Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
File:                     E2FF49A626C8B330586377D2B4398CBC24FA586E.cer (raw, json)
Hash identifier:          5dpH9MzPZqkjTv9j5Ba8q2PlOzwEVbYiF40iC/KWSE4=
Subject key identifier:   E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23B372E0712107F50ED8792076C19489FF30AFFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 14:21:26 +0000
Certificate not after:    Thu 30 Jan 2025 14:26:26 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b3:72:e0:71:21:07:f5:0e:d8:79:20:76:c1:94:89:ff:30:af:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 14:21:26 2024 GMT
            Not After : Jan 30 14:26:26 2025 GMT
        Subject: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:ac:18:a9:af:00:de:ae:67:93:59:6b:8d:
                    62:2f:95:16:4c:b7:e2:c4:e1:ff:21:92:c4:7d:9e:
                    9b:ff:6f:8b:12:7e:9a:ca:0c:40:14:9c:8f:e2:f1:
                    12:a6:b4:a1:ad:74:05:37:5b:56:d2:f9:05:d2:39:
                    9e:42:3a:c2:4b:00:66:44:eb:25:6b:3e:3f:45:e8:
                    26:d1:2f:f7:41:5c:d6:bb:6a:28:39:94:d2:4b:3c:
                    7b:ee:6a:ad:9d:45:fb:75:39:20:81:3b:f4:7d:ef:
                    65:71:a9:70:d0:08:ba:62:f0:50:01:0e:ab:58:a3:
                    40:57:aa:62:dd:12:96:7b:66:ea:dc:27:0d:14:d9:
                    c7:1c:ef:17:60:f5:79:7e:78:0b:01:d0:fb:10:4c:
                    c9:6f:ba:6a:47:b4:b4:e3:c8:e0:c8:5e:49:fb:82:
                    70:ef:22:a3:5a:af:9a:da:83:56:59:ea:0a:b8:5b:
                    85:74:8d:e0:92:4c:2a:0d:f3:ed:ae:36:7f:de:12:
                    f1:70:38:52:18:63:d3:35:a9:4d:3e:c0:52:d7:82:
                    8a:ab:c6:4c:4b:d8:84:7a:31:e4:39:3c:b6:bb:91:
                    61:3d:9e:60:94:71:f1:eb:8f:c9:1a:69:f6:72:f4:
                    e3:74:96:05:ff:55:bb:f7:c5:46:56:95:22:c3:a0:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:16:a3:62:10:e3:e9:a9:ee:e6:9c:25:c8:be:3e:1c:e8:
         68:dd:50:81:29:6c:37:e8:c8:ee:7f:65:f8:a9:1f:ab:15:c4:
         06:c1:0c:5e:71:75:4f:99:fb:2c:34:fa:be:09:0f:41:23:4c:
         28:e3:a9:46:a4:ae:af:c3:3e:97:78:f8:c8:e3:c3:1d:e4:32:
         be:55:ac:d4:45:6e:04:da:a8:d8:29:46:ba:03:12:2c:63:5f:
         53:77:92:48:12:56:6d:51:48:16:31:2d:f1:3f:be:36:6e:ba:
         0b:50:22:b4:2c:92:0b:fc:59:4e:0b:85:33:9b:10:71:62:21:
         9b:a8:06:02:0f:39:35:f9:0f:a7:8e:f5:da:0d:48:ea:2a:de:
         e2:7d:1e:f9:de:97:ad:44:71:3c:03:9c:f1:e2:47:1e:dc:49:
         e9:c1:35:6d:b7:c5:b7:c0:cc:b2:07:df:0b:eb:63:9a:02:c2:
         38:e9:46:18:0b:eb:41:dd:33:04:dc:b1:9f:68:30:78:58:17:
         a3:19:f0:38:0f:6e:69:1f:59:2d:32:68:31:45:98:b8:28:3f:
         26:b7:6f:95:81:b5:cc:71:c0:7d:18:3d:06:5e:a8:1c:86:5d:
         e7:0d:96:2b:f3:ff:d6:39:9b:46:a0:1a:50:f5:3b:ba:02:5e:
         de:74:67:07
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUI7Ny4HEhB/UO2HkgdsGUif8wr/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMDExNDIxMjZaFw0yNTAxMzAxNDI2MjZaMDMxMTAvBgNV
BAMTKEUyRkY0OUE2MjZDOEIzMzA1ODYzNzdEMkI0Mzk4Q0JDMjRGQTU4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfq6wYqa8A3q5nk1lrjWIvlRZM
t+LE4f8hksR9npv/b4sSfprKDEAUnI/i8RKmtKGtdAU3W1bS+QXSOZ5COsJLAGZE
6yVrPj9F6CbRL/dBXNa7aig5lNJLPHvuaq2dRft1OSCBO/R972VxqXDQCLpi8FAB
DqtYo0BXqmLdEpZ7ZurcJw0U2ccc7xdg9Xl+eAsB0PsQTMlvumpHtLTjyODIXkn7
gnDvIqNar5rag1ZZ6gq4W4V0jeCSTCoN8+2uNn/eEvFwOFIYY9M1qU0+wFLXgoqr
xkxL2IR6MeQ5PLa7kWE9nmCUcfHrj8kaafZy9ON0lgX/Vbv3xUZWlSLDoCM5AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTi/0mmJsizMFhj
d9K0OYy8JPpYbjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83WXVwTEFweUU4cDFqYUJhTVJWc1RXcXBvVGdRSnRjNFVT
VFdoNlZlbWVLdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN1l1cExBcHlFOHAxamFCYU1SVnNUV3Fwb1RnUUp0YzRV
U1RXaDZWZW1lS3QvMC9FMkZGNDlBNjI2QzhCMzMwNTg2Mzc3RDJCNDM5OENCQzI0
RkE1ODZFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItsAQwDQQCAAIwBwMF
ACgEXLQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBp9MA0GCSqGSIb3DQEBCwUA
A4IBAQCcqRajYhDj6anu5pwlyL4+HOho3VCBKWw36Mjuf2X4qR+rFcQGwQxecXVP
mfssNPq+CQ9BI0wo46lGpK6vwz6XePjI48Md5DK+VazURW4E2qjYKUa6AxIsY19T
d5JIElZtUUgWMS3xP742broLUCK0LJIL/FlOC4UzmxBxYiGbqAYCDzk1+Q+njvXa
DUjqKt7ifR753petRHE8A5zx4kce3EnpwTVtt8W3wMyyB98L62OaAsI46UYYC+tB
3TME3LGfaDB4WBejGfA4D25pH1ktMmgxRZi4KD8mt2+VgbXMccB9GD0GXqgchl3n
DZYr8//WOZtGoBpQ9Tu6Al7edGcH
-----END CERTIFICATE-----