Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E49F9C30D94C42C7E2C135FD5D63978F1060243.cer
File:                     3E49F9C30D94C42C7E2C135FD5D63978F1060243.cer (raw, json)
Hash identifier:          eNWJYQYHg1irsDTPwKGAl85B+7gtljDwjSmb3jYCZIE=
Subject key identifier:   3E:49:F9:C3:0D:94:C4:2C:7E:2C:13:5F:D5:D6:39:78:F1:06:02:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E40D2161227AA799669CBA5001707C21644D921
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/3E49F9C30D94C42C7E2C135FD5D63978F1060243.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 18:08:31 +0000
Certificate not after:    Thu 16 Jan 2025 18:13:31 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:40:d2:16:12:27:aa:79:96:69:cb:a5:00:17:07:c2:16:44:d9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 18:08:31 2024 GMT
            Not After : Jan 16 18:13:31 2025 GMT
        Subject: CN=3E49F9C30D94C42C7E2C135FD5D63978F1060243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:77:66:49:f6:f4:6c:79:63:86:c8:f5:be:
                    be:25:3d:29:46:55:94:b9:3d:ee:2d:30:0b:57:ad:
                    a7:30:3d:bb:f9:e5:de:56:23:fe:34:43:fa:c0:be:
                    f4:bc:0a:58:ac:9b:94:e3:96:08:c8:0f:2a:8b:ba:
                    c4:af:e1:ad:86:8e:16:90:8c:f6:99:af:c0:75:69:
                    cf:8e:b5:1a:c7:fb:5f:81:58:8a:e7:a9:40:41:08:
                    8a:70:8c:75:78:76:27:d4:44:55:5c:2d:ef:61:f9:
                    4d:8c:3c:0a:3d:71:8c:47:1c:57:97:35:35:af:86:
                    43:ed:70:7d:63:09:ac:81:98:87:6e:bf:dc:e0:80:
                    81:42:ed:2d:70:cf:dc:9c:b0:b6:2b:25:64:44:55:
                    c9:4b:c1:e4:b9:a0:c4:0e:ee:ba:e5:23:1b:50:ea:
                    fe:7a:ed:6c:da:6d:08:08:19:82:e0:6f:a0:d7:a0:
                    e8:81:34:1e:47:2d:7d:b6:de:35:02:37:01:c4:6d:
                    86:0f:55:ad:fa:e6:a6:a3:2d:35:f7:29:8b:ff:6b:
                    b3:94:b5:60:a5:67:0b:85:0b:68:81:0e:bb:a0:db:
                    f9:a5:1d:dd:fb:d5:b6:db:52:e2:0b:ef:cd:cb:5e:
                    ca:72:ef:23:f2:0b:74:b8:f9:55:b0:7e:2e:4a:42:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:49:F9:C3:0D:94:C4:2C:7E:2C:13:5F:D5:D6:39:78:F1:06:02:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/3E49F9C30D94C42C7E2C135FD5D63978F1060243.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         52:86:8e:89:34:ef:92:59:c2:08:18:c0:fc:ba:30:b3:c5:59:
         a8:ae:7c:76:77:6d:b2:13:cc:23:22:69:5d:d3:f6:95:a3:04:
         28:f4:66:0f:95:c2:90:06:de:df:cd:8f:67:2c:a7:b6:ec:85:
         7c:58:f9:32:0e:89:e1:2b:fd:e8:97:df:0e:43:90:b8:fa:5d:
         11:ac:da:da:25:a3:c2:29:0f:c8:2f:d0:95:63:c9:8f:48:34:
         aa:c3:17:d9:60:4c:92:31:17:12:76:82:fa:d1:67:7f:c1:83:
         5e:d4:7c:7a:16:37:ca:40:92:43:1c:1c:df:8c:9a:e1:e8:f0:
         9c:58:71:79:cd:6b:24:5f:95:78:7c:06:f0:7c:eb:91:ce:40:
         8a:11:ec:95:5d:90:76:7c:11:b6:ce:13:8a:7a:4c:f4:95:ef:
         a1:e3:d2:ae:7e:a5:e7:aa:b1:a7:03:59:36:84:21:c2:2f:d0:
         73:9d:ba:82:a6:27:03:bb:94:0a:d5:00:92:ee:e6:32:d7:f6:
         1f:ae:f6:6d:76:61:4a:a4:20:f0:11:eb:f9:85:ff:ac:61:56:
         38:74:94:08:c9:ba:22:98:4c:04:7e:f5:16:1c:68:18:8e:77:
         a8:4e:c8:de:c4:6f:b2:97:59:cf:0a:7c:4a:bd:42:5c:0b:6e:
         ce:f4:88:53
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUTkDSFhInqnmWaculABcHwhZE2SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAxMTgxODA4MzFaFw0yNTAxMTYxODEzMzFaMDMxMTAvBgNV
BAMTKDNFNDlGOUMzMEQ5NEM0MkM3RTJDMTM1RkQ1RDYzOTc4RjEwNjAyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEHdmSfb0bHljhsj1vr4lPSlG
VZS5Pe4tMAtXracwPbv55d5WI/40Q/rAvvS8Clism5TjlgjIDyqLusSv4a2GjhaQ
jPaZr8B1ac+OtRrH+1+BWIrnqUBBCIpwjHV4difURFVcLe9h+U2MPAo9cYxHHFeX
NTWvhkPtcH1jCayBmIduv9zggIFC7S1wz9ycsLYrJWREVclLweS5oMQO7rrlIxtQ
6v567WzabQgIGYLgb6DXoOiBNB5HLX223jUCNwHEbYYPVa365qajLTX3KYv/a7OU
tWClZwuFC2iBDrug2/mlHd371bbbUuIL783LXspy7yPyC3S4+VWwfi5KQjXrAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+SfnDDZTELH4s
E1/V1jl48QYCQzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9Cb0drZjZjMVQ3a1Q3dktjVnpvR3VwSGI5UFpZSzRrNlRD
NDVMeVN6QndVNC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQm9Ha2Y2YzFUN2tUN3ZLY1Z6b0d1cEhiOVBaWUs0azZU
QzQ1THlTekJ3VTQvMC8zRTQ5RjlDMzBEOTRDNDJDN0UyQzEzNUZENUQ2Mzk3OEYx
MDYwMjQzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBbAwDQQCAAIwBwMF
ACgEPCwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA/SMA0GCSqGSIb3DQEBCwUA
A4IBAQBSho6JNO+SWcIIGMD8ujCzxVmornx2d22yE8wjImld0/aVowQo9GYPlcKQ
Bt7fzY9nLKe27IV8WPkyDonhK/3ol98OQ5C4+l0RrNraJaPCKQ/IL9CVY8mPSDSq
wxfZYEySMRcSdoL60Wd/wYNe1Hx6FjfKQJJDHBzfjJrh6PCcWHF5zWskX5V4fAbw
fOuRzkCKEeyVXZB2fBG2zhOKekz0le+h49KufqXnqrGnA1k2hCHCL9BznbqCpicD
u5QK1QCS7uYy1/YfrvZtdmFKpCDwEev5hf+sYVY4dJQIyboimEwEfvUWHGgYjneo
TsjexG+yl1nPCnxKvUJcC27O9IhT
-----END CERTIFICATE-----