Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E888AE22F26E58E48489B85354DE954F749C9280.cer
File:                     E888AE22F26E58E48489B85354DE954F749C9280.cer (raw, json)
Hash identifier:          vplcBJNpQeSfzskdVm97rZ2wBaRS1m9jxRoSnkQxL58=
Subject key identifier:   E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5723205B3EA7D797FA2E9B2B85D6E08B4534A672
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/E888AE22F26E58E48489B85354DE954F749C9280.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:05:35 +0000
Certificate not after:    Fri 11 Apr 2025 13:10:35 +0000
Subordinate resources:    AS: 264138
                          IP: 138.97.84.0/22
                          IP: 2804:2308::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:23:20:5b:3e:a7:d7:97:fa:2e:9b:2b:85:d6:e0:8b:45:34:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:05:35 2024 GMT
            Not After : Apr 11 13:10:35 2025 GMT
        Subject: CN=E888AE22F26E58E48489B85354DE954F749C9280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:3b:c9:a9:f8:31:a6:d0:ee:06:8f:ea:f8:
                    ff:f1:39:d5:6a:38:de:06:dd:ac:d5:73:66:b6:3c:
                    3c:e1:88:af:d3:b0:a8:be:ff:c6:79:46:95:04:61:
                    2f:3e:c1:e7:77:91:37:b5:a9:b2:67:9a:22:70:60:
                    20:ee:02:6f:6f:f1:f4:65:e9:f3:80:fb:32:71:60:
                    4b:2c:b9:cf:0c:5c:98:94:6b:03:27:cb:c5:11:f8:
                    fb:2f:15:4c:14:e5:ef:13:87:c2:8e:6f:9a:01:09:
                    e9:87:ae:29:9a:70:f4:88:51:1c:18:56:28:9f:ab:
                    bf:47:71:c2:b6:6f:77:12:91:3d:b0:04:2e:b3:91:
                    56:27:d1:46:cf:50:4d:c6:be:49:9c:e5:16:bf:1c:
                    84:a8:02:43:e7:aa:b0:fb:b7:45:05:96:f8:69:e0:
                    1d:c3:5f:f1:86:a6:1a:5e:ac:d6:e9:4f:5b:9a:72:
                    4a:e6:c3:a0:a0:2a:2b:97:7d:e2:02:96:22:65:ab:
                    82:70:ca:10:c0:e9:2d:e2:38:81:6b:e9:4a:5b:9b:
                    e1:c9:33:d2:35:46:97:87:24:76:4f:41:5d:cb:ab:
                    c4:43:68:4d:61:8c:64:b2:a4:1d:b4:79:30:95:0f:
                    c4:b3:80:96:d9:af:9d:fd:bf:ae:15:a1:91:dc:48:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/E888AE22F26E58E48489B85354DE954F749C9280.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.84.0/22
                IPv6:
                  2804:2308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264138

    Signature Algorithm: sha256WithRSAEncryption
         12:87:c7:aa:f7:04:30:a8:33:ae:0b:fb:b8:2d:07:4f:2c:6d:
         59:da:fb:5f:b3:13:72:58:91:29:cf:60:f1:db:40:9a:93:29:
         76:f2:ea:78:0e:7d:62:d7:e0:78:d0:32:70:5c:56:b7:48:f5:
         17:b7:aa:14:6c:0d:12:48:8f:89:f4:c2:63:ae:33:e6:eb:bb:
         74:ae:29:10:56:23:fc:1b:34:99:4d:30:cd:92:6a:f2:fb:06:
         b9:68:ce:00:30:9a:54:8a:d5:1c:10:fb:2b:2b:fa:c7:80:47:
         f9:2b:11:bf:02:05:b6:c9:a7:e0:09:54:fa:a8:ac:4c:ef:04:
         5a:7a:83:bd:88:d7:64:58:9e:b2:bf:34:49:df:28:80:73:77:
         2f:e4:c4:7c:67:ba:22:3e:0b:d7:1c:0d:c7:a0:10:ee:a5:aa:
         42:67:ac:5a:bb:c4:5b:e5:d7:93:dd:02:91:e5:68:ad:c6:2d:
         9a:9c:89:a1:ee:bf:6b:7d:22:8e:9d:38:ba:e9:60:25:85:93:
         a7:93:b6:54:10:a4:9e:84:e8:6d:1b:a7:14:ef:91:2d:be:cd:
         4b:12:b3:8f:75:1f:cf:31:a1:3b:23:1f:36:af:a9:83:36:8f:
         09:97:e4:f5:3c:2f:27:dd:52:e3:c3:4f:b6:ce:7a:96:17:2d:
         49:be:41:c6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUVyMgWz6n15f6Lpsrhdbgi0U0pnIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MTIxMzA1MzVaFw0yNTA0MTExMzEwMzVaMDMxMTAvBgNV
BAMTKEU4ODhBRTIyRjI2RTU4RTQ4NDg5Qjg1MzU0REU5NTRGNzQ5QzkyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/zvJqfgxptDuBo/q+P/xOdVq
ON4G3azVc2a2PDzhiK/TsKi+/8Z5RpUEYS8+wed3kTe1qbJnmiJwYCDuAm9v8fRl
6fOA+zJxYEssuc8MXJiUawMny8UR+PsvFUwU5e8Th8KOb5oBCemHrimacPSIURwY
Viifq79HccK2b3cSkT2wBC6zkVYn0UbPUE3Gvkmc5Ra/HISoAkPnqrD7t0UFlvhp
4B3DX/GGphperNbpT1uackrmw6CgKiuXfeICliJlq4JwyhDA6S3iOIFr6Upbm+HJ
M9I1RpeHJHZPQV3Lq8RDaE1hjGSypB20eTCVD8SzgJbZr539v64VoZHcSK4tAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToiK4i8m5Y5ISJ
uFNU3pVPdJySgDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82M01OemppTXlCdGdxMWZ0MkFhcHEzWWNqanduV0tza1pC
TEgxanZCclNEdi8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNjNNTnpqaU15QnRncTFmdDJBYXBxM1ljamp3bldLc2ta
QkxIMWp2QnJTRHYvMS9FODg4QUUyMkYyNkU1OEU0ODQ4OUI4NTM1NERFOTU0Rjc0
OUM5MjgwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKKYVQwDQQCAAIwBwMF
ACgEIwgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAfKMA0GCSqGSIb3DQEBCwUA
A4IBAQASh8eq9wQwqDOuC/u4LQdPLG1Z2vtfsxNyWJEpz2Dx20Cakyl28up4Dn1i
1+B40DJwXFa3SPUXt6oUbA0SSI+J9MJjrjPm67t0rikQViP8GzSZTTDNkmry+wa5
aM4AMJpUitUcEPsrK/rHgEf5KxG/AgW2yafgCVT6qKxM7wRaeoO9iNdkWJ6yvzRJ
3yiAc3cv5MR8Z7oiPgvXHA3HoBDupapCZ6xau8Rb5deT3QKR5Witxi2anImh7r9r
fSKOnTi66WAlhZOnk7ZUEKSehOhtG6cU75Etvs1LErOPdR/PMaE7Ix82r6mDNo8J
l+T1PC8n3VLjw0+2znqWFy1JvkHG
-----END CERTIFICATE-----