Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.cer
File:                     2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.cer (raw, json)
Hash identifier:          n+KVoIquDmiYvqFWFtsGcvpRWrQReftoKpGhl+3AMGI=
Subject key identifier:   2F:5F:75:24:7F:D0:5D:46:ED:D6:B6:6D:B6:E0:23:D9:7B:FC:AD:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2064CBE79E65FE7C873D2B4ED5069E6EBD56541C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 13:39:43 +0000
Certificate not after:    Wed 05 Feb 2025 13:44:43 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:64:cb:e7:9e:65:fe:7c:87:3d:2b:4e:d5:06:9e:6e:bd:56:54:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 13:39:43 2024 GMT
            Not After : Feb  5 13:44:43 2025 GMT
        Subject: CN=2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:3f:11:07:46:88:b2:4d:2d:67:70:28:e7:
                    90:19:ef:87:3a:66:d0:de:74:10:4e:01:6d:7f:58:
                    74:61:bc:17:ce:8e:ee:31:1e:f5:af:87:f5:22:18:
                    0f:f4:50:65:a4:f3:9a:75:64:a6:70:b1:9d:d0:82:
                    07:fa:c6:59:a0:73:ee:29:dc:a0:c5:14:02:2d:80:
                    45:66:c7:fe:f8:54:57:e1:80:92:79:ee:9e:85:cd:
                    e5:c2:91:f0:3f:ad:6e:a6:34:34:01:47:3b:b1:eb:
                    ca:08:38:7a:a5:6f:8d:17:3f:3f:9d:dc:0a:ae:34:
                    49:c3:03:3f:e7:36:6a:a2:9c:9b:df:92:b0:b7:52:
                    2b:35:e7:8a:67:07:5a:e3:0d:94:c0:66:37:2c:92:
                    b9:bb:a4:4b:f4:65:49:87:9b:87:04:d0:55:61:ee:
                    7f:ea:ee:2f:df:f1:97:a6:20:9f:d4:e9:6d:e1:d3:
                    2b:d2:e0:ce:99:ec:2c:80:56:15:e8:eb:ab:a7:4d:
                    e7:b5:69:55:b3:b3:d9:43:0c:fa:9b:93:d1:c0:f5:
                    37:a9:a4:a3:5c:dc:f8:d6:f0:36:23:74:7c:e9:49:
                    6e:31:81:b6:e8:02:c9:af:68:8a:d6:70:22:71:f1:
                    ea:fd:2f:9a:60:ff:97:a4:0e:12:43:07:33:43:77:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:5F:75:24:7F:D0:5D:46:ED:D6:B6:6D:B6:E0:23:D9:7B:FC:AD:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/2F5F75247FD05D46EDD6B66DB6E023D97BFCAD6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         45:27:47:89:1a:50:37:0d:27:62:a4:b7:e2:5b:09:25:75:01:
         11:29:45:98:4d:3e:3b:2c:3f:43:a4:78:df:49:5a:34:85:5f:
         6e:8e:82:dc:0d:39:d6:0c:c2:e4:d0:0b:7c:3b:35:8a:81:16:
         79:d7:78:33:f3:5d:e3:8c:12:b4:b9:7c:a2:43:0d:d8:3e:ef:
         06:13:22:a1:4a:3d:8b:a0:d7:59:bd:ef:3c:0c:70:1f:5b:3c:
         e3:78:e1:b7:66:67:54:87:de:f5:4a:dd:f6:80:8b:a5:89:d1:
         70:b4:05:6f:a5:de:59:9b:2a:40:d1:7c:a2:41:d8:01:5b:f2:
         ab:20:fc:03:80:7d:69:0f:94:8d:32:a5:41:8d:ba:a4:55:b5:
         85:91:42:a2:09:84:b7:52:d8:6f:f6:a2:2d:e8:fc:a4:dc:12:
         d1:32:cb:76:81:8a:c4:4c:3c:71:02:f7:dc:56:de:77:3a:76:
         ad:ef:2e:c7:4d:1f:4c:19:65:72:d3:d2:b8:21:18:a0:bc:d8:
         80:3c:cc:f2:62:10:36:05:f7:5b:e4:d6:26:e9:51:c0:85:24:
         28:cd:78:b1:6f:cd:6f:e7:2c:c8:59:1d:57:27:9d:f4:18:5e:
         3e:61:ea:07:4a:ab:d7:85:30:f2:cf:cc:b7:5a:ad:90:ad:7c:
         00:fc:35:a0
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIGTL555l/nyHPStO1Qaebr1WVBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDcxMzM5NDNaFw0yNTAyMDUxMzQ0NDNaMDMxMTAvBgNV
BAMTKDJGNUY3NTI0N0ZEMDVENDZFREQ2QjY2REI2RTAyM0Q5N0JGQ0FENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyZD8RB0aIsk0tZ3Ao55AZ74c6
ZtDedBBOAW1/WHRhvBfOju4xHvWvh/UiGA/0UGWk85p1ZKZwsZ3Qggf6xlmgc+4p
3KDFFAItgEVmx/74VFfhgJJ57p6FzeXCkfA/rW6mNDQBRzux68oIOHqlb40XPz+d
3AquNEnDAz/nNmqinJvfkrC3Uis154pnB1rjDZTAZjcskrm7pEv0ZUmHm4cE0FVh
7n/q7i/f8ZemIJ/U6W3h0yvS4M6Z7CyAVhXo66unTee1aVWzs9lDDPqbk9HA9Tep
pKNc3PjW8DYjdHzpSW4xgbboAsmvaIrWcCJx8er9L5pg/5ekDhJDBzNDdzCvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvX3Ukf9BdRu3W
tm224CPZe/ytbTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yM0pxa0FKRHNuQTdONlZwZFBKRk1nVGNucEpUNk1mc2kx
Y2JTSDlZN0V5Wi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMjNKcWtBSkRzbkE3TjZWcGRQSkZNZ1RjbnBKVDZNZnNp
MWNiU0g5WTdFeVovMC8yRjVGNzUyNDdGRDA1RDQ2RURENkI2NkRCNkUwMjNEOTdC
RkNBRDZELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALIfFQwDQQCAAIwBwMF
ACgEaYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB/CMA0GCSqGSIb3DQEBCwUA
A4IBAQBFJ0eJGlA3DSdipLfiWwkldQERKUWYTT47LD9DpHjfSVo0hV9ujoLcDTnW
DMLk0At8OzWKgRZ513gz813jjBK0uXyiQw3YPu8GEyKhSj2LoNdZve88DHAfWzzj
eOG3ZmdUh971St32gIulidFwtAVvpd5ZmypA0XyiQdgBW/KrIPwDgH1pD5SNMqVB
jbqkVbWFkUKiCYS3Uthv9qIt6Pyk3BLRMst2gYrETDxxAvfcVt53Onat7y7HTR9M
GWVy09K4IRigvNiAPMzyYhA2Bfdb5NYm6VHAhSQozXixb81v5yzIWR1XJ530GF4+
YeoHSqvXhTDyz8y3Wq2QrXwA/DWg
-----END CERTIFICATE-----