Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer
File:                     B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.cer (raw, json)
Hash identifier:          YCsBZYlta70+3kvpPVBWpBfqw48KreDN1xpgzDKLq/4=
Subject key identifier:   B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       144AC61618240D229D3BB355880FD1A5B45BFD4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 22:13:21 +0000
Certificate not after:    Fri 20 Sep 2024 22:18:21 +0000
Subordinate resources:    AS: 266524
                          IP: 170.245.176.0/22
                          IP: 2804:3918::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4a:c6:16:18:24:0d:22:9d:3b:b3:55:88:0f:d1:a5:b4:5b:fd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 22:13:21 2023 GMT
            Not After : Sep 20 22:18:21 2024 GMT
        Subject: CN=B4E2CEBFE3B84B40B7E2069624E8751BE40B580F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:2b:f8:03:c6:24:84:3e:ac:b9:7b:a9:d6:
                    4f:38:ec:6c:09:6f:2a:91:c7:1c:fc:8b:1b:22:9c:
                    17:f9:3c:aa:d5:af:7a:8e:21:2d:5f:15:f0:9f:99:
                    57:dd:61:34:88:d1:b7:7a:54:6c:6a:8e:f4:d7:80:
                    00:11:84:30:10:17:09:58:94:18:79:0c:13:5f:b8:
                    0d:08:dc:66:5c:9a:87:f2:86:62:34:fe:b2:d6:56:
                    69:27:47:f0:38:02:96:81:f9:ed:6e:f4:eb:14:43:
                    0d:7f:1b:af:cd:3f:a8:9c:aa:cf:bb:5f:f7:cb:71:
                    f2:bf:ec:8c:68:8f:7a:fc:ef:48:f7:21:78:4f:eb:
                    e0:42:c9:62:81:aa:f7:88:10:5d:df:84:5f:a1:8d:
                    7e:75:5b:18:e2:e5:17:a5:62:71:d8:72:48:31:df:
                    02:a7:19:68:1d:a9:71:e0:cb:00:f9:f9:c1:e9:09:
                    da:56:b7:2f:12:e5:34:d2:eb:79:26:28:8c:26:ce:
                    e5:67:70:c7:76:5a:3e:cd:2f:1a:e0:75:7c:13:0e:
                    9f:05:64:d2:63:88:23:88:ec:e0:c0:69:d1:82:4e:
                    3a:86:c8:8f:30:c4:dc:7f:a6:38:70:7e:60:c6:fb:
                    26:b5:0e:db:c3:cb:45:a0:fc:5d:9e:44:ec:fa:e0:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:E2:CE:BF:E3:B8:4B:40:B7:E2:06:96:24:E8:75:1B:E4:0B:58:0F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/0/B4E2CEBFE3B84B40B7E2069624E8751BE40B580F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.176.0/22
                IPv6:
                  2804:3918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266524

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:65:84:ed:3f:5e:54:98:f2:3f:54:05:a6:e1:57:9c:f5:
         0a:9d:1a:71:9a:5c:4a:33:54:25:77:be:0b:8b:32:e3:25:94:
         d3:28:53:f8:c0:1d:13:63:28:2d:59:2e:cd:88:89:d8:6f:b3:
         97:80:de:b3:a9:fb:81:b1:9b:1d:df:bd:3a:ec:ec:61:ab:c6:
         a0:e3:78:75:6e:53:b4:88:15:89:9b:3a:67:23:79:69:29:51:
         4a:6c:7d:7d:ef:5f:fa:56:4e:55:46:da:a9:8b:f2:e8:86:b2:
         98:09:13:d8:9f:50:2e:7f:2b:26:71:6b:ff:28:90:01:8e:99:
         34:8d:46:a0:1a:c2:6f:06:0f:77:ec:49:93:fe:4e:54:3d:91:
         db:a8:09:00:49:99:f4:0d:be:a8:00:08:f9:83:75:d9:cf:2c:
         4c:fb:e6:2b:bc:6e:31:0c:87:b5:48:b3:03:23:c7:7a:65:c8:
         11:52:8e:8b:df:64:b4:a6:a0:17:2d:09:f0:8c:7d:7d:a6:64:
         b3:25:4f:50:12:e3:9b:46:fe:ca:80:48:54:5a:8c:4e:d9:a3:
         76:29:d6:fa:5b:5f:4f:e6:7f:fa:6b:6f:fc:f1:92:33:ce:87:
         9b:35:39:36:75:d7:81:d1:5d:24:09:b6:81:5c:3e:0b:bc:65:
         2e:1b:04:1a
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUFErGFhgkDSKdO7NViA/RpbRb/UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MjIyMjEzMjFaFw0yNDA5MjAyMjE4MjFaMDMxMTAvBgNV
BAMTKEI0RTJDRUJGRTNCODRCNDBCN0UyMDY5NjI0RTg3NTFCRTQwQjU4MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uSv4A8YkhD6suXup1k847GwJ
byqRxxz8ixsinBf5PKrVr3qOIS1fFfCfmVfdYTSI0bd6VGxqjvTXgAARhDAQFwlY
lBh5DBNfuA0I3GZcmofyhmI0/rLWVmknR/A4ApaB+e1u9OsUQw1/G6/NP6icqs+7
X/fLcfK/7Ixoj3r870j3IXhP6+BCyWKBqveIEF3fhF+hjX51Wxji5RelYnHYckgx
3wKnGWgdqXHgywD5+cHpCdpWty8S5TTS63kmKIwmzuVncMd2Wj7NLxrgdXwTDp8F
ZNJjiCOI7ODAadGCTjqGyI8wxNx/pjhwfmDG+ya1DtvDy0Wg/F2eROz64DjxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS04s6/47hLQLfi
BpYk6HUb5AtYDzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HekphNGNhc3ZoY2pEMmhuSG01akFhd2N0UmtOYWdHbkxC
NjUzdXE4SERjTi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9HekphNGNhc3ZoY2pEMmhuSG01akFhd2N0UmtOYWdHbkxC
NjUzdXE4SERjTi8wL0I0RTJDRUJGRTNCODRCNDBCN0UyMDY5NjI0RTg3NTFCRTQw
QjU4MEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAqr1sDANBAIAAjAHAwUA
KAQ5GDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEERwwDQYJKoZIhvcNAQELBQAD
ggEBAF7jZYTtP15UmPI/VAWm4Vec9QqdGnGaXEozVCV3vguLMuMllNMoU/jAHRNj
KC1ZLs2Iidhvs5eA3rOp+4Gxmx3fvTrs7GGrxqDjeHVuU7SIFYmbOmcjeWkpUUps
fX3vX/pWTlVG2qmL8uiGspgJE9ifUC5/KyZxa/8okAGOmTSNRqAawm8GD3fsSZP+
TlQ9kduoCQBJmfQNvqgACPmDddnPLEz75iu8bjEMh7VIswMjx3plyBFSjovfZLSm
oBctCfCMfX2mZLMlT1AS45tG/sqASFRajE7Zo3Yp1vpbX0/mf/prb/zxkjPOh5s1
OTZ114HRXSQJtoFcPgu8ZS4bBBo=
-----END CERTIFICATE-----