Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.cer
File:                     32922A104B4CEB7FF3EA739E5F3036AFA1C72670.cer (raw, json)
Hash identifier:          m31arrGFUvrTR2b6jOYd5jFkUhDO7Jib6/D8NWoFy0k=
Subject key identifier:   32:92:2A:10:4B:4C:EB:7F:F3:EA:73:9E:5F:30:36:AF:A1:C7:26:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A586FD8751FDF5DC42E29008A2042747B5A2E2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 18:29:36 +0000
Certificate not after:    Thu 20 Feb 2025 18:34:36 +0000
Subordinate resources:    AS: 273432
                          IP: 2804:8e88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:58:6f:d8:75:1f:df:5d:c4:2e:29:00:8a:20:42:74:7b:5a:2e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 18:29:36 2024 GMT
            Not After : Feb 20 18:34:36 2025 GMT
        Subject: CN=32922A104B4CEB7FF3EA739E5F3036AFA1C72670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:2e:db:96:a0:0d:18:b5:9f:96:df:95:8d:
                    fe:79:66:8d:83:67:98:37:fa:53:c8:b4:6d:59:35:
                    b4:a5:03:6d:bd:9b:ae:da:92:89:23:22:9d:44:2e:
                    c6:ac:fc:83:0e:47:be:52:70:fc:63:12:c4:19:13:
                    07:be:c6:0f:90:af:16:87:ed:01:75:bb:ef:0f:0d:
                    5d:4a:e2:e9:3f:cb:16:02:1d:db:cd:eb:34:e3:22:
                    0a:ad:07:04:56:7d:14:15:74:75:6d:46:59:1b:5f:
                    e5:ed:87:a1:3f:82:f8:36:57:2f:d5:ce:e6:be:da:
                    af:be:6c:68:cd:48:02:2d:c7:cf:fc:d8:01:0b:1b:
                    67:bd:9f:b2:99:bf:35:23:5f:5e:c9:05:e4:f9:5b:
                    98:ae:32:73:88:19:cb:c6:2d:d4:64:88:87:20:6b:
                    00:48:7f:56:cc:aa:36:f1:71:f4:d7:bd:ee:81:7a:
                    76:13:70:e6:3d:d0:44:64:e1:37:74:7d:7a:f4:65:
                    7f:d9:11:a7:3e:da:74:85:62:61:a0:32:58:db:32:
                    dc:74:4f:a4:9c:c5:7c:f5:99:8f:61:6c:5f:d8:cc:
                    0d:3b:e7:87:63:fd:d2:bf:c5:09:30:a4:2a:f2:f0:
                    22:dd:b5:ad:f2:dc:99:15:29:59:b8:14:cc:2a:d8:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:92:2A:10:4B:4C:EB:7F:F3:EA:73:9E:5F:30:36:AF:A1:C7:26:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/0/32922A104B4CEB7FF3EA739E5F3036AFA1C72670.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273432

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:58:db:d8:af:e0:50:fc:0a:86:ed:59:df:21:74:2e:be:
         41:fa:00:04:c3:5f:8d:1c:67:e0:b3:18:ff:af:5f:60:f7:f6:
         5e:3d:3d:ec:f2:7f:c6:e3:c3:17:c4:62:f6:cb:0a:9a:cd:8a:
         cb:b7:e8:f8:4a:c2:98:4c:65:13:c0:ee:08:06:a9:9e:df:5a:
         8b:4a:32:d3:3c:ef:79:b8:95:70:29:94:3d:48:ca:ae:55:4e:
         65:65:a7:6f:33:b8:97:3a:1e:58:b8:19:e4:26:6d:3c:62:54:
         c9:8b:3c:12:4e:ca:00:f2:0b:8d:eb:81:68:3c:92:96:17:75:
         9b:7b:91:d8:59:89:f6:c6:37:9d:78:55:50:f5:0e:a3:8d:b1:
         fa:29:8b:ff:e5:2f:21:bd:94:1b:80:b8:e5:5f:ac:99:35:7b:
         44:86:7f:1b:59:4c:2e:5a:52:1e:c6:22:8b:ad:75:f5:e9:05:
         57:dd:2d:84:d3:35:04:e7:2e:c1:d3:93:cd:5b:34:2c:46:3a:
         4e:88:4e:85:ed:64:66:a5:56:6a:a2:7d:ed:4d:0c:3f:5d:79:
         6c:58:6e:4b:58:eb:b6:31:1b:78:7d:37:52:1b:84:eb:20:dd:
         ad:82:89:f3:79:ed:92:a0:e9:5c:01:0c:be:ad:2c:5d:7a:c2:
         c5:b9:6e:fb
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUClhv2HUf313ELikAiiBCdHtaLiowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjIxODI5MzZaFw0yNTAyMjAxODM0MzZaMDMxMTAvBgNV
BAMTKDMyOTIyQTEwNEI0Q0VCN0ZGM0VBNzM5RTVGMzAzNkFGQTFDNzI2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVi7blqANGLWflt+Vjf55Zo2D
Z5g3+lPItG1ZNbSlA229m67akokjIp1ELsas/IMOR75ScPxjEsQZEwe+xg+QrxaH
7QF1u+8PDV1K4uk/yxYCHdvN6zTjIgqtBwRWfRQVdHVtRlkbX+Xth6E/gvg2Vy/V
zua+2q++bGjNSAItx8/82AELG2e9n7KZvzUjX17JBeT5W5iuMnOIGcvGLdRkiIcg
awBIf1bMqjbxcfTXve6BenYTcOY90ERk4Td0fXr0ZX/ZEac+2nSFYmGgMljbMtx0
T6ScxXz1mY9hbF/YzA0754dj/dK/xQkwpCry8CLdta3y3JkVKVm4FMwq2A+jAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQykioQS0zrf/Pq
c55fMDavoccmcDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Dd2ljRnJhaFE1SGt3UENpcndVdEQ0TTlCcGFGMmJ1UHcx
ZVdhalN5TFRCTC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Dd2ljRnJhaFE1SGt3UENpcndVdEQ0TTlCcGFGMmJ1UHcx
ZVdhalN5TFRCTC8wLzMyOTIyQTEwNEI0Q0VCN0ZGM0VBNzM5RTVGMzAzNkFGQTFD
NzI2NzAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEjogwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCwYMA0GCSqGSIb3DQEBCwUAA4IBAQBvEVjb2K/gUPwK
hu1Z3yF0Lr5B+gAEw1+NHGfgsxj/r19g9/ZePT3s8n/G48MXxGL2ywqazYrLt+j4
SsKYTGUTwO4IBqme31qLSjLTPO95uJVwKZQ9SMquVU5lZadvM7iXOh5YuBnkJm08
YlTJizwSTsoA8guN64FoPJKWF3Wbe5HYWYn2xjedeFVQ9Q6jjbH6KYv/5S8hvZQb
gLjlX6yZNXtEhn8bWUwuWlIexiKLrXX16QVX3S2E0zUE5y7B05PNWzQsRjpOiE6F
7WRmpVZqon3tTQw/XXlsWG5LWOu2MRt4fTdSG4TrIN2tgonzee2SoOlcAQy+rSxd
esLFuW77
-----END CERTIFICATE-----