Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E044E7DEB1B05BB0AC72DC8B79273D4E247A879A.cer
File:                     E044E7DEB1B05BB0AC72DC8B79273D4E247A879A.cer (raw, json)
Hash identifier:          dQDoY9Rm52x7bS77uTLVR0uxBQ9yLEDDLOKSMSXcFHM=
Subject key identifier:   E0:44:E7:DE:B1:B0:5B:B0:AC:72:DC:8B:79:27:3D:4E:24:7A:87:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E0D539403AA2EFEB91F40912B9B9617C8632768
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/0/E044E7DEB1B05BB0AC72DC8B79273D4E247A879A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 19:16:43 +0000
Certificate not after:    Fri 28 Feb 2025 19:21:43 +0000
Subordinate resources:    AS: 273366
                          IP: 2804:8d94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:53:94:03:aa:2e:fe:b9:1f:40:91:2b:9b:96:17:c8:63:27:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 19:16:43 2024 GMT
            Not After : Feb 28 19:21:43 2025 GMT
        Subject: CN=E044E7DEB1B05BB0AC72DC8B79273D4E247A879A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:7e:b7:9b:3d:f6:05:5d:7d:5a:ab:ac:0d:
                    9f:98:31:6d:65:9b:94:13:42:d5:f4:b6:92:a3:80:
                    56:9f:46:15:7b:be:15:67:c0:f1:a6:2a:03:8c:e9:
                    df:7b:da:01:67:4a:fa:bc:45:10:57:ed:03:61:53:
                    25:1e:de:3c:ca:27:27:58:af:10:7f:b9:93:82:9d:
                    43:df:b4:d5:36:3a:66:fb:a3:f6:cf:a9:a2:8d:fd:
                    eb:ff:47:59:43:cf:a1:6d:77:56:38:df:b5:5e:ca:
                    e2:81:ef:c6:15:d0:f3:6e:fb:bb:44:66:55:0f:7a:
                    d8:90:c9:1b:39:a9:a2:4d:de:61:91:f5:84:86:df:
                    24:4f:95:f6:e5:8a:99:32:c9:da:27:08:ef:3e:13:
                    d9:60:a1:d6:b8:69:9c:dd:cc:a1:6e:b2:55:ba:41:
                    39:c1:c8:ba:0f:5d:fb:19:71:0a:b3:5d:39:b5:ec:
                    dd:da:87:fa:de:ed:f4:95:f9:cf:f9:a4:8c:5d:a2:
                    f8:31:ef:2e:e2:b9:df:4b:6b:7b:ea:95:7a:b4:69:
                    f9:4a:15:f5:92:0e:59:0e:18:77:02:1d:18:f3:8a:
                    4d:1b:b3:00:36:2b:10:25:d6:9c:5f:49:01:23:d6:
                    d2:ed:08:5c:b4:b0:5c:61:18:f3:15:b5:fd:a2:52:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:44:E7:DE:B1:B0:5B:B0:AC:72:DC:8B:79:27:3D:4E:24:7A:87:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/0/E044E7DEB1B05BB0AC72DC8B79273D4E247A879A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273366

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:cc:88:df:53:1c:24:3e:1c:89:65:2d:bc:c8:cb:16:d9:
         9f:74:aa:55:c7:35:51:8c:ec:3f:27:85:8d:c1:98:05:62:35:
         af:37:b3:85:52:87:3c:4d:5f:93:c7:17:95:6a:0d:af:f8:bf:
         44:5a:e1:05:2a:e9:7b:e3:ea:69:07:9e:67:34:a8:42:2e:cd:
         14:a3:b9:5a:b3:1b:bd:d8:7b:0d:e1:d5:6a:ec:51:ff:ad:21:
         2c:de:81:35:95:87:15:68:50:22:f0:15:b1:9d:19:01:3a:e9:
         f7:b3:ae:9f:72:1f:f1:46:7a:d8:21:ac:6c:5b:46:fd:3f:23:
         1e:0e:1b:1d:fe:42:5c:e4:b8:ee:17:03:aa:60:f9:b4:3e:33:
         b9:cc:cb:e8:c9:e0:29:ca:f8:7c:2e:ac:f7:6b:3e:ed:ff:4c:
         10:26:7e:57:a6:78:8a:a6:c0:d0:8a:13:85:25:c5:7b:35:28:
         38:50:74:b7:35:50:3c:9a:10:87:c6:51:cf:9b:86:bb:ae:0e:
         2a:58:06:07:50:6e:b3:b1:1a:75:b4:a3:3c:d5:0c:99:ba:d9:
         6f:e1:9a:68:58:29:82:5e:27:1f:87:39:28:0c:53:52:b7:ec:
         96:01:e5:e5:6f:7b:6a:fd:e3:77:3c:33:8f:ac:6b:fb:0e:12:
         ab:df:08:43
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIUXg1TlAOqLv65H0CRK5uWF8hjJ2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMDExOTE2NDNaFw0yNTAyMjgxOTIxNDNaMDMxMTAvBgNV
BAMTKEUwNDRFN0RFQjFCMDVCQjBBQzcyREM4Qjc5MjczRDRFMjQ3QTg3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KX63mz32BV19WqusDZ+YMW1l
m5QTQtX0tpKjgFafRhV7vhVnwPGmKgOM6d972gFnSvq8RRBX7QNhUyUe3jzKJydY
rxB/uZOCnUPftNU2Omb7o/bPqaKN/ev/R1lDz6Ftd1Y437VeyuKB78YV0PNu+7tE
ZlUPetiQyRs5qaJN3mGR9YSG3yRPlfblipkyydonCO8+E9lgoda4aZzdzKFuslW6
QTnByLoPXfsZcQqzXTm17N3ah/re7fSV+c/5pIxdovgx7y7iud9La3vqlXq0aflK
FfWSDlkOGHcCHRjzik0bswA2KxAl1pxfSQEj1tLtCFy0sFxhGPMVtf2iUtq3AgMB
AAGjggMNMIIDCTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgROfesbBbsKxy
3It5Jz1OJHqHmjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81cHhSSm04RFdHQWM1aXFDb3lzZW1XRXBjREhjRmN3SHlp
OHg1NHZieFlCNS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5
aTh4NTR2YnhZQjUvMC9FMDQ0RTdERUIxQjA1QkIwQUM3MkRDOEI3OTI3M0Q0RTI0
N0E4NzlBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBI2UMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwQr1jANBgkqhkiG9w0BAQsFAAOCAQEAP27MiN9THCQ+
HIllLbzIyxbZn3SqVcc1UYzsPyeFjcGYBWI1rzezhVKHPE1fk8cXlWoNr/i/RFrh
BSrpe+PqaQeeZzSoQi7NFKO5WrMbvdh7DeHVauxR/60hLN6BNZWHFWhQIvAVsZ0Z
ATrp97Oun3If8UZ62CGsbFtG/T8jHg4bHf5CXOS47hcDqmD5tD4zuczL6MngKcr4
fC6s92s+7f9MECZ+V6Z4iqbA0IoThSXFezUoOFB0tzVQPJoQh8ZRz5uGu64OKlgG
B1Bus7EadbSjPNUMmbrZb+GaaFgpgl4nH4c5KAxTUrfslgHl5W97av3jdzwzj6xr
+w4Sq98IQw==
-----END CERTIFICATE-----