Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer
File:                     34480FB5377B9D616C84A3C34C05E236C464E996.cer (raw, json)
Hash identifier:          f2oUiN0A4BvktFOkNxOQKTXscs4nrlh3ixDTDc3TIsI=
Subject key identifier:   34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       130439892621BDA583189E692BA68451D1B126CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 11:45:58 +0000
Certificate not after:    Mon 31 Mar 2025 11:50:58 +0000
Subordinate resources:    AS: 271514
                          IP: 190.102.44.0/22
                          IP: 2804:7cb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:04:39:89:26:21:bd:a5:83:18:9e:69:2b:a6:84:51:d1:b1:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 11:45:58 2024 GMT
            Not After : Mar 31 11:50:58 2025 GMT
        Subject: CN=34480FB5377B9D616C84A3C34C05E236C464E996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:8a:82:83:9e:1b:8f:bf:7d:e1:b3:b4:db:
                    b1:fa:63:11:0b:2a:60:68:60:25:01:0a:69:85:86:
                    15:e3:a6:b5:a2:b8:f4:f5:1b:37:f1:71:49:61:90:
                    74:0d:ff:4a:36:a5:a7:09:6a:c3:48:89:1c:d3:7d:
                    39:c8:ef:b7:61:51:56:69:6f:97:e5:d2:f6:30:4e:
                    bd:8c:35:c8:a9:3e:66:47:1d:98:91:25:ce:f2:8f:
                    47:55:d9:51:5c:a8:2e:24:49:8c:6e:a1:c5:bd:7a:
                    2d:d3:f2:c0:bb:bb:80:5a:dd:c7:6d:31:aa:15:de:
                    3b:e9:49:aa:7c:3f:a5:13:0a:0e:22:69:42:11:23:
                    5f:08:6e:e9:b1:7e:f1:51:6e:36:c0:85:d7:c2:12:
                    cf:7f:37:d3:f8:7f:5d:94:02:71:3a:be:00:ca:09:
                    2d:75:b5:3f:2d:ee:78:ba:db:8c:3e:9b:c2:c5:1f:
                    1c:cf:20:1f:ed:b2:bb:95:7e:64:d0:91:de:8a:3a:
                    98:7f:fd:cb:3c:d9:45:8c:4a:20:61:14:83:4c:ac:
                    c4:00:c2:9b:d9:e8:ed:20:e9:b4:a2:49:4b:ec:5f:
                    0e:8c:70:d0:f6:ab:1e:23:0a:72:77:48:db:8c:b0:
                    de:17:2a:3e:5a:d5:0d:a6:cd:0b:e6:ea:9e:b0:e6:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.44.0/22
                IPv6:
                  2804:7cb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271514

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:77:46:78:6a:aa:14:9c:60:b8:21:8c:f4:83:b4:62:89:
         f0:86:72:d6:65:e7:13:88:28:62:4d:06:c7:8f:4a:19:b1:3d:
         2e:48:04:49:fc:c9:e2:d5:94:9c:a0:0a:99:f5:53:13:8d:07:
         a4:55:5e:4f:86:88:54:11:86:1d:3f:4a:4c:56:52:da:84:d1:
         5c:b8:1a:7d:0c:76:3a:ce:de:e5:0c:f4:b2:c2:f5:cd:a3:41:
         97:62:55:82:ca:bf:ec:61:20:24:ca:90:ef:25:d5:10:74:ff:
         86:1d:28:b3:ad:97:7b:f3:65:9c:6d:84:6c:21:e3:10:d8:89:
         33:b6:5b:c0:f7:a7:5f:a7:4b:76:28:82:af:f7:c7:ff:81:c0:
         35:72:98:8b:dc:54:e0:df:49:8d:e9:20:94:62:9a:60:eb:6e:
         14:93:48:18:53:bf:14:65:ae:47:37:3b:71:3f:4c:46:05:d6:
         c9:8d:b7:b9:44:0c:74:f9:cf:52:13:7d:68:e8:1c:6f:2c:bf:
         7e:fb:4a:61:0a:f0:ce:92:d5:a9:cf:27:1b:51:c2:d4:11:47:
         06:81:43:97:e5:56:68:ca:50:04:50:54:63:65:ce:12:22:12:
         87:8a:38:c8:f0:0e:39:12:d2:37:0b:2c:ba:5e:6f:35:df:29:
         39:07:36:47
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUEwQ5iSYhvaWDGJ5pK6aEUdGxJsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDExMTQ1NThaFw0yNTAzMzExMTUwNThaMDMxMTAvBgNV
BAMTKDM0NDgwRkI1Mzc3QjlENjE2Qzg0QTNDMzRDMDVFMjM2QzQ2NEU5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuYqCg54bj7994bO027H6YxEL
KmBoYCUBCmmFhhXjprWiuPT1GzfxcUlhkHQN/0o2pacJasNIiRzTfTnI77dhUVZp
b5fl0vYwTr2MNcipPmZHHZiRJc7yj0dV2VFcqC4kSYxuocW9ei3T8sC7u4Ba3cdt
MaoV3jvpSap8P6UTCg4iaUIRI18IbumxfvFRbjbAhdfCEs9/N9P4f12UAnE6vgDK
CS11tT8t7ni624w+m8LFHxzPIB/tsruVfmTQkd6KOph//cs82UWMSiBhFINMrMQA
wpvZ6O0g6bSiSUvsXw6McND2qx4jCnJ3SNuMsN4XKj5a1Q2mzQvm6p6w5tePAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0SA+1N3udYWyE
o8NMBeI2xGTpljAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yejExSGVnNlN5SEZhN3VQSERva1lwNmNiQ0pUblUyQkZu
cGd3bWZaSjlkSi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMnoxMUhlZzZTeUhGYTd1UEhEb2tZcDZjYkNKVG5VMkJG
bnBnd21mWko5ZEovMC8zNDQ4MEZCNTM3N0I5RDYxNkM4NEEzQzM0QzA1RTIzNkM0
NjRFOTk2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK+ZiwwDQQCAAIwBwMF
ACgEfLgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCSaMA0GCSqGSIb3DQEBCwUA
A4IBAQAzDndGeGqqFJxguCGM9IO0YonwhnLWZecTiChiTQbHj0oZsT0uSARJ/Mni
1ZScoAqZ9VMTjQekVV5PhohUEYYdP0pMVlLahNFcuBp9DHY6zt7lDPSywvXNo0GX
YlWCyr/sYSAkypDvJdUQdP+GHSizrZd782WcbYRsIeMQ2IkztlvA96dfp0t2KIKv
98f/gcA1cpiL3FTg30mN6SCUYppg624Uk0gYU78UZa5HNztxP0xGBdbJjbe5RAx0
+c9SE31o6BxvLL9++0phCvDOktWpzycbUcLUEUcGgUOX5VZoylAEUFRjZc4SIhKH
ijjI8A45EtI3Cyy6Xm813yk5BzZH
-----END CERTIFICATE-----