Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer
File:                     C133FA3FA6B84483F6615F7504F6EECFD777FA75.cer (raw, json)
Hash identifier:          cRKakycNzXB7ct6RjuDN+GyIIQZAdxVtvlNEdvGh1ho=
Subject key identifier:   C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3541CD0A6723C4A0FA01E43099EEE153815E8FA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 11:46:29 +0000
Certificate not after:    Thu 30 Jan 2025 11:51:29 +0000
Subordinate resources:    AS: 272533
                          IP: 2804:82ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:cd:0a:67:23:c4:a0:fa:01:e4:30:99:ee:e1:53:81:5e:8f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 11:46:29 2024 GMT
            Not After : Jan 30 11:51:29 2025 GMT
        Subject: CN=C133FA3FA6B84483F6615F7504F6EECFD777FA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:2e:d4:f8:a8:3c:33:99:95:d0:f7:2a:39:
                    04:0e:73:bb:16:49:27:a1:87:da:59:4a:82:9b:8d:
                    0e:94:42:02:6a:55:55:84:00:97:88:c4:05:e4:3e:
                    ab:81:64:42:75:af:f9:0c:6a:88:07:14:aa:76:19:
                    a5:7e:fb:03:87:9d:ea:5c:09:3d:0a:d4:bc:e7:46:
                    c5:f3:57:87:b8:28:61:9b:e2:ed:25:b6:96:f4:5e:
                    98:82:eb:20:d4:62:ba:08:35:b1:05:3b:79:c6:25:
                    ea:17:ec:d8:c4:c9:91:dd:5a:b0:3a:e8:e4:9b:23:
                    83:50:e3:49:3f:7c:5b:28:9d:e9:f3:51:89:68:3f:
                    70:cb:d1:24:41:59:15:af:05:f6:a4:44:6e:87:ba:
                    5c:fb:c7:2c:23:4b:26:ab:55:e5:a4:91:49:b3:e3:
                    80:31:dc:71:d6:56:dd:b3:1f:73:09:6b:bb:25:f9:
                    52:4b:60:c2:32:c4:ae:3b:ed:67:84:4a:88:5b:4b:
                    28:8c:67:1b:00:60:a6:65:f9:a8:49:d1:9e:25:05:
                    c2:4a:c2:f2:02:56:f5:63:8c:c6:27:4a:6f:9e:91:
                    9a:6f:c3:a4:cd:b9:87:f7:4b:62:9a:0c:0a:2f:b1:
                    42:0e:c4:dc:65:a1:9b:dd:b7:dc:21:d4:f9:c3:0a:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:33:FA:3F:A6:B8:44:83:F6:61:5F:75:04:F6:EE:CF:D7:77:FA:75
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vbzMY1jiLEUd2zgHsJ5BPuVsiPwzooEFJzj2YH1Y3Tq/0/C133FA3FA6B84483F6615F7504F6EECFD777FA75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272533

    Signature Algorithm: sha256WithRSAEncryption
         5c:bc:19:49:fc:bb:4b:8f:18:19:8e:58:9c:db:48:76:f8:1d:
         42:95:c8:1c:13:9d:05:a6:83:12:bb:4b:c3:03:bd:b9:10:b6:
         a5:2f:83:d6:cc:2a:25:0a:33:5c:79:66:9e:53:66:e4:ee:68:
         fb:43:32:fa:8a:f6:d0:b2:c7:2d:bf:1d:fa:00:da:1e:f6:37:
         0e:3a:ad:9c:d5:af:c2:3a:47:a1:a1:76:ca:46:4c:e9:c8:28:
         40:6f:c9:0b:18:39:98:c8:ae:34:26:b5:fd:e7:eb:7e:9c:fc:
         f4:c8:75:5c:9b:b9:b0:5b:c7:7e:1c:86:9e:a6:18:a9:e7:4d:
         7d:59:10:9a:b3:55:89:0c:f2:33:37:50:85:83:68:77:cc:f4:
         22:77:3d:28:d6:8f:db:d4:85:7b:48:1e:4f:54:b6:58:8e:a8:
         14:d3:dc:d0:d3:f2:88:7d:ce:8e:de:77:24:b0:d1:3f:bd:a7:
         e7:3a:22:69:be:83:95:bc:4a:45:f5:f2:8a:ae:7e:17:f0:81:
         36:8e:08:90:aa:de:86:5b:f0:2c:6e:b5:83:25:66:fd:36:6a:
         e4:b3:46:9b:cc:16:f8:92:c7:10:00:75:92:58:31:9b:4d:1a:
         ca:b8:9f:b2:06:9c:dc:be:18:f0:2b:f8:4c:be:65:c8:d4:ca:
         fa:ad:1a:e8
-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIUNUHNCmcjxKD6AeQwme7hU4Fej6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDExMTQ2MjlaFw0yNTAxMzAxMTUxMjlaMDMxMTAvBgNV
BAMTKEMxMzNGQTNGQTZCODQ0ODNGNjYxNUY3NTA0RjZFRUNGRDc3N0ZBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzy7U+Kg8M5mV0PcqOQQOc7sW
SSehh9pZSoKbjQ6UQgJqVVWEAJeIxAXkPquBZEJ1r/kMaogHFKp2GaV++wOHnepc
CT0K1LznRsXzV4e4KGGb4u0ltpb0XpiC6yDUYroINbEFO3nGJeoX7NjEyZHdWrA6
6OSbI4NQ40k/fFsonenzUYloP3DL0SRBWRWvBfakRG6Hulz7xywjSyarVeWkkUmz
44Ax3HHWVt2zH3MJa7sl+VJLYMIyxK477WeESohbSyiMZxsAYKZl+ahJ0Z4lBcJK
wvICVvVjjMYnSm+ekZpvw6TNuYf3S2KaDAovsUIOxNxloZvdt9wh1PnDCqGJAgMB
AAGjggMMMIIDCDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBM/o/prhEg/Zh
X3UE9u7P13f6dTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84dmJ6TVkxamlMRVVkMnpnSHNKNUJQdVZzaVB3em9vRUZK
emoyWUgxWTNUcS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby84dmJ6TVkxamlMRVVkMnpnSHNKNUJQdVZzaVB3em9vRUZK
emoyWUgxWTNUcS8wL0MxMzNGQTNGQTZCODQ0ODNGNjYxNUY3NTA0RjZFRUNGRDc3
N0ZBNzUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEgqwwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBCiVMA0GCSqGSIb3DQEBCwUAA4IBAQBcvBlJ/LtLjxgZ
jlic20h2+B1ClcgcE50FpoMSu0vDA725ELalL4PWzColCjNceWaeU2bk7mj7QzL6
ivbQssctvx36ANoe9jcOOq2c1a/COkehoXbKRkzpyChAb8kLGDmYyK40JrX95+t+
nPz0yHVcm7mwW8d+HIaephip5019WRCas1WJDPIzN1CFg2h3zPQidz0o1o/b1IV7
SB5PVLZYjqgU09zQ0/KIfc6O3ncksNE/vafnOiJpvoOVvEpF9fKKrn4X8IE2jgiQ
qt6GW/AsbrWDJWb9Nmrks0abzBb4kscQAHWSWDGbTRrKuJ+yBpzcvhjwK/hMvmXI
1Mr6rRro
-----END CERTIFICATE-----