Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer
File:                     9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer (raw, json)
Hash identifier:          YTji5Uv6/EQUuRENOM/aj+VNnQ3NR/6U2TZX0Igo7p4=
Subject key identifier:   9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4349544DBD75264969139A0385030DFB9B56F831
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 18:28:20 +0000
Certificate not after:    Wed 05 Mar 2025 18:33:20 +0000
Subordinate resources:    AS: 266953
                          IP: 45.226.4.0/22
                          IP: 2804:45d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:54:4d:bd:75:26:49:69:13:9a:03:85:03:0d:fb:9b:56:f8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 18:28:20 2024 GMT
            Not After : Mar  5 18:33:20 2025 GMT
        Subject: CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:48:d6:b4:3f:08:4f:36:2d:8c:62:4d:54:
                    43:e1:f3:b7:f1:45:45:9e:01:8b:d4:b5:cf:18:9e:
                    25:b8:31:de:64:60:9d:19:ed:2b:3e:39:9a:13:c8:
                    83:73:76:e0:9f:f0:9f:ec:75:98:37:67:ca:3b:5f:
                    41:fb:7a:b8:08:70:f1:e0:1d:1b:01:f1:12:9a:b5:
                    0b:e8:8e:d0:c9:8d:bc:a3:47:88:a3:88:95:89:c0:
                    88:a4:5b:83:12:d3:2b:d9:d7:0c:f7:67:0b:56:c0:
                    aa:72:0f:ac:de:41:2d:96:a8:b8:34:3c:b9:f3:98:
                    1f:5b:43:24:d1:1a:24:0f:6c:63:62:81:22:db:e2:
                    9a:99:14:cc:b5:d9:bf:19:a8:7a:cd:89:6c:ff:fa:
                    94:3b:79:39:5e:42:8b:f4:1c:86:e2:52:4c:c2:aa:
                    7f:4e:61:ce:2f:82:21:d9:d6:cd:74:a3:c4:a3:a5:
                    31:9f:c6:4f:ff:42:a2:1c:8d:5d:28:a1:94:f4:47:
                    2b:d7:23:92:01:a9:09:c4:76:ee:39:62:f4:bc:38:
                    47:01:e8:9f:dc:ae:0a:8f:b9:a8:f3:47:f1:09:52:
                    30:47:fb:db:40:17:7e:da:29:21:49:b0:f7:f2:0c:
                    db:e6:8c:7f:cb:cc:35:f0:fc:f8:61:26:6a:61:39:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.4.0/22
                IPv6:
                  2804:45d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266953

    Signature Algorithm: sha256WithRSAEncryption
         05:d2:3c:15:b7:5f:85:d9:e9:7e:aa:e3:97:c3:f9:f9:78:d7:
         04:a0:37:ad:a1:68:2e:fa:fd:5d:67:f8:a0:78:77:aa:ef:4b:
         1d:be:de:c4:f0:63:de:23:55:b6:8c:b3:71:f0:13:34:67:3b:
         d9:e8:74:69:c6:7e:1a:59:7f:32:9c:9c:80:0f:10:e0:76:14:
         fe:1a:06:ec:d5:ae:1d:d7:15:e5:05:25:65:21:3e:93:f7:5e:
         ca:64:e8:47:c8:87:6a:3b:25:96:72:68:13:25:2a:d9:e8:e5:
         74:90:a2:cc:a2:2f:d5:54:82:07:a5:92:da:a3:f0:b8:b5:a7:
         b7:8b:38:50:8c:66:91:68:d4:02:ea:8d:d3:77:ed:5e:7b:26:
         79:ee:c9:1a:95:51:f8:38:7f:e5:5a:62:b2:10:af:97:88:18:
         d0:90:1b:1e:a5:e6:b2:a3:72:5e:11:68:f7:3a:9e:57:01:da:
         49:94:46:3b:17:f7:64:ae:24:1a:65:db:9e:81:39:6d:90:3f:
         87:04:af:7a:71:e7:67:95:67:ad:91:2e:18:68:b7:88:a4:8e:
         c8:07:14:a8:82:53:ad:18:76:17:5c:70:d9:ed:e4:ca:e9:0b:
         29:f7:5d:86:bc:b8:c6:c5:36:a9:7f:13:37:f5:71:79:c7:bb:
         d2:cd:9c:70
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUQ0lUTb11JklpE5oDhQMN+5tW+DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDYxODI4MjBaFw0yNTAzMDUxODMzMjBaMDMxMTAvBgNV
BAMTKDlEMjkxQjk3MzEzMEUzNEI4NDEwQUVBMkUxOEFFQ0NDNURGQzkwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHEjWtD8ITzYtjGJNVEPh87fx
RUWeAYvUtc8YniW4Md5kYJ0Z7Ss+OZoTyINzduCf8J/sdZg3Z8o7X0H7ergIcPHg
HRsB8RKatQvojtDJjbyjR4ijiJWJwIikW4MS0yvZ1wz3ZwtWwKpyD6zeQS2WqLg0
PLnzmB9bQyTRGiQPbGNigSLb4pqZFMy12b8ZqHrNiWz/+pQ7eTleQov0HIbiUkzC
qn9OYc4vgiHZ1s10o8SjpTGfxk//QqIcjV0ooZT0RyvXI5IBqQnEdu45YvS8OEcB
6J/crgqPuajzR/EJUjBH+9tAF37aKSFJsPfyDNvmjH/LzDXw/PhhJmphOTt3AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdKRuXMTDjS4QQ
rqLhiuzMXfyQljAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yR1lBV3pLYUVBc1NYcFlBWlR6YU51OE5nd1dTaWRMcnRT
VUVRZ0x0aXFwRi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMkdZQVd6S2FFQXNTWHBZQVpUemFOdThOZ3dXU2lkTHJ0
U1VFUWdMdGlxcEYvMC85RDI5MUI5NzMxMzBFMzRCODQxMEFFQTJFMThBRUNDQzVE
RkM5MDk2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt4gQwDQQCAAIwBwMF
ACgERdgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBLJMA0GCSqGSIb3DQEBCwUA
A4IBAQAF0jwVt1+F2el+quOXw/n5eNcEoDetoWgu+v1dZ/igeHeq70sdvt7E8GPe
I1W2jLNx8BM0ZzvZ6HRpxn4aWX8ynJyADxDgdhT+Ggbs1a4d1xXlBSVlIT6T917K
ZOhHyIdqOyWWcmgTJSrZ6OV0kKLMoi/VVIIHpZLao/C4tae3izhQjGaRaNQC6o3T
d+1eeyZ57skalVH4OH/lWmKyEK+XiBjQkBsepeayo3JeEWj3Op5XAdpJlEY7F/dk
riQaZduegTltkD+HBK96cednlWetkS4YaLeIpI7IBxSoglOtGHYXXHDZ7eTK6Qsp
912GvLjGxTapfxM39XF5x7vSzZxw
-----END CERTIFICATE-----