Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2719B3171031584345C8B699B7DD180AFE20E24.cer
File:                     E2719B3171031584345C8B699B7DD180AFE20E24.cer (raw, json)
Hash identifier:          q014eteJkvgNbZ8PuIuMFxzvaOo+0oclMqTvNI2FMoY=
Subject key identifier:   E2:71:9B:31:71:03:15:84:34:5C:8B:69:9B:7D:D1:80:AF:E2:0E:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EFA28A714B9191C6E3E9CD4CFE65038D0364131
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/E2719B3171031584345C8B699B7DD180AFE20E24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 02:56:11 +0000
Certificate not after:    Fri 29 Nov 2024 03:01:11 +0000
Subordinate resources:    AS: 270923
                          IP: 186.26.68.0/22
                          IP: 2804:7390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fa:28:a7:14:b9:19:1c:6e:3e:9c:d4:cf:e6:50:38:d0:36:41:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  1 02:56:11 2023 GMT
            Not After : Nov 29 03:01:11 2024 GMT
        Subject: CN=E2719B3171031584345C8B699B7DD180AFE20E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:d8:0b:ad:3e:3a:2d:3e:6c:91:db:72:82:
                    f9:17:11:0e:0c:e7:9c:df:fe:70:ce:af:2c:20:dc:
                    bf:06:a8:48:64:1f:ff:a4:89:9a:eb:26:8c:75:6f:
                    6a:54:43:8d:2f:6f:75:b5:2e:c1:5e:74:6e:c1:bb:
                    ca:aa:79:fd:0b:75:9a:89:5a:7b:fb:62:ec:39:cb:
                    7b:20:d8:a1:3a:11:b0:5e:d0:ee:56:c8:dd:3c:37:
                    a4:43:4e:dc:76:ea:6a:91:67:26:e4:8f:a2:95:02:
                    a2:7b:da:7d:97:20:69:c7:bc:b2:f3:af:d9:31:22:
                    96:68:1d:46:6b:38:99:7a:e9:76:33:26:c3:0a:93:
                    ae:76:13:5c:18:00:33:c4:c8:03:ce:9a:89:bc:ff:
                    9d:6b:87:f1:02:35:16:b6:54:0c:a4:02:b8:d4:92:
                    b9:94:88:22:5b:b0:e6:35:87:9f:ee:e1:90:fe:c5:
                    90:c9:62:b0:72:0a:cf:1f:1f:8c:43:55:b7:b0:da:
                    5c:c2:fe:32:1c:c5:c5:43:aa:d2:3c:30:62:b6:fc:
                    8a:72:0b:3c:de:d2:f9:1f:ab:3a:7e:cd:0a:be:41:
                    a2:35:88:9b:96:94:12:83:ce:04:57:63:de:f0:e9:
                    b7:b5:12:c4:49:33:50:fe:77:00:fc:ef:18:2b:7b:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:71:9B:31:71:03:15:84:34:5C:8B:69:9B:7D:D1:80:AF:E2:0E:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/0/E2719B3171031584345C8B699B7DD180AFE20E24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.68.0/22
                IPv6:
                  2804:7390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270923

    Signature Algorithm: sha256WithRSAEncryption
         60:33:b1:5d:89:83:0b:b6:f1:1a:31:3c:26:5b:51:6a:0c:b7:
         fd:9c:3c:24:1c:dd:50:81:b0:02:fa:b7:5e:3e:94:01:9c:fd:
         8b:8d:83:f8:8b:b2:2f:d9:10:49:8b:19:2c:11:cb:7e:46:8a:
         74:3a:62:ff:d8:e1:bd:b2:a0:2d:68:35:81:1d:59:6b:2d:52:
         8b:48:6a:b4:b6:e6:5f:15:ac:a6:9d:d5:7f:4b:c3:e7:e4:b0:
         77:48:6a:eb:c3:bf:c0:ee:f9:b7:c9:da:21:08:be:17:f8:7e:
         91:0d:cc:7c:cc:7f:ad:ff:5c:f6:ca:d4:ef:ac:d3:f0:48:d7:
         18:18:ce:87:06:53:d5:44:18:70:8f:ee:fe:9b:ff:42:cf:60:
         f3:65:e9:75:9a:82:a8:d0:a6:5a:78:30:9e:a8:08:9e:e0:e3:
         f7:58:15:ee:6b:48:f3:93:03:5c:52:57:4c:f4:96:a7:25:20:
         78:a6:55:a2:95:b3:5b:7a:50:87:48:b8:bd:ab:e3:4e:37:2c:
         58:d5:29:9b:b3:b9:28:53:0f:76:e2:1a:8b:84:0d:52:4a:c7:
         6a:98:3d:63:5c:80:05:2d:d1:5d:92:6b:ba:a7:d2:2a:a5:c7:
         88:54:ad:f5:bc:93:56:1e:eb:ef:2f:bc:d2:25:d3:8d:53:49:
         0f:78:02:af
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUfvoopxS5GRxuPpzUz+ZQONA2QTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMDEwMjU2MTFaFw0yNDExMjkwMzAxMTFaMDMxMTAvBgNV
BAMTKEUyNzE5QjMxNzEwMzE1ODQzNDVDOEI2OTlCN0REMTgwQUZFMjBFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDNgLrT46LT5skdtygvkXEQ4M
55zf/nDOrywg3L8GqEhkH/+kiZrrJox1b2pUQ40vb3W1LsFedG7Bu8qqef0LdZqJ
Wnv7Yuw5y3sg2KE6EbBe0O5WyN08N6RDTtx26mqRZybkj6KVAqJ72n2XIGnHvLLz
r9kxIpZoHUZrOJl66XYzJsMKk652E1wYADPEyAPOmom8/51rh/ECNRa2VAykArjU
krmUiCJbsOY1h5/u4ZD+xZDJYrByCs8fH4xDVbew2lzC/jIcxcVDqtI8MGK2/Ipy
Czze0vkfqzp+zQq+QaI1iJuWlBKDzgRXY97w6be1EsRJM1D+dwD87xgre6Q5AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTicZsxcQMVhDRc
i2mbfdGAr+IOJDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERTREdTM3TXZVa012RDNXZFF5eHQ2aERkVGdqa3Z0cVoy
SDJlRGpuS1RXdi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ERTREdTM3TXZVa012RDNXZFF5eHQ2aERkVGdqa3Z0cVoy
SDJlRGpuS1RXdi8wL0UyNzE5QjMxNzEwMzE1ODQzNDVDOEI2OTlCN0REMTgwQUZF
MjBFMjQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAroaRDANBAIAAjAHAwUA
KARzkDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEIkswDQYJKoZIhvcNAQELBQAD
ggEBAGAzsV2Jgwu28RoxPCZbUWoMt/2cPCQc3VCBsAL6t14+lAGc/YuNg/iLsi/Z
EEmLGSwRy35GinQ6Yv/Y4b2yoC1oNYEdWWstUotIarS25l8VrKad1X9Lw+fksHdI
auvDv8Du+bfJ2iEIvhf4fpENzHzMf63/XPbK1O+s0/BI1xgYzocGU9VEGHCP7v6b
/0LPYPNl6XWagqjQplp4MJ6oCJ7g4/dYFe5rSPOTA1xSV0z0lqclIHimVaKVs1t6
UIdIuL2r4043LFjVKZuzuShTD3biGouEDVJKx2qYPWNcgAUt0V2Sa7qn0iqlx4hU
rfW8k1Ye6+8vvNIl041TSQ94Aq8=
-----END CERTIFICATE-----