Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.cer
File:                     EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.cer (raw, json)
Hash identifier:          Z5iEKI7AzlOWAMyrfzrsII5kGf4boBM+zN/GUASVblM=
Subject key identifier:   EF:E0:39:64:DB:34:2A:D0:23:EA:7E:3D:58:F0:9D:FE:0D:F6:2B:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5977DAB7F5BC62988227B6DED0C06383482B7274
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 14:07:13 +0000
Certificate not after:    Tue 25 Feb 2025 14:12:13 +0000
Subordinate resources:    AS: 268838
                          IP: 45.174.36.0/22
                          IP: 2804:5b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:77:da:b7:f5:bc:62:98:82:27:b6:de:d0:c0:63:83:48:2b:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 14:07:13 2024 GMT
            Not After : Feb 25 14:12:13 2025 GMT
        Subject: CN=EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:10:46:06:17:8a:10:15:58:05:d4:cd:37:
                    94:fa:20:77:70:02:c8:d9:80:e8:27:6e:f6:e1:8e:
                    55:df:72:38:96:d8:c9:23:45:42:13:28:78:97:17:
                    d6:aa:54:e4:74:4b:92:9e:6f:c9:47:59:19:b7:34:
                    82:bd:fe:6c:75:8f:82:23:d3:1f:f9:3a:3b:c7:36:
                    1e:ea:5a:4a:83:a5:9d:8c:8a:fc:42:f9:5b:0c:b7:
                    3f:f8:b0:5b:b7:23:d1:f7:2c:55:86:e7:3c:e1:35:
                    1b:d1:97:cb:45:a8:e0:97:d9:c8:59:34:31:da:e3:
                    62:e8:dc:80:9b:64:7a:ff:7b:02:04:6b:7f:4a:b4:
                    99:ec:ac:34:9c:60:17:0e:cc:17:76:b6:6c:aa:ee:
                    3f:ad:09:1b:4e:14:ed:cd:05:02:af:f5:96:1f:34:
                    e7:50:7a:5f:84:ae:49:43:6f:c8:8c:99:51:ec:67:
                    fc:06:47:de:d3:5c:b3:64:6e:a1:3d:3f:fc:bd:98:
                    9b:ef:bf:9e:35:76:18:60:3e:e8:ee:a3:ef:bf:b6:
                    b4:b7:34:05:21:0c:50:a8:76:4e:1e:6d:3b:e8:34:
                    b9:cb:62:33:36:1f:4c:c1:d4:29:32:2a:aa:00:b2:
                    15:32:84:9a:f4:5d:6d:30:fc:eb:cc:fe:17:a3:f7:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:E0:39:64:DB:34:2A:D0:23:EA:7E:3D:58:F0:9D:FE:0D:F6:2B:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ww6DNLj74mmSj5peDwKkSG9RXZ9Jj21Guk6KHxcSUX2/0/EFE03964DB342AD023EA7E3D58F09DFE0DF62BD6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.36.0/22
                IPv6:
                  2804:5b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268838

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:d8:5e:f5:7a:2b:7b:9a:35:db:46:82:d5:ae:17:9f:57:
         52:ea:74:0e:29:40:89:1e:6e:41:a4:53:74:b0:98:9c:c8:2f:
         c2:bf:03:1e:3a:23:19:b2:dc:ba:aa:76:5f:71:62:cd:b1:3a:
         f1:2e:a0:97:8b:d5:d6:3d:82:26:e4:b0:bd:0d:65:d8:9d:60:
         c5:37:b2:9a:7e:f9:5a:11:b8:e6:86:c4:b1:86:d7:d5:8f:ff:
         dd:82:82:ba:24:69:31:0b:6f:32:c0:12:93:25:6b:8b:3b:32:
         f9:90:55:ab:0b:ae:47:4e:fa:93:0d:6a:17:ea:f2:9a:93:5b:
         83:c3:18:c6:dc:4e:f0:5a:12:9c:8e:d8:92:c5:7e:92:3f:66:
         cf:3c:b3:04:aa:a8:58:bd:a9:34:28:51:f7:ae:5b:23:0d:49:
         3e:0f:66:d2:ae:69:d8:46:43:1f:4c:57:1e:b5:e2:23:42:d8:
         1d:8c:b0:a1:74:07:8b:39:b2:d0:fb:18:2a:73:1f:8c:52:71:
         32:de:21:11:97:6b:c0:83:90:23:54:6d:21:c9:b7:59:85:4a:
         45:6d:74:fa:7d:8c:34:5c:9d:48:0b:4f:b8:0f:8b:71:48:02:
         79:83:71:8a:2f:7c:4a:f6:82:01:34:3b:7c:e3:72:5b:79:70:
         69:97:85:0c
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUWXfat/W8YpiCJ7be0MBjg0grcnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjcxNDA3MTNaFw0yNTAyMjUxNDEyMTNaMDMxMTAvBgNV
BAMTKEVGRTAzOTY0REIzNDJBRDAyM0VBN0UzRDU4RjA5REZFMERGNjJCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMBBGBheKEBVYBdTNN5T6IHdw
AsjZgOgnbvbhjlXfcjiW2MkjRUITKHiXF9aqVOR0S5Keb8lHWRm3NIK9/mx1j4Ij
0x/5OjvHNh7qWkqDpZ2MivxC+VsMtz/4sFu3I9H3LFWG5zzhNRvRl8tFqOCX2chZ
NDHa42Lo3ICbZHr/ewIEa39KtJnsrDScYBcOzBd2tmyq7j+tCRtOFO3NBQKv9ZYf
NOdQel+ErklDb8iMmVHsZ/wGR97TXLNkbqE9P/y9mJvvv541dhhgPujuo++/trS3
NAUhDFCodk4ebTvoNLnLYjM2H0zB1CkyKqoAshUyhJr0XW0w/OvM/hej94j/AgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTv4Dlk2zQq0CPq
fj1Y8J3+DfYr1jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby83d3c2RE5Majc0bW1TajVwZUR3S2tTRzlSWFo5SmoyMUd1
azZLSHhjU1VYMi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vN3d3NkROTGo3NG1tU2o1cGVEd0trU0c5UlhaOUpqMjFH
dWs2S0h4Y1NVWDIvMC9FRkUwMzk2NERCMzQyQUQwMjNFQTdFM0Q1OEYwOURGRTBE
RjYyQkQ2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItriQwDQQCAAIwBwMF
ACgEW2AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBomMA0GCSqGSIb3DQEBCwUA
A4IBAQBZXNhe9Xore5o120aC1a4Xn1dS6nQOKUCJHm5BpFN0sJicyC/CvwMeOiMZ
sty6qnZfcWLNsTrxLqCXi9XWPYIm5LC9DWXYnWDFN7KafvlaEbjmhsSxhtfVj//d
goK6JGkxC28ywBKTJWuLOzL5kFWrC65HTvqTDWoX6vKak1uDwxjG3E7wWhKcjtiS
xX6SP2bPPLMEqqhYvak0KFH3rlsjDUk+D2bSrmnYRkMfTFceteIjQtgdjLChdAeL
ObLQ+xgqcx+MUnEy3iERl2vAg5AjVG0hybdZhUpFbXT6fYw0XJ1IC0+4D4txSAJ5
g3GKL3xK9oIBNDt843JbeXBpl4UM
-----END CERTIFICATE-----