Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.cer
File:                     0727C862E1F4A9A7C5919CB00CB891419AC68012.cer (raw, json)
Hash identifier:          +OB6redlucPJj5hqNDyPWgaqz0WX2fLfzldj/5+3Mtw=
Subject key identifier:   07:27:C8:62:E1:F4:A9:A7:C5:91:9C:B0:0C:B8:91:41:9A:C6:80:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ADEF5E53C69E6A8470D4EA2346C53E06108E2F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Mar 2023 02:44:33 +0000
Certificate not after:    Fri 29 Mar 2024 02:49:33 +0000
Subordinate resources:    AS: 267575
                          IP: 45.70.160.0/22
                          IP: 167.249.160.0/22
                          IP: 177.74.104.0/22
                          IP: 2804:4384::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:f5:e5:3c:69:e6:a8:47:0d:4e:a2:34:6c:53:e0:61:08:e2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 02:44:33 2023 GMT
            Not After : Mar 29 02:49:33 2024 GMT
        Subject: CN=0727C862E1F4A9A7C5919CB00CB891419AC68012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:89:a6:9b:d2:f1:32:08:fa:d8:68:96:c1:
                    a9:46:e5:cd:dd:31:42:47:be:c6:00:78:39:6c:22:
                    8d:df:07:87:e5:df:55:15:80:71:d9:82:74:65:74:
                    4f:85:02:e7:5d:4c:bc:33:25:2e:35:e0:5a:65:32:
                    2c:97:71:7a:ec:86:e0:11:21:76:f4:7f:af:1e:47:
                    7a:f6:bd:ed:0a:6f:ea:07:8d:1c:4f:b5:50:49:7f:
                    ec:60:69:a1:b3:9c:bb:0f:7c:58:85:80:d8:e7:e8:
                    ee:08:da:d4:95:13:f3:0a:88:03:22:82:2d:c6:57:
                    20:dd:4b:ee:70:60:81:a6:2a:fd:87:77:0b:a6:aa:
                    fa:97:52:4e:0e:ca:d5:c0:13:f5:ed:29:1d:79:8e:
                    37:0a:8c:f3:7f:fe:32:04:db:dd:02:3b:1a:1d:47:
                    88:5f:d9:c2:47:12:6c:f9:81:40:fc:fd:0a:8b:aa:
                    b9:d1:f0:60:f2:f6:49:ef:70:7c:2f:e9:8c:19:6b:
                    4c:ec:3a:39:4a:ee:42:9e:bb:0c:2f:37:aa:3b:c2:
                    0c:49:81:34:da:94:3c:5c:b2:de:24:44:83:e1:09:
                    90:53:b9:61:bd:72:2b:5a:90:12:26:88:d4:8e:10:
                    ee:4f:9e:43:94:a8:fd:63:5a:83:2f:55:4c:35:7d:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:27:C8:62:E1:F4:A9:A7:C5:91:9C:B0:0C:B8:91:41:9A:C6:80:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0727C862E1F4A9A7C5919CB00CB891419AC68012.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.160.0/22
                  167.249.160.0/22
                  177.74.104.0/22
                IPv6:
                  2804:4384::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267575

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:79:c7:19:2e:4c:77:ca:58:45:19:3c:7f:f3:8d:6a:0a:
         ff:af:ee:f8:dc:b0:e9:86:e8:59:55:7b:5b:64:46:1e:a3:60:
         11:4e:99:06:40:62:0a:b9:97:1f:28:17:db:f6:9c:48:4a:c4:
         5a:13:2e:8f:b7:c1:2b:40:b7:13:9e:06:05:f2:3b:2e:cd:df:
         fa:2a:2e:d3:38:b0:f5:92:1a:85:b1:60:fa:1d:16:f3:26:72:
         ea:e7:2d:49:f2:31:ee:7c:79:d3:71:d7:a4:11:cf:f4:2c:5c:
         e8:a1:26:aa:cf:0b:75:81:30:8d:e0:a3:3a:f9:da:fc:d5:69:
         7d:86:8f:98:fc:6d:33:e9:e7:23:97:63:65:ae:37:b4:11:d0:
         19:45:97:72:b6:1e:7d:b8:17:97:10:75:6c:35:83:35:26:32:
         ad:83:a8:9d:cb:26:fc:54:fa:82:a6:6e:b0:3d:b4:0b:08:bc:
         06:45:25:70:4a:44:a4:d9:94:07:a0:96:4b:4f:f0:69:42:74:
         ee:63:d4:b9:a6:64:1a:5c:dc:f6:2e:6f:5c:8b:5a:95:e2:1d:
         8d:76:5e:df:70:4b:8c:c2:09:59:51:71:25:df:51:06:1f:de:
         d5:b6:39:ef:4d:3f:e1:21:76:97:b6:a3:37:55:2b:71:5d:b0:
         32:41:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org