Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer
File:                     81E42B1CBE562AD0450D7F0F66931ED951752ECD.cer (raw, json)
Hash identifier:          /7kuHJz5kLjQjGT5xaE6goTagzYjlNyhmY1prvwSoxs=
Subject key identifier:   81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1717E172A14F1B21FB6ADEE74821C33D899C8D93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 19:45:21 +0000
Certificate not after:    Wed 25 Dec 2024 19:50:21 +0000
Subordinate resources:    AS: 266240
                          IP: 192.140.116.0/22
                          IP: 2804:3ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:17:e1:72:a1:4f:1b:21:fb:6a:de:e7:48:21:c3:3d:89:9c:8d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 19:45:21 2023 GMT
            Not After : Dec 25 19:50:21 2024 GMT
        Subject: CN=81E42B1CBE562AD0450D7F0F66931ED951752ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:9d:67:ea:9e:a6:24:12:82:08:6f:c4:7f:
                    94:ed:72:d8:22:27:13:1e:1d:55:ae:97:e6:db:c1:
                    a7:63:da:6f:85:99:a3:a3:19:b2:8a:51:23:3d:77:
                    5c:8e:5a:10:63:7f:e9:1e:89:29:28:e6:7c:f9:48:
                    20:01:b4:be:95:3f:75:fc:75:13:7e:43:d3:d3:3c:
                    fc:83:b6:e3:e1:d3:c9:8a:1b:ee:5a:6a:c0:6a:b9:
                    b7:66:a0:31:90:b6:57:3c:9e:9a:8b:a7:cf:02:fe:
                    d3:c8:84:ff:ef:2b:90:ed:79:88:8a:6d:93:0c:86:
                    1d:11:0d:dd:82:6b:fa:3c:4b:c4:85:71:fa:f5:9e:
                    d7:c9:23:69:5a:c1:ae:ba:f4:b0:e4:fd:7c:7a:a1:
                    a4:35:62:91:01:1b:2b:ab:b2:70:26:7b:fb:a3:2d:
                    3d:00:fe:bf:45:6c:e4:24:70:8c:f4:b4:a0:f5:34:
                    3a:14:9f:ba:1c:0a:ba:c9:8f:55:f9:18:dc:a5:fc:
                    ac:7b:b9:e2:58:f8:46:86:1e:f3:62:b9:dc:d3:b4:
                    76:ef:a8:58:27:5a:1c:04:4e:15:78:2d:ac:65:ac:
                    d8:12:40:82:61:93:3c:4d:c8:70:72:0c:6d:60:31:
                    fa:43:be:30:4d:e0:e1:38:b5:d0:4c:70:5f:99:4c:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:E4:2B:1C:BE:56:2A:D0:45:0D:7F:0F:66:93:1E:D9:51:75:2E:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5KmGb7ewX6qGJx4DVsub4UA5MPzhnKCzZwRAJcHQXtWh/0/81E42B1CBE562AD0450D7F0F66931ED951752ECD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.116.0/22
                IPv6:
                  2804:3ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266240

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:13:fc:04:44:7c:fa:9d:a6:f3:70:20:bc:57:b5:51:54:
         2c:47:ce:81:dc:5c:85:1b:55:01:c2:42:90:a4:4d:3f:2c:a2:
         01:50:3e:49:8b:14:44:15:fe:8d:6d:3c:b7:98:4e:4b:59:2c:
         ec:7a:a4:f4:f1:ce:f1:be:65:9c:c6:02:8b:aa:17:15:df:56:
         50:05:07:18:a0:f2:c6:af:6d:77:46:65:ce:33:b5:1d:0e:e1:
         9a:5f:2a:7b:19:a8:f6:87:a1:d8:c1:ff:01:28:47:bc:9b:e1:
         5a:9a:0c:fe:c7:67:30:33:f7:50:5c:7b:ac:cf:3d:7b:7d:d4:
         ea:2e:2a:01:b0:f6:df:54:55:9a:73:0f:66:fa:b1:f6:d1:80:
         86:ef:ce:2d:cf:62:ba:3c:a4:9f:d4:23:cd:ff:2a:ed:e5:23:
         11:5c:4c:d0:7c:cb:e1:f6:56:25:d8:86:d8:54:eb:be:a1:30:
         f1:a6:f2:d0:fe:72:f3:6f:dc:61:6c:53:d6:75:62:b0:19:09:
         18:12:a3:1d:d7:aa:20:5b:a5:0b:89:17:77:e3:1e:0e:10:6d:
         80:46:4a:57:04:1e:83:e8:c6:bb:08:2e:34:30:ed:a7:df:80:
         9e:85:9a:52:24:3a:2d:3f:75:4c:f5:b5:29:d5:54:24:b5:59:
         80:b9:2b:0f
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUFxfhcqFPGyH7at7nSCHDPYmcjZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjcxOTQ1MjFaFw0yNDEyMjUxOTUwMjFaMDMxMTAvBgNV
BAMTKDgxRTQyQjFDQkU1NjJBRDA0NTBEN0YwRjY2OTMxRUQ5NTE3NTJFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9up1n6p6mJBKCCG/Ef5Ttctgi
JxMeHVWul+bbwadj2m+FmaOjGbKKUSM9d1yOWhBjf+keiSko5nz5SCABtL6VP3X8
dRN+Q9PTPPyDtuPh08mKG+5aasBqubdmoDGQtlc8npqLp88C/tPIhP/vK5DteYiK
bZMMhh0RDd2Ca/o8S8SFcfr1ntfJI2lawa669LDk/Xx6oaQ1YpEBGyursnAme/uj
LT0A/r9FbOQkcIz0tKD1NDoUn7ocCrrJj1X5GNyl/Kx7ueJY+EaGHvNiudzTtHbv
qFgnWhwEThV4LaxlrNgSQIJhkzxNyHByDG1gMfpDvjBN4OE4tdBMcF+ZTPfzAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSB5CscvlYq0EUN
fw9mkx7ZUXUuzTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81S21HYjdld1g2cUdKeDREVnN1YjRVQTVNUHpobktDelp3
UkFKY0hRWHRXaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUttR2I3ZXdYNnFHSng0RFZzdWI0VUE1TVB6aG5LQ3pa
d1JBSmNIUVh0V2gvMC84MUU0MkIxQ0JFNTYyQUQwNDUwRDdGMEY2NjkzMUVEOTUx
NzUyRUNELm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALAjHQwDQQCAAIwBwMF
ACgEPOAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBAAMA0GCSqGSIb3DQEBCwUA
A4IBAQB7bBP8BER8+p2m83AgvFe1UVQsR86B3FyFG1UBwkKQpE0/LKIBUD5JixRE
Ff6NbTy3mE5LWSzseqT08c7xvmWcxgKLqhcV31ZQBQcYoPLGr213RmXOM7UdDuGa
Xyp7Gaj2h6HYwf8BKEe8m+Famgz+x2cwM/dQXHuszz17fdTqLioBsPbfVFWacw9m
+rH20YCG784tz2K6PKSf1CPN/yrt5SMRXEzQfMvh9lYl2IbYVOu+oTDxpvLQ/nLz
b9xhbFPWdWKwGQkYEqMd16ogW6ULiRd34x4OEG2ARkpXBB6D6Ma7CC40MO2n34Ce
hZpSJDotP3VM9bUp1VQktVmAuSsP
-----END CERTIFICATE-----