Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer
File:                     1A270B8A633D18DEBC92B129559FE7F227397B2C.cer (raw, json)
Hash identifier:          /l0722pDQrJTxAtJuH5LY5rePIIv6yqF9WkU5Hsjp6E=
Subject key identifier:   1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05936C026E1FD2256DB82D9DB340235467C98186
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 11:15:39 +0000
Certificate not after:    Wed 10 Jul 2024 11:20:39 +0000
Subordinate resources:    AS: 264272
                          IP: 138.118.188.0/22
                          IP: 2804:254c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:93:6c:02:6e:1f:d2:25:6d:b8:2d:9d:b3:40:23:54:67:c9:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 11:15:39 2023 GMT
            Not After : Jul 10 11:20:39 2024 GMT
        Subject: CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:d1:a2:8b:dd:72:42:ef:f9:8c:f8:81:33:
                    fc:51:d3:23:72:fb:fe:27:87:e8:f3:66:1d:5f:54:
                    6c:52:6b:47:5d:b8:09:40:5f:07:34:5f:52:9f:a9:
                    3b:ee:14:e0:ad:cf:cd:02:f2:90:99:7b:c2:c4:88:
                    4f:d5:e2:81:59:50:9e:dc:67:2c:8c:54:75:3d:df:
                    76:da:d0:9c:9a:2b:ec:23:f1:ef:5e:ca:46:10:d9:
                    52:03:03:fb:62:23:d1:65:0c:76:bf:e5:82:51:94:
                    ac:1a:66:b9:b6:d5:59:62:3b:b6:a3:f4:1e:43:03:
                    16:d8:47:b1:87:d3:a8:64:9f:63:fe:36:3b:a6:af:
                    7f:e1:e2:de:82:19:3d:c6:46:c5:e1:a3:49:d1:36:
                    66:b5:b6:7b:92:ba:9b:59:ed:bf:92:57:16:d2:db:
                    3b:28:5f:83:55:a3:8f:2d:48:37:90:2f:fb:17:26:
                    c6:de:ca:d1:79:e2:a6:31:af:cb:d4:40:34:51:cb:
                    14:a4:54:e5:04:5a:c7:3e:ee:db:74:67:5f:87:76:
                    af:27:10:6b:de:b3:30:c8:4e:91:42:64:a4:80:52:
                    88:e3:31:0a:8e:80:29:d8:d9:17:cc:9c:cb:cd:61:
                    94:f8:39:db:21:96:63:4a:9e:63:ee:99:d6:6b:71:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/22
                IPv6:
                  2804:254c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264272

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:74:d6:6d:55:49:f7:90:a6:c7:75:ac:ab:c8:08:a7:f1:
         8f:90:90:bf:ee:19:37:2b:14:22:ba:27:36:10:98:c5:6d:be:
         1f:84:60:60:ff:a8:19:bc:26:5a:61:45:9e:7f:1d:d9:a9:2f:
         b8:ef:95:9e:98:1e:9e:ae:bb:13:01:93:a1:80:0b:1b:7d:ed:
         b0:d0:f8:ca:83:d4:d4:12:ce:05:29:55:cd:e1:fb:bd:7f:14:
         de:74:45:fc:09:2c:a0:70:c3:c3:5d:f9:fd:53:65:df:17:ee:
         63:42:ce:a4:c3:ce:50:ef:d3:1d:85:c5:59:a9:ab:a9:88:96:
         93:93:a8:01:a1:f2:1b:47:c8:ff:09:a6:1e:52:a2:60:c2:76:
         96:7b:5c:38:c2:02:3b:bb:40:b7:70:78:0b:2c:13:d5:21:14:
         23:02:76:62:35:db:94:e6:b9:90:1e:84:bf:94:78:d8:7d:fc:
         b7:83:5b:66:9d:b2:8b:21:77:a7:a8:a2:65:a8:34:3f:43:8f:
         42:35:4f:b3:c5:e6:e8:e0:f6:2d:c6:44:cd:6b:ca:f2:d7:8a:
         0e:79:0e:91:dd:c0:75:fc:f0:42:11:b8:27:0a:76:11:3f:97:
         a1:05:4d:e3:5c:78:09:0a:1b:47:60:09:d0:a8:24:45:f5:ee:
         b0:7e:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org