Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/027D8902566E7FEF90101053C0601032251D5D15.cer
File:                     027D8902566E7FEF90101053C0601032251D5D15.cer (raw, json)
Hash identifier:          gMsw0A5mzFjgBy9SiCIrqqh9ybl+a8De6zqph1xJHzE=
Subject key identifier:   02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4EF9B24614F7898A266C8B2A2A568F1F3384EB0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/027D8902566E7FEF90101053C0601032251D5D15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Dec 2023 08:13:28 +0000
Certificate not after:    Fri 20 Dec 2024 08:18:28 +0000
Subordinate resources:    AS: 268473
                          IP: 45.161.200.0/22
                          IP: 2804:51bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:b2:46:14:f7:89:8a:26:6c:8b:2a:2a:56:8f:1f:33:84:eb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 08:13:28 2023 GMT
            Not After : Dec 20 08:18:28 2024 GMT
        Subject: CN=027D8902566E7FEF90101053C0601032251D5D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:5e:88:8c:6b:a8:d9:43:27:17:97:a1:dd:
                    35:26:bf:aa:bb:9a:32:d6:58:bf:96:91:81:4a:23:
                    4e:ff:8b:4f:3b:7d:b1:86:ee:1d:33:73:49:da:28:
                    ee:43:34:19:6a:b6:09:44:bf:80:ac:c3:11:ad:7a:
                    4a:1a:ff:1d:b4:20:af:b1:91:73:84:9e:70:26:f1:
                    d1:eb:13:a9:0e:d9:35:77:df:d7:3e:7b:7e:83:dd:
                    02:63:55:a8:98:77:30:70:ed:6f:93:9e:15:58:df:
                    4e:ae:43:4c:98:fd:09:a7:79:4f:57:29:c4:e9:41:
                    54:1b:2c:8c:47:3a:17:4a:db:6a:c0:29:89:eb:2f:
                    aa:6d:0f:68:73:a3:da:29:aa:17:1c:98:ab:b2:d2:
                    09:09:6c:45:7f:e8:99:30:25:db:c1:7a:0e:07:70:
                    d5:e1:bb:22:d0:b2:7b:22:02:f8:db:80:c5:dd:97:
                    fd:af:76:52:33:95:6e:d9:ac:dc:2a:7a:66:2f:22:
                    d9:a2:54:33:b5:e1:36:9b:49:ac:ac:40:07:21:8a:
                    bf:31:4a:d8:10:51:94:ea:20:58:06:42:1b:7d:ee:
                    c4:0e:de:39:88:e4:e6:f3:51:ca:3c:ce:20:ab:72:
                    4b:f5:af:6f:08:ed:d7:0b:13:c9:88:1f:cf:7a:44:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/027D8902566E7FEF90101053C0601032251D5D15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.200.0/22
                IPv6:
                  2804:51bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268473

    Signature Algorithm: sha256WithRSAEncryption
         ad:c0:6d:a2:6a:b7:1e:20:3d:b6:7e:4d:54:00:20:fd:9d:54:
         0b:a0:ee:73:81:b7:79:ca:8e:52:7b:6b:34:9d:fb:88:2e:03:
         a5:59:5d:f1:ea:00:04:c5:80:a4:ea:b5:13:40:f5:b7:c3:5c:
         00:82:42:2c:f7:40:35:ae:06:05:29:ce:47:98:0b:9b:f9:52:
         47:eb:68:55:8b:81:bf:e9:9b:21:c7:32:eb:16:fa:d9:5c:ab:
         c1:6d:2c:ef:93:cc:dd:53:5a:2e:c2:20:26:b0:c7:f9:62:46:
         a4:d5:c2:7c:db:4f:b0:d5:1e:0f:13:4d:90:c3:1f:2a:9b:7f:
         04:22:27:d0:4c:d0:33:57:bf:c6:b8:99:9c:5d:2d:6e:16:ad:
         19:77:3c:8c:94:7f:61:ae:a2:90:6b:76:07:6b:0f:bc:9d:4b:
         3a:72:60:58:1d:67:77:a8:ce:07:9e:7e:dc:68:7a:86:06:bf:
         f7:96:c1:20:48:8f:9e:15:44:35:01:f8:d1:58:d3:e1:33:de:
         31:14:a3:f5:df:59:9f:dc:3e:f7:a1:4b:65:7f:94:16:3e:d8:
         1e:a1:b0:74:76:89:f3:bd:b7:69:65:50:c3:ff:fd:42:20:06:
         6a:aa:8d:89:a1:b0:2d:fe:14:e3:56:85:0d:08:3f:7c:61:2f:
         66:26:05:64
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTvmyRhT3iYombIsqKlaPHzOE6w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjIwODEzMjhaFw0yNDEyMjAwODE4MjhaMDMxMTAvBgNV
BAMTKDAyN0Q4OTAyNTY2RTdGRUY5MDEwMTA1M0MwNjAxMDMyMjUxRDVEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfKl6IjGuo2UMnF5eh3TUmv6q7
mjLWWL+WkYFKI07/i087fbGG7h0zc0naKO5DNBlqtglEv4CswxGtekoa/x20IK+x
kXOEnnAm8dHrE6kO2TV339c+e36D3QJjVaiYdzBw7W+TnhVY306uQ0yY/QmneU9X
KcTpQVQbLIxHOhdK22rAKYnrL6ptD2hzo9opqhccmKuy0gkJbEV/6JkwJdvBeg4H
cNXhuyLQsnsiAvjbgMXdl/2vdlIzlW7ZrNwqemYvItmiVDO14TabSaysQAchir8x
StgQUZTqIFgGQht97sQO3jmI5ObzUco8ziCrckv1r28I7dcLE8mIH896RK4TAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCfYkCVm5/75AQ
EFPAYBAyJR1dFTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GOTFyQkxtbTZlVGpQSnZpWFZtQjZxcWdoN1NGZHhnZlpN
cW1iRkZHeDRNRy8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GOTFyQkxtbTZlVGpQSnZpWFZtQjZxcWdoN1NGZHhnZlpN
cW1iRkZHeDRNRy8wLzAyN0Q4OTAyNTY2RTdGRUY5MDEwMTA1M0MwNjAxMDMyMjUx
RDVEMTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2hyDANBAIAAjAHAwUA
KARRvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGLkwDQYJKoZIhvcNAQELBQAD
ggEBAK3AbaJqtx4gPbZ+TVQAIP2dVAug7nOBt3nKjlJ7azSd+4guA6VZXfHqAATF
gKTqtRNA9bfDXACCQiz3QDWuBgUpzkeYC5v5UkfraFWLgb/pmyHHMusW+tlcq8Ft
LO+TzN1TWi7CICawx/liRqTVwnzbT7DVHg8TTZDDHyqbfwQiJ9BM0DNXv8a4mZxd
LW4WrRl3PIyUf2GuopBrdgdrD7ydSzpyYFgdZ3eozgeeftxoeoYGv/eWwSBIj54V
RDUB+NFY0+Ez3jEUo/XfWZ/cPvehS2V/lBY+2B6hsHR2ifO9t2llUMP//UIgBmqq
jYmhsC3+FONWhQ0IP3xhL2YmBWQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org