Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2BA1450423003652CC20FD36A2AAD056FDA40D08.cer
File:                     2BA1450423003652CC20FD36A2AAD056FDA40D08.cer (raw, json)
Hash identifier:          A4c46t9rvj9Urej5a8UHAteGgR49huRTvr7K5AhmY70=
Subject key identifier:   2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       226DA974EBE0B65B9DFBDC8D8861D7C1B1FF8F7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/2BA1450423003652CC20FD36A2AAD056FDA40D08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 13:36:31 +0000
Certificate not after:    Fri 04 Apr 2025 13:41:31 +0000
Subordinate resources:    AS: 266093
                          IP: 45.5.40.0/22
                          IP: 2804:3a84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:a9:74:eb:e0:b6:5b:9d:fb:dc:8d:88:61:d7:c1:b1:ff:8f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 13:36:31 2024 GMT
            Not After : Apr  4 13:41:31 2025 GMT
        Subject: CN=2BA1450423003652CC20FD36A2AAD056FDA40D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:94:47:f0:c6:ce:ba:4e:7d:19:66:f0:ea:
                    e8:3b:21:96:9e:9a:9e:58:90:b3:27:0f:4b:0f:c9:
                    7a:62:b3:b1:de:72:5d:66:8f:fe:7c:93:b4:28:2d:
                    ee:b9:ae:2c:af:3d:d0:fd:cd:06:6e:e9:95:ca:0c:
                    07:5d:d8:62:60:bc:74:f1:58:4d:98:50:8c:94:cc:
                    ae:89:39:e9:10:59:3b:0f:ff:63:89:de:af:c4:d6:
                    ef:1b:fb:3c:38:fc:6f:bb:ff:31:bf:2d:97:e8:f8:
                    1f:ba:3c:24:2a:13:99:1c:5e:ed:5a:b0:aa:44:e6:
                    6e:78:af:b1:28:6e:01:82:20:de:c9:0c:8b:dc:ad:
                    1d:28:df:25:20:4c:22:ee:6e:2a:dd:0e:52:d1:1d:
                    bf:eb:f2:42:a7:55:8a:66:f0:c9:d7:90:fe:4e:b8:
                    88:1d:05:8f:ec:9c:71:d5:55:bb:21:b7:e2:83:3f:
                    ac:e0:f7:6c:39:1d:36:fc:ce:cb:c1:aa:42:3f:78:
                    fd:86:a4:47:20:b0:95:75:55:b0:5a:b9:cd:fc:9f:
                    29:d4:84:4c:22:54:53:68:3a:5e:30:a5:ad:d1:2a:
                    d3:72:e9:11:38:4b:93:ba:eb:49:4b:32:3f:69:f8:
                    f4:0c:dc:6a:2f:a4:c0:ac:4a:5a:56:a2:e3:dd:23:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/2BA1450423003652CC20FD36A2AAD056FDA40D08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.40.0/22
                IPv6:
                  2804:3a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266093

    Signature Algorithm: sha256WithRSAEncryption
         16:af:37:43:b8:93:e7:3d:6c:93:d1:bc:75:9a:d0:7d:5e:ff:
         76:9b:a9:c5:b8:76:25:38:95:38:68:14:6e:45:65:ed:a2:9d:
         60:0c:db:f6:af:c0:f1:8e:3c:c0:28:72:a1:29:64:e1:8f:2e:
         d3:6a:49:78:59:cf:b3:d2:5f:7b:91:d6:63:d1:cc:c3:81:f5:
         e0:53:cd:61:32:56:d1:5d:da:7d:3b:fa:00:57:5f:5e:20:f1:
         dc:2c:b0:68:42:2c:84:57:37:0b:dc:30:99:fd:2f:14:21:f5:
         82:0d:78:ce:e5:ca:19:48:39:98:dc:dd:7c:8a:24:7e:0c:c1:
         45:9a:a4:2b:01:ba:ce:70:54:95:0c:99:58:99:68:eb:f6:9c:
         ad:86:5d:73:41:18:32:d2:cf:8b:72:35:f9:d6:b4:ae:84:88:
         2e:b0:4d:81:21:6f:ba:36:0c:12:be:86:b7:ab:ab:bb:cb:75:
         de:9e:9f:7b:f6:a9:3c:03:68:8b:6a:0e:07:e8:ff:a5:16:36:
         76:e4:74:fa:04:47:14:64:54:a3:bf:55:a8:ca:d0:75:3a:14:
         ac:cb:02:ef:cd:91:6e:ea:84:f2:5a:72:26:71:52:db:98:71:
         fd:f9:bd:e6:9b:04:4a:6e:80:dc:2c:17:7e:8a:c6:11:2c:f3:
         3d:13:e5:38
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIm2pdOvgtlud+9yNiGHXwbH/j30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDUxMzM2MzFaFw0yNTA0MDQxMzQxMzFaMDMxMTAvBgNV
BAMTKDJCQTE0NTA0MjMwMDM2NTJDQzIwRkQzNkEyQUFEMDU2RkRBNDBEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixpRH8MbOuk59GWbw6ug7IZae
mp5YkLMnD0sPyXpis7Hecl1mj/58k7QoLe65riyvPdD9zQZu6ZXKDAdd2GJgvHTx
WE2YUIyUzK6JOekQWTsP/2OJ3q/E1u8b+zw4/G+7/zG/LZfo+B+6PCQqE5kcXu1a
sKpE5m54r7EobgGCIN7JDIvcrR0o3yUgTCLubirdDlLRHb/r8kKnVYpm8MnXkP5O
uIgdBY/snHHVVbsht+KDP6zg92w5HTb8zsvBqkI/eP2GpEcgsJV1VbBauc38nynU
hEwiVFNoOl4wpa3RKtNy6RE4S5O660lLMj9p+PQM3GovpMCsSlpWouPdI9eTAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQroUUEIwA2Uswg
/TaiqtBW/aQNCDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80Rk1OeHV5ZGd0blBBTTU2bnZwd2RSZGlXYkF2eDJQVHFH
TFZqbUdpQlRZUS8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNEZNTnh1eWRndG5QQU01Nm52cHdkUmRpV2JBdngyUFRx
R0xWam1HaUJUWVEvMS8yQkExNDUwNDIzMDAzNjUyQ0MyMEZEMzZBMkFBRDA1NkZE
QTQwRDA4Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBSgwDQQCAAIwBwMF
ACgEOoQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9tMA0GCSqGSIb3DQEBCwUA
A4IBAQAWrzdDuJPnPWyT0bx1mtB9Xv92m6nFuHYlOJU4aBRuRWXtop1gDNv2r8Dx
jjzAKHKhKWThjy7Takl4Wc+z0l97kdZj0czDgfXgU81hMlbRXdp9O/oAV19eIPHc
LLBoQiyEVzcL3DCZ/S8UIfWCDXjO5coZSDmY3N18iiR+DMFFmqQrAbrOcFSVDJlY
mWjr9pythl1zQRgy0s+LcjX51rSuhIgusE2BIW+6NgwSvoa3q6u7y3Xenp979qk8
A2iLag4H6P+lFjZ25HT6BEcUZFSjv1WoytB1OhSsywLvzZFu6oTyWnImcVLbmHH9
+b3mmwRKboDcLBd+isYRLPM9E+U4
-----END CERTIFICATE-----