Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.cer
File:                     4C98902FA2B24DD2F608B64BDECA68742431E9C5.cer (raw, json)
Hash identifier:          m99/CPAMXD3pmpJZ6/NR3Zl6Md+BNL7+pFt4b4I1QDU=
Subject key identifier:   4C:98:90:2F:A2:B2:4D:D2:F6:08:B6:4B:DE:CA:68:74:24:31:E9:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FC4BFFBF574ADBCF44874040FA1E2245D560C0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 16:51:02 +0000
Certificate not after:    Wed 12 Feb 2025 16:56:02 +0000
Subordinate resources:    AS: 271209
                          IP: 177.223.140.0/22
                          IP: 2804:77f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c4:bf:fb:f5:74:ad:bc:f4:48:74:04:0f:a1:e2:24:5d:56:0c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 16:51:02 2024 GMT
            Not After : Feb 12 16:56:02 2025 GMT
        Subject: CN=4C98902FA2B24DD2F608B64BDECA68742431E9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:61:68:f9:14:92:80:4d:15:72:e8:e6:cc:
                    78:b9:14:26:99:75:da:12:4d:01:9a:fb:ae:24:68:
                    a1:5a:e4:99:8b:eb:ef:56:d9:86:d3:d5:1c:5e:98:
                    a3:13:3f:c5:b1:0a:c5:07:75:c6:da:26:25:c1:97:
                    18:4a:74:a3:e9:86:19:02:01:21:35:81:92:9d:7a:
                    23:5d:fe:f0:a9:dc:d6:eb:00:da:67:ef:69:92:11:
                    27:38:2f:ca:6d:26:20:42:4c:e4:2f:88:b9:f9:c9:
                    3e:a5:ce:ec:d4:8d:fd:64:f0:3b:71:a8:19:05:c5:
                    30:7a:d7:bb:36:ac:63:02:bc:f6:ed:46:9e:74:97:
                    42:9c:ca:c2:c2:89:14:09:d7:15:f8:42:cc:8b:62:
                    c9:05:c2:d3:a4:5a:8c:cb:13:44:37:0e:d1:0d:0f:
                    bb:78:65:01:18:02:5a:d9:da:d8:76:3f:54:d7:56:
                    4b:71:61:a7:84:bc:8a:b9:8d:41:99:eb:45:6c:7f:
                    02:56:ed:20:65:2a:cd:61:72:79:fe:ee:e4:2e:87:
                    86:46:80:e6:9d:45:84:04:71:7d:17:a5:e7:73:08:
                    18:f0:c4:8a:ba:af:e6:d0:dd:91:77:fd:e9:0c:15:
                    81:3d:dd:44:a8:21:9f:45:35:4f:df:07:4d:22:87:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:98:90:2F:A2:B2:4D:D2:F6:08:B6:4B:DE:CA:68:74:24:31:E9:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/4C98902FA2B24DD2F608B64BDECA68742431E9C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.140.0/22
                IPv6:
                  2804:77f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271209

    Signature Algorithm: sha256WithRSAEncryption
         97:38:d0:dc:c4:6f:07:8d:e9:ac:d0:e7:e6:a1:c6:ad:8c:fd:
         77:78:14:e7:4b:86:1c:e0:64:aa:c8:78:0b:bf:a3:70:f9:84:
         da:40:02:6c:d2:eb:ec:ea:f5:1d:71:aa:3f:28:79:08:cf:45:
         35:10:3a:84:41:10:48:71:df:58:46:84:6a:2e:d7:94:68:7c:
         5b:cf:fa:65:fd:a7:b2:7f:05:60:e4:90:51:a8:68:a8:09:47:
         5d:16:50:8f:f4:2f:31:78:77:d9:b8:1b:e3:e3:11:3f:15:0a:
         0d:84:ad:c9:c9:b7:db:36:50:7a:df:13:e1:dc:63:70:37:b9:
         dd:f1:20:27:e2:d3:83:2c:2c:e1:eb:8e:a2:e2:69:3d:a3:f8:
         b9:d4:5b:c1:dc:eb:1c:e6:7a:0e:cc:7f:8a:bb:c2:96:aa:1e:
         91:ea:b0:db:9a:76:b4:b5:c9:77:e5:dc:f7:c7:6b:bf:09:81:
         be:92:67:d1:3e:cf:53:07:6a:18:1c:56:fa:de:e5:63:77:4f:
         d1:69:8a:14:ca:cc:e5:e4:ad:4b:9f:7f:ea:b6:43:38:3a:e9:
         a6:21:1c:2d:d0:cf:d7:41:1a:f5:3c:92:8f:9b:9b:7c:0a:f7:
         e7:72:a1:93:ed:1a:d4:65:50:3a:9c:01:9e:a5:18:46:cf:4d:
         e4:73:b6:f8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUD8S/+/V0rbz0SHQED6HiJF1WDAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTQxNjUxMDJaFw0yNTAyMTIxNjU2MDJaMDMxMTAvBgNV
BAMTKDRDOTg5MDJGQTJCMjRERDJGNjA4QjY0QkRFQ0E2ODc0MjQzMUU5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGWFo+RSSgE0VcujmzHi5FCaZ
ddoSTQGa+64kaKFa5JmL6+9W2YbT1RxemKMTP8WxCsUHdcbaJiXBlxhKdKPphhkC
ASE1gZKdeiNd/vCp3NbrANpn72mSESc4L8ptJiBCTOQviLn5yT6lzuzUjf1k8Dtx
qBkFxTB617s2rGMCvPbtRp50l0KcysLCiRQJ1xX4QsyLYskFwtOkWozLE0Q3DtEN
D7t4ZQEYAlrZ2th2P1TXVktxYaeEvIq5jUGZ60VsfwJW7SBlKs1hcnn+7uQuh4ZG
gOadRYQEcX0XpedzCBjwxIq6r+bQ3ZF3/ekMFYE93USoIZ9FNU/fB00ih4FZAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMmJAvorJN0vYI
tkveymh0JDHpxTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83dUZ4RTNhS1FzU3FQSExiTXV0RlFVMlN3cUxTSnJUU0xm
THdxa2JqM0ZvTC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN3VGeEUzYUtRc1NxUEhMYk11dEZRVTJTd3FMU0pyVFNM
Zkx3cWtiajNGb0wvMC80Qzk4OTAyRkEyQjI0REQyRjYwOEI2NEJERUNBNjg3NDI0
MzFFOUM1Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKx34wwDQQCAAIwBwMF
ACgEd/AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCNpMA0GCSqGSIb3DQEBCwUA
A4IBAQCXONDcxG8Hjems0OfmocatjP13eBTnS4Yc4GSqyHgLv6Nw+YTaQAJs0uvs
6vUdcao/KHkIz0U1EDqEQRBIcd9YRoRqLteUaHxbz/pl/aeyfwVg5JBRqGioCUdd
FlCP9C8xeHfZuBvj4xE/FQoNhK3JybfbNlB63xPh3GNwN7nd8SAn4tODLCzh646i
4mk9o/i51FvB3Osc5noOzH+Ku8KWqh6R6rDbmna0tcl35dz3x2u/CYG+kmfRPs9T
B2oYHFb63uVjd0/RaYoUyszl5K1Ln3/qtkM4OummIRwt0M/XQRr1PJKPm5t8Cvfn
cqGT7RrUZVA6nAGepRhGz03kc7b4
-----END CERTIFICATE-----