Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
File:                     EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer (raw, json)
Hash identifier:          KkMhzWL3RnI6RZjv4SRG1uyGOK/nv37GgcOEZv4Ggyo=
Subject key identifier:   EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B95DBE084368E54E6B09CEEE0A95E624A164C4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 14:51:34 +0000
Certificate not after:    Thu 13 Feb 2025 14:56:34 +0000
Subordinate resources:    AS: 266054
                          IP: 45.4.40.0/22
                          IP: 2804:39d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:95:db:e0:84:36:8e:54:e6:b0:9c:ee:e0:a9:5e:62:4a:16:4c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 14:51:34 2024 GMT
            Not After : Feb 13 14:56:34 2025 GMT
        Subject: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:6d:00:e7:11:89:30:84:74:84:49:fc:09:
                    97:63:e6:46:75:8f:4d:ac:eb:ff:89:5f:51:ec:9e:
                    19:cb:e9:69:c9:a5:8e:18:cc:dd:72:87:32:b1:fd:
                    a6:01:1a:ab:4e:32:17:e6:63:e4:bb:b5:52:63:ac:
                    ef:95:e6:e1:df:ba:6e:34:0d:24:f0:7f:e9:7c:94:
                    7e:da:5a:73:61:55:59:b5:92:f8:9a:b5:54:3e:be:
                    f9:b0:3c:89:94:29:18:c7:89:6d:75:17:0d:4e:aa:
                    7f:09:66:37:c9:d4:1b:3f:6d:d6:9c:e7:d9:18:f2:
                    ae:6d:31:4f:74:54:13:ca:f9:d7:9d:5f:8e:b8:03:
                    68:7d:8c:91:ee:61:02:e0:e4:25:f9:44:60:4d:51:
                    69:a8:e5:58:ec:1d:54:d9:b3:2b:93:98:79:72:1b:
                    0e:a1:46:a5:21:6c:f2:27:91:20:cd:78:f3:68:b7:
                    e6:3c:f6:dd:36:dd:5f:97:93:9c:3a:ef:04:36:da:
                    3d:5d:3d:1f:36:36:ae:a5:4a:97:79:ca:1d:8a:1c:
                    bf:ea:28:0c:48:fb:3b:f0:01:ab:a5:5b:5e:77:4f:
                    b7:03:45:f7:97:4e:0b:25:12:73:cf:8a:bc:30:70:
                    75:74:d6:ac:98:9c:ac:0c:3d:31:db:dc:fb:08:b2:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/22
                IPv6:
                  2804:39d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266054

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:c0:81:aa:95:48:c8:7f:e1:19:cc:d9:84:8e:70:9b:f8:
         58:f2:c3:5d:00:f9:04:53:8e:78:79:9d:f3:d1:0d:76:44:89:
         d4:ba:da:ec:ee:d7:68:f6:bf:23:79:21:11:70:29:70:53:7d:
         d0:4c:75:60:91:4a:9a:e2:47:60:9d:df:af:63:7d:60:16:63:
         09:f3:4a:36:27:47:6a:1c:38:1d:60:55:51:e7:1d:a8:b9:50:
         6a:77:dc:5c:b7:27:70:de:a6:ab:af:c1:46:de:8c:63:a2:0e:
         1e:95:05:a2:81:1b:88:7d:cd:1a:6a:79:33:a6:bd:b6:07:52:
         7b:c4:db:59:39:b7:37:0d:4e:3f:14:d0:67:96:3c:7c:07:a2:
         14:a6:15:95:3f:aa:16:a3:54:9e:ad:08:3e:9c:c4:ec:4c:77:
         a4:38:f2:4e:66:5a:8d:71:27:b9:4f:43:4b:0d:75:03:0b:97:
         96:1c:91:55:04:91:ab:26:12:d1:0f:93:44:62:94:05:b7:f0:
         0a:03:c7:9a:34:b2:c4:c6:73:17:d6:7c:da:49:3b:83:b4:18:
         50:8a:69:b0:7d:58:c9:02:22:a5:2c:f2:c4:41:dc:d1:50:1a:
         f2:11:cb:bf:de:54:3f:b9:4e:2f:3f:f5:ed:95:0f:f7:02:e1:
         a9:d7:a5:3a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUS5Xb4IQ2jlTmsJzu4KleYkoWTE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTUxNDUxMzRaFw0yNTAyMTMxNDU2MzRaMDMxMTAvBgNV
BAMTKEVCNEE2NTY4NzE1NDlFMEIyMkFDREFCRjJCRDFBMkExMTk3MzVEODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsj20A5xGJMIR0hEn8CZdj5kZ1
j02s6/+JX1HsnhnL6WnJpY4YzN1yhzKx/aYBGqtOMhfmY+S7tVJjrO+V5uHfum40
DSTwf+l8lH7aWnNhVVm1kviatVQ+vvmwPImUKRjHiW11Fw1Oqn8JZjfJ1Bs/bdac
59kY8q5tMU90VBPK+dedX464A2h9jJHuYQLg5CX5RGBNUWmo5VjsHVTZsyuTmHly
Gw6hRqUhbPInkSDNePNot+Y89t023V+Xk5w67wQ22j1dPR82Nq6lSpd5yh2KHL/q
KAxI+zvwAaulW153T7cDRfeXTgslEnPPirwwcHV01qyYnKwMPTHb3PsIsoIvAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrSmVocVSeCyKs
2r8r0aKhGXNdhDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82SmhKMlU4NUUyMkF0TVZkU3hMRVRhdGhVTFYxemdUa0xC
S2NTcVBUZVRUdS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNkpoSjJVODVFMjJBdE1WZFN4TEVUYXRoVUxWMXpnVGtM
QktjU3FQVGVUVHUvMC9FQjRBNjU2ODcxNTQ5RTBCMjJBQ0RBQkYyQkQxQTJBMTE5
NzM1RDg0Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItBCgwDQQCAAIwBwMF
ACgEOdgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBA9GMA0GCSqGSIb3DQEBCwUA
A4IBAQALSsCBqpVIyH/hGczZhI5wm/hY8sNdAPkEU454eZ3z0Q12RInUutrs7tdo
9r8jeSERcClwU33QTHVgkUqa4kdgnd+vY31gFmMJ80o2J0dqHDgdYFVR5x2ouVBq
d9xctydw3qarr8FG3oxjog4elQWigRuIfc0aankzpr22B1J7xNtZObc3DU4/FNBn
ljx8B6IUphWVP6oWo1SerQg+nMTsTHekOPJOZlqNcSe5T0NLDXUDC5eWHJFVBJGr
JhLRD5NEYpQFt/AKA8eaNLLExnMX1nzaSTuDtBhQimmwfVjJAiKlLPLEQdzRUBry
Ecu/3lQ/uU4vP/XtlQ/3AuGp16U6
-----END CERTIFICATE-----