Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.cer
File:                     EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.cer (raw, json)
Hash identifier:          A1BsfduzHodK+X79g9MSKHUCoQEHACF9vuMChbnn2+Y=
Subject key identifier:   EF:03:EE:27:C4:DF:9B:23:AF:62:25:4E:51:08:E6:99:74:C7:CB:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       655FA1154B196C30ABA56740FA9FE8FFE23214DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 14:14:21 +0000
Certificate not after:    Mon 10 Mar 2025 14:19:21 +0000
Subordinate resources:    AS: 267076
                          IP: 45.228.204.0/22
                          IP: 2804:47c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:a1:15:4b:19:6c:30:ab:a5:67:40:fa:9f:e8:ff:e2:32:14:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 14:14:21 2024 GMT
            Not After : Mar 10 14:19:21 2025 GMT
        Subject: CN=EF03EE27C4DF9B23AF62254E5108E69974C7CBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:a1:9f:d3:be:f4:92:7c:c8:e8:50:dd:47:
                    58:c2:3e:74:6e:30:55:09:55:df:e0:40:12:b9:97:
                    35:5e:61:88:81:c6:0c:8a:ab:12:02:44:21:74:0e:
                    9f:85:c1:10:9e:ab:55:34:c4:da:dd:de:66:fb:0c:
                    6b:42:01:b9:32:66:80:58:98:1e:b3:a0:a6:9c:49:
                    ee:b1:02:b6:0f:90:b4:4b:5e:d0:e8:e4:9d:d3:57:
                    6d:b8:02:fd:3d:1b:69:3e:87:f9:9b:21:55:fd:c1:
                    94:ab:0a:62:64:8e:68:d8:b1:04:a0:b5:d5:77:49:
                    8a:0b:19:37:a5:86:73:2b:dc:ac:04:05:88:71:ea:
                    8c:4b:99:68:ba:77:f9:55:84:27:1d:f6:e3:6b:72:
                    2c:2d:34:d4:84:d4:ae:59:0e:1d:56:27:ce:e9:f7:
                    9a:36:30:50:25:bd:ea:f6:af:c9:b7:a9:36:24:ca:
                    f5:9c:73:76:84:35:17:f3:eb:d9:68:fb:b0:59:5e:
                    b9:e3:88:da:1c:02:bc:b2:f9:e1:9e:ce:dc:f2:a7:
                    c7:49:02:01:f9:02:b1:31:b9:6d:34:d2:71:01:36:
                    be:f8:f9:24:74:6e:20:c9:98:e1:4e:6e:da:27:2c:
                    ed:02:a8:2a:02:a3:be:68:90:a9:be:db:c0:db:1c:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:03:EE:27:C4:DF:9B:23:AF:62:25:4E:51:08:E6:99:74:C7:CB:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/EF03EE27C4DF9B23AF62254E5108E69974C7CBEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.204.0/22
                IPv6:
                  2804:47c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267076

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:9b:03:71:f8:6b:7c:81:17:c4:02:46:ac:6d:8a:91:00:
         8f:35:f1:25:fe:5b:99:a0:58:c5:98:4a:19:80:29:45:c2:d5:
         1e:8b:a4:c0:b3:cf:9a:60:c9:be:6e:33:32:eb:3c:1c:d5:30:
         bd:95:d1:15:93:32:e9:bc:60:cb:76:6d:9f:f3:6f:bf:f4:46:
         39:de:02:0a:53:d9:12:94:40:33:54:6d:bf:6a:bf:26:e4:c9:
         a3:c8:74:00:9e:03:c3:7c:8f:89:53:2b:de:4c:ec:0a:1a:4a:
         54:e3:4b:a5:8d:5a:42:65:9b:c8:47:73:68:ba:49:c2:09:f2:
         9f:5a:6b:94:41:b4:4c:91:6f:8f:5b:73:e4:90:4f:48:9b:9b:
         c0:03:c8:74:03:f6:87:ba:da:fd:fb:bc:4c:72:7d:81:82:90:
         0f:d6:3e:78:44:40:bf:13:64:f5:ee:14:15:0e:19:35:4c:9d:
         41:57:f9:56:6c:38:9e:e4:30:4f:76:af:e6:ca:32:9a:b4:43:
         bc:b7:4e:ba:50:ff:84:d3:43:7f:17:9e:23:0d:cf:42:8d:32:
         11:3e:2f:10:2a:d1:8a:96:6e:9e:88:a7:b9:76:7d:9f:d6:9c:
         26:a1:78:c0:de:17:4e:27:b5:7a:8d:cd:4f:c9:d3:da:66:b2:
         39:2f:df:b7
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZV+hFUsZbDCrpWdA+p/o/+IyFNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMTExNDE0MjFaFw0yNTAzMTAxNDE5MjFaMDMxMTAvBgNV
BAMTKEVGMDNFRTI3QzRERjlCMjNBRjYyMjU0RTUxMDhFNjk5NzRDN0NCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RKGf0770knzI6FDdR1jCPnRu
MFUJVd/gQBK5lzVeYYiBxgyKqxICRCF0Dp+FwRCeq1U0xNrd3mb7DGtCAbkyZoBY
mB6zoKacSe6xArYPkLRLXtDo5J3TV224Av09G2k+h/mbIVX9wZSrCmJkjmjYsQSg
tdV3SYoLGTelhnMr3KwEBYhx6oxLmWi6d/lVhCcd9uNrciwtNNSE1K5ZDh1WJ87p
95o2MFAlver2r8m3qTYkyvWcc3aENRfz69lo+7BZXrnjiNocAryy+eGeztzyp8dJ
AgH5ArExuW000nEBNr74+SR0biDJmOFObtonLO0CqCoCo75okKm+28DbHNzFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvA+4nxN+bI69i
JU5RCOaZdMfL6jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GSEFkeW5GVVd0bzZ4MWdmeW1OVlI2d2piTTFwZHYyR29v
dHdIRXNVZFNlNi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRkhBZHluRlVXdG82eDFnZnltTlZSNndqYk0xcGR2Mkdv
b3R3SEVzVWRTZTYvMC9FRjAzRUUyN0M0REY5QjIzQUY2MjI1NEU1MTA4RTY5OTc0
QzdDQkVBLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt5MwwDQQCAAIwBwMF
ACgER8gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBNEMA0GCSqGSIb3DQEBCwUA
A4IBAQA0PZsDcfhrfIEXxAJGrG2KkQCPNfEl/luZoFjFmEoZgClFwtUei6TAs8+a
YMm+bjMy6zwc1TC9ldEVkzLpvGDLdm2f82+/9EY53gIKU9kSlEAzVG2/ar8m5Mmj
yHQAngPDfI+JUyveTOwKGkpU40uljVpCZZvIR3NouknCCfKfWmuUQbRMkW+PW3Pk
kE9Im5vAA8h0A/aHutr9+7xMcn2BgpAP1j54REC/E2T17hQVDhk1TJ1BV/lWbDie
5DBPdq/myjKatEO8t066UP+E00N/F54jDc9CjTIRPi8QKtGKlm6eiKe5dn2f1pwm
oXjA3hdOJ7V6jc1PydPaZrI5L9+3
-----END CERTIFICATE-----