Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAB90B2FB002D6D695DFAA54BBF9E94FF5BE90F1.cer
File:                     CAB90B2FB002D6D695DFAA54BBF9E94FF5BE90F1.cer (raw, json)
Hash identifier:          y+FBf6M/JlAEQAPYwTzmwswMnhmPBDElRAnUwt9P//Y=
Subject key identifier:   CA:B9:0B:2F:B0:02:D6:D6:95:DF:AA:54:BB:F9:E9:4F:F5:BE:90:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0666C0F8B8433830C9BCD00A95351CAFA6F1C2E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/CAB90B2FB002D6D695DFAA54BBF9E94FF5BE90F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 01:04:33 +0000
Certificate not after:    Wed 22 May 2024 01:09:33 +0000
Subordinate resources:    AS: 273728
                          IP: 2804:8b5c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:66:c0:f8:b8:43:38:30:c9:bc:d0:0a:95:35:1c:af:a6:f1:c2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 01:04:33 2023 GMT
            Not After : May 22 01:09:33 2024 GMT
        Subject: CN=CAB90B2FB002D6D695DFAA54BBF9E94FF5BE90F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:3b:e1:1f:c3:b8:f9:2e:db:21:f0:e4:84:
                    69:b3:9f:57:dc:4e:50:80:bc:b1:3a:cb:e1:8a:19:
                    c8:07:46:37:eb:ca:f2:99:46:83:69:ae:d4:f6:0d:
                    7e:90:d2:d8:b0:eb:55:18:01:71:87:d8:76:4d:ba:
                    da:09:cf:e6:8c:b5:48:fb:a8:a9:cb:99:c8:33:a2:
                    d1:ea:61:76:98:39:40:d8:80:7e:3d:95:7d:e4:fb:
                    f4:d6:24:a6:46:14:34:70:42:6f:6e:23:a6:c4:f8:
                    6b:a2:23:12:1c:64:5b:77:66:1e:bd:d2:d8:90:c5:
                    13:06:00:ad:b9:18:a1:39:13:02:e0:69:4a:dc:69:
                    1d:6b:a5:fc:5e:80:a2:95:64:09:fe:d9:55:e7:b3:
                    f0:42:db:ec:c2:f9:9c:48:d7:fa:47:40:65:43:20:
                    40:c8:68:91:7a:4b:3a:be:59:db:bd:16:05:7a:c3:
                    7a:1a:e9:06:89:92:31:b6:01:55:df:c4:5d:4b:ed:
                    97:91:71:e6:7f:00:79:25:50:c5:9a:d1:6d:45:a1:
                    77:37:b4:33:7b:c4:24:ab:f1:6f:2f:a1:96:02:9b:
                    ad:12:68:29:84:b6:26:96:4c:63:51:46:fa:1e:ad:
                    bc:3e:d2:96:6b:44:45:55:63:75:22:e8:61:49:02:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:B9:0B:2F:B0:02:D6:D6:95:DF:AA:54:BB:F9:E9:4F:F5:BE:90:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/CAB90B2FB002D6D695DFAA54BBF9E94FF5BE90F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273728

    Signature Algorithm: sha256WithRSAEncryption
         40:65:fc:b3:4b:b1:8b:75:5f:1a:d5:6a:fa:cc:32:ee:e7:f8:
         eb:ea:c1:aa:5a:aa:8d:b9:16:94:59:91:ac:18:e7:1e:7f:88:
         6b:9c:c8:d4:3b:58:9a:af:64:1b:9f:48:6c:cd:92:7a:16:c0:
         f9:53:bf:8f:4d:a0:9e:c4:96:8b:64:a3:5c:ff:6e:5f:04:44:
         f4:4f:68:49:a7:f2:a6:ae:06:86:1b:5b:2e:f1:70:d2:73:23:
         ce:34:26:35:e7:22:a3:d4:15:ed:fe:29:95:84:7a:39:54:3e:
         97:64:ce:17:d8:48:6d:b3:ae:7e:fb:0b:c3:33:b8:5e:33:3d:
         47:97:38:a9:13:ed:80:15:e5:f3:19:aa:91:62:fe:c9:b0:dd:
         7b:b4:bb:03:09:31:56:ff:7d:bf:86:b0:9d:b1:3d:a0:f2:15:
         eb:e9:2d:92:5c:34:5a:6d:2f:31:b2:75:ef:78:d2:12:14:65:
         14:21:3c:e0:7f:5a:b2:2b:da:ed:41:36:03:3f:3e:b2:9f:11:
         bb:26:ac:e2:57:74:ae:f8:6a:2f:fc:71:99:b4:41:ab:7e:58:
         34:3c:e0:b4:5d:61:9d:02:43:35:ba:8e:0d:0f:dd:b4:9e:d7:
         50:76:1d:ee:27:26:1e:0a:37:b7:89:23:8d:4e:33:33:96:27:
         24:f1:46:6c
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUBmbA+LhDODDJvNAKlTUcr6bxwugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA1MjQwMTA0MzNaFw0yNDA1MjIwMTA5MzNaMDMxMTAvBgNV
BAMTKENBQjkwQjJGQjAwMkQ2RDY5NURGQUE1NEJCRjlFOTRGRjVCRTkwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxezvhH8O4+S7bIfDkhGmzn1fc
TlCAvLE6y+GKGcgHRjfryvKZRoNprtT2DX6Q0tiw61UYAXGH2HZNutoJz+aMtUj7
qKnLmcgzotHqYXaYOUDYgH49lX3k+/TWJKZGFDRwQm9uI6bE+GuiIxIcZFt3Zh69
0tiQxRMGAK25GKE5EwLgaUrcaR1rpfxegKKVZAn+2VXns/BC2+zC+ZxI1/pHQGVD
IEDIaJF6Szq+Wdu9FgV6w3oa6QaJkjG2AVXfxF1L7ZeRceZ/AHklUMWa0W1FoXc3
tDN7xCSr8W8voZYCm60SaCmEtiaWTGNRRvoerbw+0pZrREVVY3Ui6GFJAiMlAgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKuQsvsALW1pXf
qlS7+elP9b6Q8TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9KQ2dvaVYxSm83c0Nvamptc25IZDQxaXJiWEZ3UWhyaGg4
d3YzUFVIalFaby8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1Focmho
OHd2M1BVSGpRWm8vMC9DQUI5MEIyRkIwMDJENkQ2OTVERkFBNTRCQkY5RTk0RkY1
QkU5MEYxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBItcMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQtQDANBgkqhkiG9w0BAQsFAAOCAQEAQGX8s0uxi3Vf
GtVq+swy7uf46+rBqlqqjbkWlFmRrBjnHn+Ia5zI1DtYmq9kG59IbM2SehbA+VO/
j02gnsSWi2SjXP9uXwRE9E9oSafypq4GhhtbLvFw0nMjzjQmNecio9QV7f4plYR6
OVQ+l2TOF9hIbbOufvsLwzO4XjM9R5c4qRPtgBXl8xmqkWL+ybDde7S7AwkxVv99
v4awnbE9oPIV6+ktklw0Wm0vMbJ173jSEhRlFCE84H9asiva7UE2Az8+sp8Ruyas
4ld0rvhqL/xxmbRBq35YNDzgtF1hnQJDNbqODQ/dtJ7XUHYd7icmHgo3t4kjjU4z
M5YnJPFGbA==
-----END CERTIFICATE-----