Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
File:                     4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer (raw, json)
Hash identifier:          Jwgddy5c0kVehI27lXGYwItc0gchUL6gONo2JVYucho=
Subject key identifier:   4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EDA1C5BEB1B197C80C4DA4428D6F3FFDB82F5AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 12:23:09 +0000
Certificate not after:    Fri 21 Feb 2025 12:28:09 +0000
Subordinate resources:    AS: 267325
                          IP: 45.233.176.0/22
                          IP: 2804:4bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:da:1c:5b:eb:1b:19:7c:80:c4:da:44:28:d6:f3:ff:db:82:f5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 12:23:09 2024 GMT
            Not After : Feb 21 12:28:09 2025 GMT
        Subject: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:78:1b:79:29:05:93:05:55:94:da:0a:91:
                    fb:dd:89:05:37:31:f1:8b:16:ad:b4:43:c8:32:4a:
                    f1:9d:a5:d6:e9:44:c3:30:30:85:65:49:d3:6e:e5:
                    81:ce:66:e0:8e:b4:d8:d7:3c:20:d3:83:d8:03:ed:
                    e7:13:e2:f7:e7:41:cf:84:2c:eb:5e:bd:3a:cf:52:
                    7e:38:a2:23:d5:5a:eb:f0:f7:58:18:7e:a4:a9:4e:
                    85:14:19:c1:f5:c5:09:1f:65:dd:28:e0:97:aa:1c:
                    75:07:05:4d:12:3a:46:70:8e:2a:b3:9a:58:eb:6e:
                    26:46:eb:e7:4d:fc:78:6c:b4:87:6a:ef:7c:09:e4:
                    dc:03:e9:be:ff:20:36:1a:89:80:13:8a:a3:0b:43:
                    d9:26:0e:3a:b8:b4:3a:78:6e:52:1a:6e:8c:22:35:
                    b2:e6:f3:0a:96:fa:05:b4:e1:da:3f:0b:2a:38:a7:
                    2a:73:93:39:db:fc:07:ca:8c:52:d4:d4:08:8c:c9:
                    2b:95:07:d2:d9:dd:be:a5:cc:39:75:f8:7a:b1:27:
                    ef:3f:81:4e:2e:21:14:3d:2c:60:85:fe:c4:58:33:
                    32:dc:00:48:0c:75:92:b2:e6:31:c1:88:a4:fb:2a:
                    e6:80:20:8c:ed:b2:08:f2:35:5b:64:50:14:72:29:
                    f8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.176.0/22
                IPv6:
                  2804:4bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267325

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:3e:cb:40:6a:4a:e3:da:a6:4e:23:ac:4a:2e:c8:69:4f:
         89:f0:ae:ff:07:d8:52:b7:60:b4:cb:66:c7:9d:e2:60:e0:19:
         88:05:46:12:15:1b:e0:c5:b0:0e:4c:b0:1e:83:f5:66:3e:af:
         75:93:bd:16:07:99:71:70:86:d3:27:c1:c9:d8:a6:e4:93:64:
         04:1f:2c:63:83:7b:0e:48:9c:ed:84:24:2e:2c:bb:f5:67:89:
         78:9a:2f:cb:58:ad:8e:01:9d:80:c2:70:4f:87:92:39:f4:29:
         32:8c:72:a8:e0:5d:e7:39:a2:c7:3c:36:58:eb:9a:4c:78:1e:
         d4:cc:b1:82:ee:4b:6e:62:59:54:ca:49:1e:75:86:a2:be:c6:
         69:c3:a1:7f:26:d5:73:7d:c1:25:f7:e7:a3:58:cd:2b:5d:56:
         20:77:ab:f8:be:d6:7e:a2:bc:bc:52:54:28:d9:db:4c:8f:ba:
         0e:8b:a6:59:54:54:d0:b0:de:c3:f8:fa:dd:15:34:8c:8a:5c:
         f3:2a:37:57:97:df:a0:cf:d4:c7:15:7d:39:4b:f8:f9:73:2a:
         43:54:da:8c:77:8b:24:66:41:18:ae:98:1b:29:d9:a1:db:32:
         f4:f9:7c:fb:a5:5b:b1:a7:b2:35:ea:ac:50:da:a6:74:a8:c4:
         03:41:c3:02
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIUftocW+sbGXyAxNpEKNbz/9uC9aswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjMxMjIzMDlaFw0yNTAyMjExMjI4MDlaMDMxMTAvBgNV
BAMTKDRFOEQ0QzE3RDlCM0E1MTYzNTM2Njk1RjBCMkYxRjBDMEIyNEE3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTXgbeSkFkwVVlNoKkfvdiQU3
MfGLFq20Q8gySvGdpdbpRMMwMIVlSdNu5YHOZuCOtNjXPCDTg9gD7ecT4vfnQc+E
LOtevTrPUn44oiPVWuvw91gYfqSpToUUGcH1xQkfZd0o4JeqHHUHBU0SOkZwjiqz
mljrbiZG6+dN/HhstIdq73wJ5NwD6b7/IDYaiYATiqMLQ9kmDjq4tDp4blIabowi
NbLm8wqW+gW04do/Cyo4pypzkznb/AfKjFLU1AiMySuVB9LZ3b6lzDl1+HqxJ+8/
gU4uIRQ9LGCF/sRYMzLcAEgMdZKy5jHBiKT7KuaAIIztsgjyNVtkUBRyKfhRAgMB
AAGjggMZMIIDFTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROjUwX2bOlFjU2
aV8LLx8MCySnsTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9kUHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQx
ZWY0UGlLd243LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9kUHpSZWpUeUFNOWFNOG9ZR0RpdGVYRG5MRmloYVJ1ekQx
ZWY0UGlLd243LzAvNEU4RDRDMTdEOUIzQTUxNjM1MzY2OTVGMEIyRjFGMEMwQjI0
QTdCMS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLemwMA0EAgACMAcDBQAo
BEu0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQUPTANBgkqhkiG9w0BAQsFAAOC
AQEAXNs+y0BqSuPapk4jrEouyGlPifCu/wfYUrdgtMtmx53iYOAZiAVGEhUb4MWw
DkywHoP1Zj6vdZO9FgeZcXCG0yfBydim5JNkBB8sY4N7Dkic7YQkLiy79WeJeJov
y1itjgGdgMJwT4eSOfQpMoxyqOBd5zmixzw2WOuaTHge1Myxgu5LbmJZVMpJHnWG
or7GacOhfybVc33BJffno1jNK11WIHer+L7WfqK8vFJUKNnbTI+6DoumWVRU0LDe
w/j63RU0jIpc8yo3V5ffoM/UxxV9OUv4+XMqQ1TajHeLJGZBGK6YGynZodsy9Pl8
+6VbsaeyNeqsUNqmdKjEA0HDAg==
-----END CERTIFICATE-----