Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
File:                     5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer (raw, json)
Hash identifier:          4Dmq2uGe/0JKuFiertNxbDCdLxAbkKuv/Dk9Jw8kcIw=
Subject key identifier:   5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D798C39ADDADF87E07B715D07C9BE767D760130
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Mar 2024 13:15:27 +0000
Certificate not after:    Tue 25 Mar 2025 13:20:27 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:79:8c:39:ad:da:df:87:e0:7b:71:5d:07:c9:be:76:7d:76:01:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 26 13:15:27 2024 GMT
            Not After : Mar 25 13:20:27 2025 GMT
        Subject: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:3f:50:cd:48:20:1c:3d:86:f4:61:68:78:
                    77:5a:ad:e8:c3:5f:f1:6c:76:3c:31:f9:85:5d:e1:
                    f9:d7:67:63:58:3b:21:36:87:36:29:1e:0f:1d:8b:
                    51:0b:a2:23:d2:f1:1f:75:b5:7a:f6:9a:cd:f5:76:
                    e6:ec:9d:61:1b:28:2e:a7:0b:08:d5:f4:a5:65:64:
                    99:92:b2:80:30:9b:e8:61:e8:cc:d0:1f:61:a6:72:
                    9c:6d:d5:55:10:56:c7:a8:86:d2:a6:5a:27:d5:c3:
                    66:40:4a:e4:d7:4c:39:bb:30:cb:a9:b4:56:77:77:
                    79:51:d7:77:bb:db:f1:a9:82:3d:f7:0b:20:96:f4:
                    e7:67:81:e3:e0:fd:5e:0f:08:7f:01:93:f7:1b:c9:
                    22:71:17:f7:a6:42:7c:78:e8:25:fa:98:67:42:d0:
                    f7:d6:8b:84:0a:8c:29:af:bc:0d:cb:14:f0:a1:28:
                    63:5f:1c:75:32:93:53:d3:aa:66:02:78:b8:b1:6e:
                    9c:b7:ec:2c:65:5c:ee:7b:ca:a7:72:23:10:b5:9e:
                    36:a1:16:fe:02:e4:b7:3a:99:3c:04:4e:d8:af:e2:
                    11:13:c5:19:20:41:ea:32:d7:10:a8:1f:7e:18:5b:
                    1d:12:28:f4:58:46:f9:6d:d7:0e:90:2c:ca:c1:23:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         44:69:e3:23:92:3a:c9:32:09:0c:8d:c2:8f:9b:a2:2d:66:30:
         9a:f6:d9:ce:ee:32:58:61:35:ad:75:98:be:e9:01:50:6a:59:
         1f:f3:04:f8:18:36:19:82:03:ae:4e:0b:1f:45:47:19:0e:64:
         f2:d5:d7:42:40:4a:23:15:5c:5f:c0:47:ab:da:d0:42:64:06:
         99:13:9f:e5:f3:8f:2a:1c:95:f2:2a:4d:6e:0f:45:d2:36:9b:
         73:b5:03:40:97:72:df:c6:e5:67:1f:8b:d7:6f:d7:1f:25:c1:
         ed:fd:a3:6a:56:96:93:39:fb:5a:7c:a1:c1:21:d2:64:f2:e0:
         c6:f6:8a:86:ac:ca:a0:a3:99:b6:37:26:78:d9:27:69:1f:73:
         61:ec:70:7b:cb:44:41:3c:91:76:38:5c:88:73:f1:f5:5d:6f:
         52:03:e8:46:d2:4b:96:03:cb:b1:52:55:75:50:2d:05:69:37:
         3d:f4:17:41:dc:eb:0e:47:2e:3c:f7:c4:e1:66:0d:8f:b3:2f:
         69:c5:52:89:bb:30:3b:c6:b9:4c:58:4b:69:48:bd:f7:0a:8c:
         38:cb:8d:6c:47:53:be:10:40:bf:83:c7:8c:50:7a:64:17:04:
         2a:42:ab:6a:b8:b2:02:dd:f6:35:56:ea:27:72:d7:8f:fa:ef:
         16:77:8b:54
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUXXmMOa3a34fge3FdB8m+dn12ATAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjYxMzE1MjdaFw0yNTAzMjUxMzIwMjdaMDMxMTAvBgNV
BAMTKDVBNzMwRkM0QkM1QzFBQTdDQjUyQTIxOUY4N0JEMUUzQzZFRDc2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2T9QzUggHD2G9GFoeHdarejD
X/Fsdjwx+YVd4fnXZ2NYOyE2hzYpHg8di1ELoiPS8R91tXr2ms31dubsnWEbKC6n
CwjV9KVlZJmSsoAwm+hh6MzQH2Gmcpxt1VUQVseohtKmWifVw2ZASuTXTDm7MMup
tFZ3d3lR13e72/Gpgj33CyCW9OdngePg/V4PCH8Bk/cbySJxF/emQnx46CX6mGdC
0PfWi4QKjCmvvA3LFPChKGNfHHUyk1PTqmYCeLixbpy37CxlXO57yqdyIxC1njah
Fv4C5Lc6mTwETtiv4hETxRkgQeoy1xCoH34YWx0SKPRYRvlt1w6QLMrBI0DBAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRacw/EvFwap8tS
ohn4e9Hjxu12QzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BcUVEcXU1Uk5oOEZ0TWpleUdua1doUENWZ0xTMnVxZjR5
bVJoVUs3cjlFVi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0
eW1SaFVLN3I5RVYvMC81QTczMEZDNEJDNUMxQUE3Q0I1MkEyMTlGODdCRDFFM0M2
RUQ3NjQzLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAEtqaAwDQQCAAIwBwMF
ACgEWYQwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDBBmjAgMEInYwDQYJKoZIhvcN
AQELBQADggEBAERp4yOSOskyCQyNwo+boi1mMJr22c7uMlhhNa11mL7pAVBqWR/z
BPgYNhmCA65OCx9FRxkOZPLV10JASiMVXF/AR6va0EJkBpkTn+XzjyoclfIqTW4P
RdI2m3O1A0CXct/G5Wcfi9dv1x8lwe39o2pWlpM5+1p8ocEh0mTy4Mb2ioasyqCj
mbY3JnjZJ2kfc2HscHvLREE8kXY4XIhz8fVdb1ID6EbSS5YDy7FSVXVQLQVpNz30
F0Hc6w5HLjz3xOFmDY+zL2nFUom7MDvGuUxYS2lIvfcKjDjLjWxHU74QQL+Dx4xQ
emQXBCpCq2q4sgLd9jVW6idy14/67xZ3i1Q=
-----END CERTIFICATE-----