:6b:76:ee:d8:e9:af:50:74:c4:45:e8:44:14:23:13:0d:
         34:5e:50:46:5a:5e:ef:78:ff:b5:d5:e5:d6:b0:f6:c2:85:a2:
         39:50:82:e8:69:e1:74:d6:68:b6:6a:84:85:27:06:75:7b:82:
         15:11:e2:c6:70:c5:a5:60:94:2b:16:d4:ac:6f:79:b3:39:f2:
         08:be:8e:14:03:0e:ff:c5:39:f2:fe:d2:9f:ef:21:c1:fd:f2:
         96:8b:b6:b6:46:30:2b:3a:f3:25:2d:38:9d:ca:41:98:91:a5:
         16:75:c8:17:b6:77:03:58:e8:43:3b:04:51:cc:74:6a:b6:7c:
         8a:9e:dc:0e:85:8c:82:15:72:40:10:9b:e0:4a:78:63:be:fa:
         82:e4:76:4b
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFnpFiPnZikhmk56AepmwfR3pkhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTQxNzIzMjdaFw0yNTAyMTIxNzI4MjdaMDMxMTAvBgNV
BAMTKDJCODdCODhGQjQxMDczNzdCMUIzREE5MzQ4MDFCNzQ5MDA2OTM5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrTahC/8vXdsdRg9jL53nw5ym
CYDafluMTPPFGAn9Vj5WxnI+hd6jxHn5wce+20L4QJ2SEbQ9O23T8v2kozqXLmcr
t/TMI7TTn15CPCVF1z9eeNLlelY+QVd/eZcPJn/Gi1WovuqfICUYtTZXa5Fdiwn2
MfAc8yk/LY9ezEfRgECZfXeVWAMaCIAnUgZk/B0+zoLW0Hh0OpM1mOeJbU3ISh6s
DXrzvxUdM+El34NE71wVg0JXKzQb8D0HdRWIkY2zoUmF0S10enbLjh9ZZzJlr7ov
It52kve25iHLcvGy+bNPwiv0smSh+/j3qIcbusIXo9nspTY5lPLpRd16wpxdAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrh7iPtBBzd7Gz
2pNIAbdJAGk5QDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8zUzZKTG9uTnVwOTZpQ21VZzc4WEJCOWVnN3h3TDNNdmV0
U0RMUmQ1eHZXVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vM1M2Skxvbk51cDk2aUNtVWc3OFhCQjllZzd4d0wzTXZl
dFNETFJkNXh2V1QvMC8yQjg3Qjg4RkI0MTA3Mzc3QjFCM0RBOTM0ODAxQjc0OTAw
NjkzOTQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+cJQwDQQCAAIwBwMF
ACgEaLQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB2OMA0GCSqGSIb3DQEBCwUA
A4IBAQA82clye16u9IWwwAQ3tNooYXBy1P2obdKD7BmMGu5a12N2ote4LYOCq3fj
jRkborO02IRNMiXiXFiQAfUQ74oxA1MlTbPDBtMBnrp0ojiGK6XcW5I5Y/KFJbZF
hbQaXQPUf7+e9A2zk7M2VRXdzGt27tjpr1B0xEXoRBQjEw00XlBGWl7veP+11eXW
sPbChaI5UILoaeF01mi2aoSFJwZ1e4IVEeLGcMWlYJQrFtSsb3mzOfIIvo4UAw7/
xTny/tKf7yHB/fKWi7a2RjArOvMlLTidykGYkaUWdcgXtncDWOhDOwRRzHRqtnyK
ntwOhYyCFXJAEJvgSnhjvvqC5HZL
-----END CERTIFICATE-----