Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer
File:                     2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.cer (raw, json)
Hash identifier:          SYrGLZxYWAw7owCoMX01prcy3iq71/uo2xqJtwQRLec=
Subject key identifier:   2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F223B9815FD3794D5E36DE7F2E499543ACBF12E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Apr 2024 18:16:01 +0000
Certificate not after:    Tue 01 Apr 2025 18:21:01 +0000
Subordinate resources:    AS: 271240
                          IP: 179.48.48.0/22
                          IP: 2804:7868::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:3b:98:15:fd:37:94:d5:e3:6d:e7:f2:e4:99:54:3a:cb:f1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  2 18:16:01 2024 GMT
            Not After : Apr  1 18:21:01 2025 GMT
        Subject: CN=2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:d1:b3:ec:1b:a1:37:41:c1:7e:0e:c0:6a:
                    20:be:ce:6d:1a:37:a2:45:30:96:04:7c:12:d0:ac:
                    3f:4e:bf:cf:c1:e6:5d:bb:ff:f2:83:f5:95:0c:38:
                    98:09:8e:0b:8b:b7:10:51:f9:0b:0f:2f:44:8e:5a:
                    86:87:4b:6a:63:9e:24:cb:07:05:00:8d:2c:a7:12:
                    a9:0a:59:39:61:a4:d4:0b:a9:b7:9c:21:fe:df:10:
                    99:c2:7d:29:b6:4b:c5:97:d5:97:c4:da:43:b5:ef:
                    f4:1d:34:b4:e1:4c:07:5c:84:76:0e:8a:a6:c0:51:
                    34:23:8f:4f:82:da:7b:23:e1:85:36:18:7f:7a:d3:
                    bd:2f:0f:5d:eb:c4:66:45:ad:67:f3:0b:c0:7d:3c:
                    55:d8:52:d4:da:d5:cd:cb:e8:46:49:c7:92:b9:21:
                    b4:a1:7c:52:f9:a8:09:ee:ac:ec:f3:94:67:76:70:
                    16:32:2e:19:4c:37:16:19:c4:af:48:16:29:72:1f:
                    b7:1e:15:4d:b4:b8:ff:4c:50:c2:9b:5e:91:53:da:
                    14:aa:d8:15:8d:13:e4:e5:ad:bb:07:4c:e2:f9:03:
                    1c:8e:3a:74:45:56:30:20:23:35:ab:f4:ac:3a:12:
                    87:45:d3:7b:8d:5b:ba:3c:c6:42:80:c6:b4:aa:49:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:70:AB:1A:AC:5B:BF:95:C0:B3:D0:60:9E:BA:8F:B6:66:8F:B3:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/2F70AB1AAC5BBF95C0B3D0609EBA8FB6668FB3B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/22
                IPv6:
                  2804:7868::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271240

    Signature Algorithm: sha256WithRSAEncryption
         41:93:d6:1e:e4:dc:12:c7:9b:0c:ea:76:3e:e7:99:6c:8c:71:
         18:aa:22:93:0d:45:71:6e:07:5d:24:c0:0d:95:7f:8a:ef:54:
         99:b2:59:87:de:2e:c9:66:f8:64:d2:e6:37:d7:4a:73:51:5f:
         ac:50:68:ac:19:c7:60:d5:66:ec:22:98:d1:c0:43:5f:67:84:
         ec:a1:57:1b:a1:ed:25:91:c4:fd:c3:ac:ca:9e:f9:cf:ff:9a:
         b2:de:ed:67:6b:6c:71:87:ca:5e:c5:c9:b1:af:d9:2a:35:fe:
         0f:c3:83:0b:e5:e2:58:4a:22:71:10:e7:a7:30:52:7b:78:48:
         6a:a2:28:e2:b7:c6:2b:60:d0:4b:58:e4:ab:89:c7:76:55:14:
         b0:20:bd:5d:89:89:e4:cf:37:a7:d4:95:ba:13:5d:4a:91:2a:
         c2:db:3b:d9:c0:35:4c:5d:63:a8:cb:a9:5f:52:97:9b:27:04:
         7a:0e:6d:2a:c8:93:b7:a7:1a:59:e3:f3:15:b0:db:47:1d:94:
         f3:32:b7:21:b0:ed:4f:95:98:c9:b7:3a:bc:d2:a9:ae:5e:ec:
         3c:d7:ff:24:10:59:cf:83:2c:4b:59:a0:45:3e:d9:11:bf:5e:
         59:1f:1c:c4:40:b1:fa:68:1e:ee:3e:42:bb:00:9f:d4:6e:99:
         16:42:87:9f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUPyI7mBX9N5TV423n8uSZVDrL8S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDIxODE2MDFaFw0yNTA0MDExODIxMDFaMDMxMTAvBgNV
BAMTKDJGNzBBQjFBQUM1QkJGOTVDMEIzRDA2MDlFQkE4RkI2NjY4RkIzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+NGz7BuhN0HBfg7AaiC+zm0a
N6JFMJYEfBLQrD9Ov8/B5l27//KD9ZUMOJgJjguLtxBR+QsPL0SOWoaHS2pjniTL
BwUAjSynEqkKWTlhpNQLqbecIf7fEJnCfSm2S8WX1ZfE2kO17/QdNLThTAdchHYO
iqbAUTQjj0+C2nsj4YU2GH96070vD13rxGZFrWfzC8B9PFXYUtTa1c3L6EZJx5K5
IbShfFL5qAnurOzzlGd2cBYyLhlMNxYZxK9IFilyH7ceFU20uP9MUMKbXpFT2hSq
2BWNE+TlrbsHTOL5AxyOOnRFVjAgIzWr9Kw6EodF03uNW7o8xkKAxrSqSWxRAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvcKsarFu/lcCz
0GCeuo+2Zo+zszAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80ZkxDWHJpR29INTNwdlNaNDhGTFAya2VSeGhwZ1VvWTVD
dVpWM0RVOGhvVC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNGZMQ1hyaUdvSDUzcHZTWjQ4RkxQMmtlUnhocGdVb1k1
Q3VaVjNEVThob1QvMC8yRjcwQUIxQUFDNUJCRjk1QzBCM0QwNjA5RUJBOEZCNjY2
OEZCM0IzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzMDAwDQQCAAIwBwMF
ACgEeGgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCOIMA0GCSqGSIb3DQEBCwUA
A4IBAQBBk9Ye5NwSx5sM6nY+55lsjHEYqiKTDUVxbgddJMANlX+K71SZslmH3i7J
Zvhk0uY310pzUV+sUGisGcdg1WbsIpjRwENfZ4TsoVcboe0lkcT9w6zKnvnP/5qy
3u1na2xxh8pexcmxr9kqNf4Pw4ML5eJYSiJxEOenMFJ7eEhqoijit8YrYNBLWOSr
icd2VRSwIL1diYnkzzen1JW6E11KkSrC2zvZwDVMXWOoy6lfUpebJwR6Dm0qyJO3
pxpZ4/MVsNtHHZTzMrchsO1PlZjJtzq80qmuXuw81/8kEFnPgyxLWaBFPtkRv15Z
HxzEQLH6aB7uPkK7AJ/UbpkWQoef
-----END CERTIFICATE-----