Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/027CD3923908D2B6C20E1D12D2E7CE5C2D31CC60.cer
File:                     027CD3923908D2B6C20E1D12D2E7CE5C2D31CC60.cer (raw, json)
Hash identifier:          BhBMGLOGx3jC9S1jV5M5e0lfMfU77xTXAfOGvm0xcUA=
Subject key identifier:   02:7C:D3:92:39:08:D2:B6:C2:0E:1D:12:D2:E7:CE:5C:2D:31:CC:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       11334E9FFCF52BD35C89AF43EAE2C3EFC2D936DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/027CD3923908D2B6C20E1D12D2E7CE5C2D31CC60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 12:34:43 +0000
Certificate not after:    Fri 15 Nov 2024 12:39:43 +0000
Subordinate resources:    AS: 271294
                          IP: 201.221.116.0/22
                          IP: 2804:7940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:33:4e:9f:fc:f5:2b:d3:5c:89:af:43:ea:e2:c3:ef:c2:d9:36:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 12:34:43 2023 GMT
            Not After : Nov 15 12:39:43 2024 GMT
        Subject: CN=027CD3923908D2B6C20E1D12D2E7CE5C2D31CC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:4b:bd:eb:75:3e:b4:1d:01:a2:38:f9:a1:
                    da:a5:8e:9a:58:2b:63:ec:68:22:c6:a1:87:ab:bc:
                    6d:e7:2a:04:e0:c0:8c:b7:0b:9f:fd:02:de:d8:ea:
                    84:84:0d:df:a7:bd:bb:1d:9a:8a:b3:df:4b:48:dd:
                    38:93:98:6f:80:2f:23:47:79:f5:d7:95:58:1a:50:
                    90:ac:00:d8:8b:e0:ed:38:ef:f8:6a:84:b0:fd:d0:
                    9d:8b:d2:b5:22:84:99:f3:46:1e:e6:68:9d:f0:a9:
                    6d:14:84:91:c3:eb:25:bb:5c:6c:86:61:48:0e:6d:
                    76:97:a7:90:1b:27:7b:42:23:45:f1:f9:c1:6b:81:
                    06:84:83:71:04:1b:43:7c:5a:e7:5b:c1:a5:cf:a2:
                    48:47:be:52:1f:32:6a:b9:bb:74:93:71:7b:d4:e0:
                    6d:6f:3e:86:40:22:97:3a:4c:0f:c7:45:5c:56:0d:
                    1d:64:1a:ab:d0:d4:9b:ee:3a:0d:1d:d4:a3:f4:11:
                    bf:51:3e:e6:42:ca:3b:73:10:eb:82:4b:79:52:23:
                    17:3d:39:7b:2d:91:59:70:3d:a0:71:0e:4c:e1:59:
                    2e:e2:91:80:29:aa:8c:62:1f:72:5d:32:8a:1d:6c:
                    07:fa:32:e9:e9:a0:fd:58:6a:4e:7f:fb:ea:79:61:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:7C:D3:92:39:08:D2:B6:C2:0E:1D:12:D2:E7:CE:5C:2D:31:CC:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/027CD3923908D2B6C20E1D12D2E7CE5C2D31CC60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22
                IPv6:
                  2804:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271294

    Signature Algorithm: sha256WithRSAEncryption
         09:2d:a1:79:79:ce:a8:f3:a1:2d:6c:2c:82:1b:81:55:b5:2d:
         94:07:0f:a5:20:2e:da:f8:3d:71:50:7a:1f:fe:12:78:63:6d:
         f5:04:d0:f1:0f:bb:d5:35:f0:33:c7:5e:0e:d2:a5:68:bd:e9:
         7a:37:76:0a:c6:01:c0:83:7f:1a:0e:7e:3e:da:2c:80:99:4c:
         0a:40:11:58:68:87:f5:02:13:ed:7a:48:97:10:24:a5:84:e0:
         9d:54:e3:9c:9e:f2:cb:6e:3e:a4:59:50:fc:56:ed:ec:7c:7a:
         17:68:7e:f9:6b:5f:3c:13:28:db:ef:01:ff:60:db:3d:3a:82:
         ea:af:6c:4f:20:60:2e:df:3a:51:e2:69:da:49:af:ab:d7:31:
         4d:af:d4:bc:c1:f0:6e:4d:15:32:c4:60:23:0e:06:ca:0b:ff:
         db:0e:eb:5e:1f:9f:ae:87:98:b9:63:92:f4:2e:d9:72:70:3c:
         a5:ab:07:03:5d:5d:b6:db:ca:2a:6d:75:22:6e:61:e9:4d:f7:
         c4:5f:32:3f:34:42:f0:70:bb:44:e0:65:ca:20:1a:76:97:c6:
         6b:6e:0c:9e:ad:88:d5:82:ea:d8:da:a5:8d:43:46:1c:a2:06:
         c8:4f:f5:c3:be:9f:0e:57:77:f3:e5:ff:14:ea:66:ac:9a:10:
         68:cf:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org