Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.cer
File:                     4F38B9A9DB9C979FA8DE949E660050126FB77039.cer (raw, json)
Hash identifier:          KoLQQx9tkUs6psephvphMtkw3PrpRBOUUxWffvX+fPI=
Subject key identifier:   4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B9899FF8C285B1AABFFA65D25271F1902A9803C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 19:11:29 +0000
Certificate not after:    Mon 16 Sep 2024 19:16:29 +0000
Subordinate resources:    AS: 272193
                          IP: 170.247.108.0/22
                          IP: 2804:835c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:98:99:ff:8c:28:5b:1a:ab:ff:a6:5d:25:27:1f:19:02:a9:80:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 19:11:29 2023 GMT
            Not After : Sep 16 19:16:29 2024 GMT
        Subject: CN=4F38B9A9DB9C979FA8DE949E660050126FB77039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:f3:15:73:5d:67:b7:3b:c5:eb:18:fb:93:
                    be:c9:6a:4b:98:25:06:f4:a3:0a:b0:5e:9d:5c:5b:
                    97:82:38:85:d7:18:f8:30:7b:2c:07:e8:8d:f9:81:
                    88:c5:08:93:da:cb:0d:71:f2:46:f7:11:85:4c:84:
                    6c:c0:0e:2e:39:4a:7b:1b:fb:bb:17:de:df:99:0a:
                    f2:16:58:bd:c5:64:66:03:a1:a2:1d:69:2b:67:3a:
                    8f:0c:f0:56:ab:6d:d7:f0:ba:03:73:ee:2b:30:28:
                    00:b5:3a:77:12:b7:75:4d:fb:c7:9c:58:7d:17:dd:
                    22:fe:e7:c7:43:72:d2:ff:5f:fc:6e:0b:37:6e:83:
                    1d:ee:37:d2:00:35:98:85:ea:c8:29:23:ec:12:56:
                    b0:a6:d8:a6:7a:e7:ce:9e:ba:ba:00:3d:79:d9:23:
                    85:b1:66:c0:38:33:20:0d:bf:28:31:68:7c:47:40:
                    d7:2e:8f:89:6f:fe:64:c4:12:06:b3:66:cc:00:d9:
                    71:c1:83:dc:b0:a4:98:1b:cd:0a:72:ae:7d:c9:20:
                    28:31:b7:b3:bb:54:9c:b7:c1:bd:86:cd:25:af:c2:
                    c4:e0:21:7d:90:60:23:20:f2:75:fd:a1:e2:f2:20:
                    cd:f3:25:55:d0:f7:7e:ad:ea:3e:be:2c:cd:da:f9:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:38:B9:A9:DB:9C:97:9F:A8:DE:94:9E:66:00:50:12:6F:B7:70:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/0/4F38B9A9DB9C979FA8DE949E660050126FB77039.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.108.0/22
                IPv6:
                  2804:835c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272193

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:b2:d7:aa:c4:c6:6c:42:3c:16:e1:cb:bc:16:ce:4c:de:
         1f:c1:e4:7e:86:a2:00:3c:05:44:2e:12:0d:f1:93:ae:71:74:
         96:51:b3:04:29:eb:ac:09:a6:0e:56:52:d2:ef:bb:26:fc:47:
         c5:97:3c:79:5e:c1:49:b5:06:58:34:bb:bc:6d:15:81:21:fc:
         7c:2a:f2:d1:30:80:0b:8a:3d:37:cd:e2:71:7a:e5:86:db:58:
         a4:20:83:b6:b8:f7:3e:df:7d:22:85:cb:dd:12:a3:97:98:2e:
         37:87:50:77:68:e8:11:60:33:17:e8:eb:25:88:7a:10:55:64:
         b1:9b:c8:7e:b3:e1:25:7a:da:ec:0b:a1:e1:2d:b0:d8:7b:5e:
         9f:98:20:ce:41:c7:69:17:2f:0d:88:a5:7b:17:ba:24:ac:9d:
         c3:3b:ac:99:22:a0:74:d0:01:9e:73:dc:a2:68:6a:08:22:19:
         29:0a:69:2b:80:de:20:4f:1e:b2:8e:4b:c4:32:93:36:20:84:
         b6:27:1e:9b:c5:ff:66:7b:b6:4f:d5:d4:19:e2:29:d4:97:df:
         fa:cb:f8:ff:06:58:9f:4d:89:ea:7f:f8:32:c0:20:ec:0b:37:
         c0:0f:8d:21:2b:52:af:fb:55:89:b5:65:4b:0c:2d:43:0a:7f:
         a8:eb:96:8e
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUS5iZ/4woWxqr/6ZdJScfGQKpgDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTgxOTExMjlaFw0yNDA5MTYxOTE2MjlaMDMxMTAvBgNV
BAMTKDRGMzhCOUE5REI5Qzk3OUZBOERFOTQ5RTY2MDA1MDEyNkZCNzcwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwPMVc11ntzvF6xj7k77JakuY
JQb0owqwXp1cW5eCOIXXGPgweywH6I35gYjFCJPayw1x8kb3EYVMhGzADi45Snsb
+7sX3t+ZCvIWWL3FZGYDoaIdaStnOo8M8FarbdfwugNz7iswKAC1OncSt3VN+8ec
WH0X3SL+58dDctL/X/xuCzdugx3uN9IANZiF6sgpI+wSVrCm2KZ6586euroAPXnZ
I4WxZsA4MyANvygxaHxHQNcuj4lv/mTEEgazZswA2XHBg9ywpJgbzQpyrn3JICgx
t7O7VJy3wb2GzSWvwsTgIX2QYCMg8nX9oeLyIM3zJVXQ936t6j6+LM3a+UBLAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPOLmp25yXn6je
lJ5mAFASb7dwOTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GVm82eENmU1diaFNBS2RMSlo1R3lDZ2NTY0NBR3F1dTFl
WVZld0dGc01qNy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRlZvNnhDZlNXYmhTQUtkTEpaNUd5Q2djU2NDQUdxdXUx
ZVlWZXdHRnNNajcvMC80RjM4QjlBOURCOUM5NzlGQThERTk0OUU2NjAwNTAxMjZG
Qjc3MDM5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKq92wwDQQCAAIwBwMF
ACgEg1wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCdBMA0GCSqGSIb3DQEBCwUA
A4IBAQCd9LLXqsTGbEI8FuHLvBbOTN4fweR+hqIAPAVELhIN8ZOucXSWUbMEKeus
CaYOVlLS77sm/EfFlzx5XsFJtQZYNLu8bRWBIfx8KvLRMIALij03zeJxeuWG21ik
IIO2uPc+330ihcvdEqOXmC43h1B3aOgRYDMX6OsliHoQVWSxm8h+s+EletrsC6Hh
LbDYe16fmCDOQcdpFy8NiKV7F7okrJ3DO6yZIqB00AGec9yiaGoIIhkpCmkrgN4g
Tx6yjkvEMpM2IIS2Jx6bxf9me7ZP1dQZ4inUl9/6y/j/BlifTYnqf/gywCDsCzfA
D40hK1Kv+1WJtWVLDC1DCn+o65aO
-----END CERTIFICATE-----