Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.cer
File:                     D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.cer (raw, json)
Hash identifier:          jyHfzWum6jQ7gTcKQLGtcLXBh0rWht5h+nB8+RUZil0=
Subject key identifier:   D2:CE:04:BD:F6:34:87:D6:7E:2D:99:D2:0E:E0:D1:9C:2B:D6:5F:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25DBA7F1505E8AC3EE7F8B47E0B7D3F0031893D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 17:50:15 +0000
Certificate not after:    Thu 27 Mar 2025 17:55:15 +0000
Subordinate resources:    AS: 263126
                          IP: 177.92.184.0/21
                          IP: 2804:1724::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:db:a7:f1:50:5e:8a:c3:ee:7f:8b:47:e0:b7:d3:f0:03:18:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 17:50:15 2024 GMT
            Not After : Mar 27 17:55:15 2025 GMT
        Subject: CN=D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:58:eb:5e:ad:84:2b:43:a1:f0:ce:a6:9d:
                    ae:46:13:4a:2f:4b:d3:de:38:33:19:70:72:e6:b6:
                    ca:22:f2:0a:13:a7:12:29:d8:9d:89:46:61:de:25:
                    6f:64:0b:d2:bc:d4:19:59:c4:08:80:2d:f0:b5:ca:
                    aa:d1:48:7e:d0:3a:93:e3:d9:7a:e0:ad:67:89:81:
                    ef:c9:df:23:70:a3:53:91:78:b5:43:64:b0:cd:a1:
                    78:95:6f:a3:a0:8f:4e:8b:99:1e:b4:cf:51:0d:73:
                    81:cc:78:ff:4e:93:89:e7:32:23:d3:64:fb:e7:11:
                    e2:9b:88:cb:4b:28:29:63:1d:76:d6:3a:bd:eb:0f:
                    73:cf:40:9f:b2:1e:6e:11:30:20:98:27:84:13:cf:
                    0b:ec:10:8d:67:02:5a:16:85:4c:ee:7f:fd:d9:cd:
                    88:5c:5a:7f:2c:75:3d:05:7b:fe:2d:00:7d:23:35:
                    06:d9:b8:6a:e7:62:f6:a4:66:b4:7c:c7:21:bf:f0:
                    7c:45:03:46:29:da:79:dd:0c:43:b8:64:55:03:b3:
                    96:1b:d9:7a:f3:1d:7e:f5:36:c0:41:8e:e8:0f:c7:
                    75:7f:80:dd:ea:ae:8b:53:d1:cb:e4:53:3c:af:04:
                    5e:3c:77:ca:c9:ba:f3:7f:80:2b:ed:28:b3:e6:b3:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:CE:04:BD:F6:34:87:D6:7E:2D:99:D2:0E:E0:D1:9C:2B:D6:5F:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/0/D2CE04BDF63487D67E2D99D20EE0D19C2BD65F8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.184.0/21
                IPv6:
                  2804:1724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263126

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:d3:5e:72:e1:d8:32:f2:51:4d:bb:25:b4:d4:f7:31:75:
         8f:3f:6c:0f:a3:0a:dd:8c:67:df:78:38:1d:8e:e0:dd:fb:15:
         df:aa:ab:80:2f:a8:fb:a2:54:23:68:c8:8f:77:d8:a4:04:42:
         d8:bb:18:1e:59:bb:c0:be:7f:26:f8:58:18:c1:b5:ab:f6:45:
         73:dd:3e:8b:f2:f7:58:9f:e5:c2:90:75:9c:05:4d:5c:1a:85:
         0f:85:1b:be:05:b6:42:2b:cf:db:bc:88:e9:93:52:d5:11:8b:
         33:a8:9c:26:24:82:03:23:17:bb:db:af:ac:64:ac:93:c0:a9:
         ec:2d:de:f3:11:51:f6:3e:0d:99:0c:8b:56:22:5b:99:dc:a0:
         9b:cb:c2:4b:4a:3c:ef:3d:fe:25:b1:8d:2c:07:c6:8c:88:6e:
         8b:98:a6:e2:46:65:f4:6d:5e:49:af:d7:3c:96:43:59:af:1c:
         45:98:5d:89:fa:98:c6:64:fd:d6:c0:28:d9:e6:d6:9e:98:cb:
         cd:a6:b7:81:3c:52:9c:4f:80:b5:6f:23:98:d6:d0:c6:2b:56:
         6b:fa:c6:35:b9:c2:3d:71:7a:12:88:b9:c8:a1:4f:9f:f9:d5:
         2d:ef:c1:c1:3c:86:79:4a:29:6c:95:6c:7c:ed:9d:74:45:74:
         6a:74:4a:d4
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUJdun8VBeisPuf4tH4LfT8AMYk9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjgxNzUwMTVaFw0yNTAzMjcxNzU1MTVaMDMxMTAvBgNV
BAMTKEQyQ0UwNEJERjYzNDg3RDY3RTJEOTlEMjBFRTBEMTlDMkJENjVGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP11jrXq2EK0Oh8M6mna5GE0ov
S9PeODMZcHLmtsoi8goTpxIp2J2JRmHeJW9kC9K81BlZxAiALfC1yqrRSH7QOpPj
2XrgrWeJge/J3yNwo1OReLVDZLDNoXiVb6Ogj06LmR60z1ENc4HMeP9Ok4nnMiPT
ZPvnEeKbiMtLKCljHXbWOr3rD3PPQJ+yHm4RMCCYJ4QTzwvsEI1nAloWhUzuf/3Z
zYhcWn8sdT0Fe/4tAH0jNQbZuGrnYvakZrR8xyG/8HxFA0Yp2nndDEO4ZFUDs5Yb
2XrzHX71NsBBjugPx3V/gN3qrotT0cvkUzyvBF48d8rJuvN/gCvtKLPms49RAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTSzgS99jSH1n4t
mdIO4NGcK9ZfjzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80OXVXMWtDaGNEWUFFalplZzhGWHFZN0VFcFdadkI4ejN4
RDRpMlBZVlRzZy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80OXVXMWtDaGNEWUFFalplZzhGWHFZN0VFcFdadkI4ejN4
RDRpMlBZVlRzZy8wL0QyQ0UwNEJERjYzNDg3RDY3RTJEOTlEMjBFRTBEMTlDMkJE
NjVGOEYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7FcuDANBAIAAjAHAwUA
KAQXJDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEA9YwDQYJKoZIhvcNAQELBQAD
ggEBAHpS015y4dgy8lFNuyW01PcxdY8/bA+jCt2MZ994OB2O4N37Fd+qq4AvqPui
VCNoyI932KQEQti7GB5Zu8C+fyb4WBjBtav2RXPdPovy91if5cKQdZwFTVwahQ+F
G74FtkIrz9u8iOmTUtURizOonCYkggMjF7vbr6xkrJPAqewt3vMRUfY+DZkMi1Yi
W5ncoJvLwktKPO89/iWxjSwHxoyIbouYpuJGZfRtXkmv1zyWQ1mvHEWYXYn6mMZk
/dbAKNnm1p6Yy82mt4E8UpxPgLVvI5jW0MYrVmv6xjW5wj1xehKIucihT5/51S3v
wcE8hnlKKWyVbHztnXRFdGp0StQ=
-----END CERTIFICATE-----