Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FB55391412BDE10B53428AACB9E329201BF68D11.cer
File:                     FB55391412BDE10B53428AACB9E329201BF68D11.cer (raw, json)
Hash identifier:          qKuYHg5g8VdyHYeI/blVQsSHOF2QN3lHf9N1QAlqcJc=
Subject key identifier:   FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       481CC1AE50C035C9BFE97FD5601E04D9C0AF9978
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 18:37:52 +0000
Certificate not after:    Wed 26 Feb 2025 18:42:52 +0000
Subordinate resources:    AS: 268331
                          IP: 45.238.112.0/22
                          IP: 2804:4f84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1c:c1:ae:50:c0:35:c9:bf:e9:7f:d5:60:1e:04:d9:c0:af:99:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 18:37:52 2024 GMT
            Not After : Feb 26 18:42:52 2025 GMT
        Subject: CN=FB55391412BDE10B53428AACB9E329201BF68D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:e4:53:3d:76:48:e5:87:66:ff:10:c5:cd:
                    a1:f0:8e:9c:23:7f:f4:18:b2:49:be:6a:c4:a1:19:
                    16:a8:a2:61:5b:68:23:6d:41:8e:bd:f9:e4:6d:8d:
                    86:12:ce:ae:b4:e8:6c:05:0d:54:80:90:f9:63:32:
                    3f:35:64:5f:ad:5b:2a:ff:76:d6:ba:80:94:06:f3:
                    19:0c:7d:f9:f5:8e:13:5a:13:18:45:29:5a:ce:34:
                    98:fb:8f:e0:ab:62:79:2f:1c:83:5e:af:91:82:aa:
                    d7:05:f6:f2:81:d3:2b:b0:a0:89:ef:b9:64:70:a3:
                    c6:9b:1e:d1:f3:e5:e9:ec:0c:3f:72:f5:f6:61:49:
                    d6:32:06:fd:04:41:24:3a:4e:d1:68:ba:16:e7:38:
                    ef:d2:a0:85:92:a8:40:06:23:04:65:71:5b:bb:15:
                    95:64:6b:3c:ef:96:4f:00:28:7d:bc:08:44:4c:66:
                    83:69:f8:9b:0e:6d:b0:04:ac:bc:d7:16:53:4f:14:
                    93:d7:f0:be:18:26:fc:f2:91:77:76:59:e4:8e:89:
                    20:3c:8d:8f:da:d7:a2:2b:00:f0:04:82:7e:3c:59:
                    49:ac:57:b0:a5:05:d6:2c:91:24:cc:3d:2a:8f:f0:
                    d7:db:dd:9a:5b:0e:b5:d5:cc:3e:3f:2a:6e:62:1f:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:55:39:14:12:BD:E1:0B:53:42:8A:AC:B9:E3:29:20:1B:F6:8D:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/FB55391412BDE10B53428AACB9E329201BF68D11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/22
                IPv6:
                  2804:4f84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268331

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:4b:ee:5c:49:32:72:87:58:0b:af:df:cb:66:93:c9:3e:
         2f:6a:00:ef:b0:b2:c6:52:c8:f3:06:be:cb:cf:f9:fe:bb:f9:
         c7:fe:3d:87:73:66:bc:b9:3f:5a:4d:48:2c:d5:e4:0e:b6:57:
         68:7c:cf:32:fd:50:14:e8:62:98:c7:f8:94:ef:f0:18:6d:99:
         d6:51:60:29:a6:02:09:c1:1e:02:8a:aa:03:7a:31:78:c9:40:
         01:7c:47:39:e8:07:08:f8:14:da:d6:1c:37:d2:69:bf:47:ec:
         f7:3c:9a:bb:0c:ab:41:a1:45:f0:02:c8:19:aa:4f:62:e0:75:
         e0:e5:c0:6c:b8:1c:96:fc:a4:ec:a7:d3:e8:6c:cd:6f:55:2c:
         1b:11:8e:16:73:32:51:53:c4:e1:29:c0:81:49:87:dc:1a:6f:
         05:0f:bd:f0:22:e8:dd:2d:01:01:26:fc:84:0f:38:2d:7f:3f:
         62:68:34:55:a5:67:c3:09:7c:67:2c:b5:04:86:ab:58:1a:50:
         01:3f:bf:c3:0c:86:d1:b0:8e:e9:03:ef:45:ef:57:eb:6f:fc:
         5f:51:5b:54:3b:b9:c8:68:fa:eb:fb:07:16:42:42:92:9f:f9:
         09:8b:67:47:80:cd:f8:03:b4:48:b0:1b:e1:0b:6c:fc:7f:6b:
         f0:00:ce:f6
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUSBzBrlDANcm/6X/VYB4E2cCvmXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjgxODM3NTJaFw0yNTAyMjYxODQyNTJaMDMxMTAvBgNV
BAMTKEZCNTUzOTE0MTJCREUxMEI1MzQyOEFBQ0I5RTMyOTIwMUJGNjhEMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJORTPXZI5Ydm/xDFzaHwjpwj
f/QYskm+asShGRaoomFbaCNtQY69+eRtjYYSzq606GwFDVSAkPljMj81ZF+tWyr/
dta6gJQG8xkMffn1jhNaExhFKVrONJj7j+CrYnkvHINer5GCqtcF9vKB0yuwoInv
uWRwo8abHtHz5ensDD9y9fZhSdYyBv0EQSQ6TtFouhbnOO/SoIWSqEAGIwRlcVu7
FZVkazzvlk8AKH28CERMZoNp+JsObbAErLzXFlNPFJPX8L4YJvzykXd2WeSOiSA8
jY/a16IrAPAEgn48WUmsV7ClBdYskSTMPSqP8Nfb3ZpbDrXVzD4/Km5iH6DPAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7VTkUEr3hC1NC
iqy54ykgG/aNETAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9IMjQ4aG9pN2kxOUdTMjI0dnpCM1BTYnZ4cFE4OVNpNTVF
SFRTU0dYQUxhYS8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vSDI0OGhvaTdpMTlHUzIyNHZ6QjNQU2J2eHBRODlTaTU1
RUhUU1NHWEFMYWEvMC9GQjU1MzkxNDEyQkRFMTBCNTM0MjhBQUNCOUUzMjkyMDFC
RjY4RDExLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIt7nAwDQQCAAIwBwMF
ACgET4QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBgrMA0GCSqGSIb3DQEBCwUA
A4IBAQA+3UvuXEkycodYC6/fy2aTyT4vagDvsLLGUsjzBr7Lz/n+u/nH/j2Hc2a8
uT9aTUgs1eQOtldofM8y/VAU6GKYx/iU7/AYbZnWUWAppgIJwR4CiqoDejF4yUAB
fEc56AcI+BTa1hw30mm/R+z3PJq7DKtBoUXwAsgZqk9i4HXg5cBsuByW/KTsp9Po
bM1vVSwbEY4WczJRU8ThKcCBSYfcGm8FD73wIujdLQEBJvyEDzgtfz9iaDRVpWfD
CXxnLLUEhqtYGlABP7/DDIbRsI7pA+9F71frb/xfUVtUO7nIaPrr+wcWQkKSn/kJ
i2dHgM34A7RIsBvhC2z8f2vwAM72
-----END CERTIFICATE-----