Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer
File:                     D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.cer (raw, json)
Hash identifier:          LqbnZR+CZu2K7FtcwiFwAWMESpIvNBnjVSnzJdObSLQ=
Subject key identifier:   D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34FABA92D986BAD3E2BD301CE8AE4F76BEBC3782
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 06:02:22 +0000
Certificate not after:    Fri 29 Nov 2024 06:07:22 +0000
Subordinate resources:    AS: 267142
                          IP: 45.229.240.0/22
                          IP: 2804:48c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fa:ba:92:d9:86:ba:d3:e2:bd:30:1c:e8:ae:4f:76:be:bc:37:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 06:02:22 2023 GMT
            Not After : Nov 29 06:07:22 2024 GMT
        Subject: CN=D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:19:ae:06:8f:d5:f9:f2:a1:75:4f:9b:f1:
                    3c:72:d6:a9:e4:e5:d5:e4:95:0b:df:49:d2:f8:04:
                    ea:47:2e:9d:11:79:65:50:97:4c:52:5b:07:9b:ea:
                    bc:04:1a:2a:74:cc:e3:fb:08:2c:18:c4:47:fa:95:
                    20:a3:9e:ab:8d:13:09:f0:59:a2:88:74:ed:a7:e5:
                    63:99:e6:2d:3d:19:8e:6b:60:62:70:7b:9b:1c:7b:
                    9b:1a:8c:ce:4f:f8:1f:60:ab:2b:b8:ba:96:e9:00:
                    aa:7e:13:50:67:72:e3:7d:1e:ac:9a:03:6e:9f:c9:
                    ef:71:86:51:2a:83:e3:6c:14:78:af:2c:35:7c:60:
                    a0:af:86:4f:cd:a8:16:9b:75:f4:d1:60:15:ce:50:
                    2a:aa:8e:78:e4:1d:70:30:ed:67:03:d7:71:ec:0f:
                    70:ec:bb:d9:61:78:94:d4:70:74:7e:46:91:6c:e4:
                    5f:5a:f7:8e:e3:d8:b0:3b:1a:5a:3d:92:c0:35:0d:
                    92:fc:7f:75:1c:9f:89:d6:92:8a:ec:d5:61:88:0d:
                    2b:a2:01:8a:63:24:80:1d:cb:03:ea:9e:83:7d:8c:
                    76:2e:8d:91:bd:98:be:ad:d7:d1:d4:24:6d:9f:97:
                    00:55:c1:0b:15:55:1b:8e:b8:04:17:5b:3d:d6:42:
                    e1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:E9:D6:D8:5A:E2:DE:C0:38:FF:ED:C1:DF:D2:20:C8:92:88:A8:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/D7E9D6D85AE2DEC038FFEDC1DFD220C89288A8CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22
                IPv6:
                  2804:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267142

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:38:5b:98:20:ae:33:74:14:54:4a:70:d8:7f:00:6f:4d:
         6f:2a:2d:99:20:91:2f:4d:bc:e9:49:0e:e6:d3:b2:e0:ac:73:
         b7:0b:e6:78:49:af:9f:a5:c2:2a:2f:c9:c1:b4:40:19:43:b7:
         cf:1c:42:4f:ba:c8:9a:b8:e5:91:b6:58:fa:ef:ef:34:a0:ef:
         93:b1:0a:49:50:9c:e5:6f:ef:97:5e:01:59:31:bb:5d:29:e0:
         1b:d8:9e:1a:f3:f5:a4:fb:a5:e0:58:4f:6b:b1:53:a2:43:1d:
         bd:73:f7:2f:2b:48:b9:1f:83:01:37:d4:3c:84:95:9c:1c:ee:
         c9:ed:6e:55:b4:03:44:aa:68:0a:ad:d5:5e:f0:79:a3:33:33:
         6d:04:07:4d:de:f5:7f:d7:e2:a1:9c:3b:ea:bd:be:0e:61:6a:
         39:e0:22:48:a3:9c:7f:e5:f8:cf:35:6a:ca:cf:96:f7:05:2e:
         ac:06:d3:8d:34:c7:55:98:82:c2:c1:7f:ec:1b:b5:7e:56:db:
         2a:dd:11:90:4f:59:eb:2b:b1:43:1a:57:c6:c4:7c:b8:f9:82:
         4c:72:df:59:50:3a:39:95:aa:71:44:32:63:a2:bf:72:ba:3e:
         a9:b5:61:df:b1:47:e0:55:bb:10:b8:54:3d:83:ca:91:30:35:
         f0:65:75:af
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUNPq6ktmGutPivTAc6K5Pdr68N4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDEwNjAyMjJaFw0yNDExMjkwNjA3MjJaMDMxMTAvBgNV
BAMTKEQ3RTlENkQ4NUFFMkRFQzAzOEZGRURDMURGRDIyMEM4OTI4OEE4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6BmuBo/V+fKhdU+b8Txy1qnk
5dXklQvfSdL4BOpHLp0ReWVQl0xSWweb6rwEGip0zOP7CCwYxEf6lSCjnquNEwnw
WaKIdO2n5WOZ5i09GY5rYGJwe5sce5sajM5P+B9gqyu4upbpAKp+E1BncuN9Hqya
A26fye9xhlEqg+NsFHivLDV8YKCvhk/NqBabdfTRYBXOUCqqjnjkHXAw7WcD13Hs
D3Dsu9lheJTUcHR+RpFs5F9a947j2LA7Glo9ksA1DZL8f3Ucn4nWkors1WGIDSui
AYpjJIAdywPqnoN9jHYujZG9mL6t19HUJG2flwBVwQsVVRuOuAQXWz3WQuHVAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX6dbYWuLewDj/
7cHf0iDIkoioyjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9EaGhhY0pGZ1dzOXdLOUN1RVBUWGVRQzFYRHdqaGdNTkpz
M3pUaDl3OXRCVS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5K
czN6VGg5dzl0QlUvMC9EN0U5RDZEODVBRTJERUMwMzhGRkVEQzFERkQyMjBDODky
ODhBOENBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5fAwDQQCAAIwBwMF
ACgESMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBOGMA0GCSqGSIb3DQEBCwUA
A4IBAQBm9DhbmCCuM3QUVEpw2H8Ab01vKi2ZIJEvTbzpSQ7m07LgrHO3C+Z4Sa+f
pcIqL8nBtEAZQ7fPHEJPusiauOWRtlj67+80oO+TsQpJUJzlb++XXgFZMbtdKeAb
2J4a8/Wk+6XgWE9rsVOiQx29c/cvK0i5H4MBN9Q8hJWcHO7J7W5VtANEqmgKrdVe
8HmjMzNtBAdN3vV/1+KhnDvqvb4OYWo54CJIo5x/5fjPNWrKz5b3BS6sBtONNMdV
mILCwX/sG7V+Vtsq3RGQT1nrK7FDGlfGxHy4+YJMct9ZUDo5lapxRDJjor9yuj6p
tWHfsUfgVbsQuFQ9g8qRMDXwZXWv
-----END CERTIFICATE-----