Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2ED4975447660C790CC0843B6A994EF14B127A4E.cer
File:                     2ED4975447660C790CC0843B6A994EF14B127A4E.cer (raw, json)
Hash identifier:          kqTdFi+xhhstIwTMFT54ee6F+X+XyY+eR8VXwy78vK4=
Subject key identifier:   2E:D4:97:54:47:66:0C:79:0C:C0:84:3B:6A:99:4E:F1:4B:12:7A:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30D572210D606E935F46F9590E95D0F8AEF05FF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/2ED4975447660C790CC0843B6A994EF14B127A4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 22:51:14 +0000
Certificate not after:    Mon 24 Mar 2025 22:56:14 +0000
Subordinate resources:    AS: 271501
                          IP: 45.65.160.0/22
                          IP: 2804:7c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:72:21:0d:60:6e:93:5f:46:f9:59:0e:95:d0:f8:ae:f0:5f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 22:51:14 2024 GMT
            Not After : Mar 24 22:56:14 2025 GMT
        Subject: CN=2ED4975447660C790CC0843B6A994EF14B127A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:61:bb:69:2d:e3:6b:aa:c9:52:8e:48:50:
                    cd:d8:8b:a0:a4:59:53:9c:df:69:50:c3:72:79:e7:
                    3a:73:ba:2a:94:18:52:eb:32:36:29:80:01:c1:c3:
                    03:14:77:c3:f1:bc:ad:da:97:69:bf:2f:64:65:b8:
                    46:09:2e:64:a3:50:4f:bd:21:4c:a7:4e:60:6e:61:
                    b8:14:73:21:2a:9f:ee:42:73:ce:dc:32:c5:97:3d:
                    e1:bf:ec:4a:6a:d2:36:e9:5c:15:b8:d4:4d:87:eb:
                    cc:d4:2d:1b:ca:d8:2d:ab:6e:b8:49:3b:3d:76:cb:
                    ea:49:3a:6c:80:83:aa:ab:b4:b2:6f:dd:43:7e:53:
                    b9:96:9c:ea:93:ca:c7:a4:f6:c0:29:20:79:6e:5a:
                    d2:a8:e8:28:6d:61:51:57:8f:1e:82:2b:d1:6c:73:
                    52:5e:e5:21:0f:da:4c:cb:57:c4:0d:dd:01:89:59:
                    8d:b9:fb:d6:64:09:48:61:e8:b0:e4:71:e0:ad:3c:
                    38:c7:68:9c:20:d7:03:1b:92:f9:73:47:a5:5b:69:
                    c2:42:88:0d:d0:a3:e3:51:9c:03:f3:aa:c8:e3:dd:
                    1d:df:f0:f6:6f:6c:93:9e:60:91:6e:15:8c:11:9f:
                    c1:b4:6b:a5:fa:2a:f9:46:4b:52:e5:ea:a0:11:7e:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:D4:97:54:47:66:0C:79:0C:C0:84:3B:6A:99:4E:F1:4B:12:7A:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/2ED4975447660C790CC0843B6A994EF14B127A4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.160.0/22
                IPv6:
                  2804:7c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271501

    Signature Algorithm: sha256WithRSAEncryption
         69:14:00:a9:23:70:b5:bb:e3:b9:0a:e1:53:47:fa:a5:f8:02:
         38:4d:47:09:a1:70:6e:26:2b:f5:e5:44:12:ed:74:70:3b:a6:
         a7:38:df:9f:62:99:c7:70:71:16:8a:d6:7e:e9:05:51:c0:e5:
         f9:69:50:4f:26:1e:2f:0b:53:b7:d9:59:39:c2:25:a5:68:dd:
         17:1a:96:9d:18:97:a6:4e:2d:1c:40:a5:12:75:bc:01:f2:b9:
         13:d1:f0:77:8a:aa:ca:45:79:9b:c2:08:c6:9b:05:03:b9:ab:
         ef:30:9e:4e:c2:8b:44:69:be:13:eb:fe:3b:b7:6a:83:c0:9d:
         22:95:95:8a:08:d3:0b:73:f4:9d:32:3f:2a:a5:6a:78:17:39:
         e9:7b:76:51:20:ff:1c:0e:86:6e:d7:87:b7:3f:f3:e6:2c:7e:
         dd:6f:aa:a6:ba:1b:29:3f:5e:7c:00:9e:16:4c:af:ab:bf:ce:
         94:ad:e4:59:4f:38:5b:d8:b9:14:16:b4:5f:9c:6b:d9:64:e9:
         4a:ba:60:2c:54:69:84:0b:04:7e:16:a5:be:8f:34:fd:00:89:
         60:52:41:41:1e:40:cb:73:2a:9b:1a:1d:7d:a1:ac:ee:0c:aa:
         89:7e:cf:d9:e7:85:41:63:fa:45:e6:d5:af:d2:8f:28:a8:e5:
         78:90:8d:85
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMNVyIQ1gbpNfRvlZDpXQ+K7wX/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjUyMjUxMTRaFw0yNTAzMjQyMjU2MTRaMDMxMTAvBgNV
BAMTKDJFRDQ5NzU0NDc2NjBDNzkwQ0MwODQzQjZBOTk0RUYxNEIxMjdBNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGmG7aS3ja6rJUo5IUM3Yi6Ck
WVOc32lQw3J55zpzuiqUGFLrMjYpgAHBwwMUd8PxvK3al2m/L2RluEYJLmSjUE+9
IUynTmBuYbgUcyEqn+5Cc87cMsWXPeG/7Epq0jbpXBW41E2H68zULRvK2C2rbrhJ
Oz12y+pJOmyAg6qrtLJv3UN+U7mWnOqTysek9sApIHluWtKo6ChtYVFXjx6CK9Fs
c1Je5SEP2kzLV8QN3QGJWY25+9ZkCUhh6LDkceCtPDjHaJwg1wMbkvlzR6VbacJC
iA3Qo+NRnAPzqsjj3R3f8PZvbJOeYJFuFYwRn8G0a6X6KvlGS1Ll6qARfoGVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu1JdUR2YMeQzA
hDtqmU7xSxJ6TjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80cFBQbnJoZ3RqdXQ0V3R2aDRyeTRWUkhkV000ZWY0VjRp
enN3dWs2Sld3WC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNHBQUG5yaGd0anV0NFd0dmg0cnk0VlJIZFdNNGVmNFY0
aXpzd3VrNkpXd1gvMC8yRUQ0OTc1NDQ3NjYwQzc5MENDMDg0M0I2QTk5NEVGMTRC
MTI3QTRFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItQaAwDQQCAAIwBwMF
ACgEfIQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCSNMA0GCSqGSIb3DQEBCwUA
A4IBAQBpFACpI3C1u+O5CuFTR/ql+AI4TUcJoXBuJiv15UQS7XRwO6anON+fYpnH
cHEWitZ+6QVRwOX5aVBPJh4vC1O32Vk5wiWlaN0XGpadGJemTi0cQKUSdbwB8rkT
0fB3iqrKRXmbwgjGmwUDuavvMJ5OwotEab4T6/47t2qDwJ0ilZWKCNMLc/SdMj8q
pWp4Fznpe3ZRIP8cDoZu14e3P/PmLH7db6qmuhspP158AJ4WTK+rv86UreRZTzhb
2LkUFrRfnGvZZOlKumAsVGmECwR+FqW+jzT9AIlgUkFBHkDLcyqbGh19oazuDKqJ
fs/Z54VBY/pF5tWv0o8oqOV4kI2F
-----END CERTIFICATE-----