Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer
File:                     EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer (raw, json)
Hash identifier:          8PsTQGNHYZVK9VHe5Zx2oPu8h+O56fUny41w+eeRxDk=
Subject key identifier:   EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B6BF9B15BA8B8D956D505B2129178C02AAB11CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 03:35:08 +0000
Certificate not after:    Sun 16 Feb 2025 03:40:08 +0000
Subordinate resources:    AS: 268250
                          IP: 45.236.236.0/22
                          IP: 2804:4e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6b:f9:b1:5b:a8:b8:d9:56:d5:05:b2:12:91:78:c0:2a:ab:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 03:35:08 2024 GMT
            Not After : Feb 16 03:40:08 2025 GMT
        Subject: CN=EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:d2:95:97:93:69:0e:9d:86:e6:c2:0f:a6:
                    42:aa:6d:55:f8:82:28:a9:e0:ec:de:9a:e7:7b:d3:
                    61:d9:ad:8b:1b:73:08:51:33:5f:84:d8:57:9e:93:
                    83:20:43:ab:02:da:8c:e2:f6:03:23:84:7d:aa:22:
                    e6:92:90:1f:36:9c:8a:80:89:32:fb:11:3a:4e:20:
                    19:30:75:3d:f2:e5:39:63:19:55:8f:95:b5:79:e5:
                    2c:b9:c4:83:75:68:78:fd:47:8d:65:0f:07:27:7c:
                    6c:9a:7a:34:7c:de:46:f2:4e:e6:3d:02:45:16:8a:
                    15:95:fa:5f:0f:5b:85:92:d0:b9:f8:b9:06:79:26:
                    dd:fe:28:b5:5f:69:c7:9c:2a:2c:61:5b:43:7b:6b:
                    74:ec:06:a5:5e:8e:27:f6:78:d4:98:67:e7:d3:71:
                    75:a4:1b:66:2a:08:f6:fa:24:c9:f0:22:d9:69:e1:
                    d9:e9:b6:3f:40:c8:66:82:d4:ab:fc:77:f1:01:a5:
                    d2:89:c1:5a:49:fd:b7:fa:98:0e:ab:ad:d4:2b:8e:
                    c7:30:3b:57:ec:19:13:d2:74:3a:38:4d:9f:05:d7:
                    16:18:03:fb:3a:b3:1b:35:62:44:42:b1:1c:df:e5:
                    84:65:a4:fd:41:ba:d2:0a:94:5e:13:72:16:bf:d9:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.236.0/22
                IPv6:
                  2804:4e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268250

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:ec:1b:b2:1c:cd:15:2c:23:bf:cb:1a:31:ab:24:83:09:
         d0:0a:c6:77:20:a5:55:bd:44:b2:7e:35:b4:e5:96:ef:cf:58:
         8e:c5:0f:93:1b:62:a0:3a:5b:ff:fa:11:a6:f9:57:a0:ff:17:
         29:d3:93:16:04:e2:ca:00:83:bd:f5:90:74:5a:ad:d1:71:c8:
         60:c2:ae:de:31:9c:e8:38:c3:b1:33:83:60:1a:a3:2c:65:3c:
         fa:1a:9f:b1:60:8b:3a:3a:18:7c:4a:cd:17:19:b4:51:3c:ab:
         a5:ca:e4:57:f5:a7:4f:b3:9e:1f:03:04:94:50:b5:19:69:d3:
         2a:c9:79:36:11:4b:7a:fa:36:bc:f5:ad:ff:3e:bf:0c:03:07:
         27:6c:de:b4:2f:ec:d7:1b:e0:85:b8:c8:d0:1c:73:3f:d7:d1:
         2a:0c:3b:5c:09:31:82:1e:ea:11:e6:3e:6c:42:7e:f2:79:2e:
         81:0e:44:32:2f:7e:9a:3a:aa:f5:6d:32:08:bc:c7:59:66:e4:
         f1:48:21:a0:fe:f8:9c:86:6b:ee:fd:14:7f:5e:85:cf:5b:d4:
         7e:25:53:06:94:86:54:7a:c2:b3:bf:5f:ab:52:d6:a9:63:a6:
         6b:b2:1d:f4:2d:43:eb:ad:b7:59:1d:0d:7c:12:ea:37:68:28:
         55:80:05:e7
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUS2v5sVuouNlW1QWyEpF4wCqrEc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTgwMzM1MDhaFw0yNTAyMTYwMzQwMDhaMDMxMTAvBgNV
BAMTKEVCQkEzMjZFNDU2Mzk2NkU4QjBCODI2MkU3RENFRjgzQ0RDOUNCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnAtKVl5NpDp2G5sIPpkKqbVX4
giip4Ozemud702HZrYsbcwhRM1+E2Feek4MgQ6sC2ozi9gMjhH2qIuaSkB82nIqA
iTL7ETpOIBkwdT3y5TljGVWPlbV55Sy5xIN1aHj9R41lDwcnfGyaejR83kbyTuY9
AkUWihWV+l8PW4WS0Ln4uQZ5Jt3+KLVfacecKixhW0N7a3TsBqVejif2eNSYZ+fT
cXWkG2YqCPb6JMnwItlp4dnptj9AyGaC1Kv8d/EBpdKJwVpJ/bf6mA6rrdQrjscw
O1fsGRPSdDo4TZ8F1xYYA/s6sxs1YkRCsRzf5YRlpP1ButIKlF4Tcha/2ZIjAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTrujJuRWOWbosL
gmLn3O+DzcnLazAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRm43TFEySHNuQTJKYlRkTHA2RmVFcG15YzhWOHZSRXBG
TTNDdWE3bmR1Yy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CRm43TFEySHNuQTJKYlRkTHA2RmVFcG15YzhWOHZSRXBG
TTNDdWE3bmR1Yy8wL0VCQkEzMjZFNDU2Mzk2NkU4QjBCODI2MkU3RENFRjgzQ0RD
OUNCNkIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3s7DANBAIAAjAHAwUA
KARORDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEF9owDQYJKoZIhvcNAQELBQAD
ggEBAKVu7BuyHM0VLCO/yxoxqySDCdAKxncgpVW9RLJ+NbTllu/PWI7FD5MbYqA6
W//6Eab5V6D/FynTkxYE4soAg731kHRardFxyGDCrt4xnOg4w7Ezg2AaoyxlPPoa
n7Fgizo6GHxKzRcZtFE8q6XK5Ff1p0+znh8DBJRQtRlp0yrJeTYRS3r6Nrz1rf8+
vwwDByds3rQv7Ncb4IW4yNAccz/X0SoMO1wJMYIe6hHmPmxCfvJ5LoEORDIvfpo6
qvVtMgi8x1lm5PFIIaD++JyGa+79FH9ehc9b1H4lUwaUhlR6wrO/X6tS1qljpmuy
HfQtQ+utt1kdDXwS6jdoKFWABec=
-----END CERTIFICATE-----