Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/272886A8E57CF86D6F4E4B669DC32D76194F0FBD.cer
File:                     272886A8E57CF86D6F4E4B669DC32D76194F0FBD.cer (raw, json)
Hash identifier:          MegTKRRtWj6+jQ0dYXqzk+GSnyYMp0vdP+DaeWLsAMQ=
Subject key identifier:   27:28:86:A8:E5:7C:F8:6D:6F:4E:4B:66:9D:C3:2D:76:19:4F:0F:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BD887C0DC374A5B54D4DD0A091861980745FA6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/272886A8E57CF86D6F4E4B669DC32D76194F0FBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 20:23:17 +0000
Certificate not after:    Wed 20 Mar 2024 20:28:17 +0000
Subordinate resources:    AS: 271701
                          IP: 170.79.236.0/22
                          IP: 2804:7fa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d8:87:c0:dc:37:4a:5b:54:d4:dd:0a:09:18:61:98:07:45:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 20:23:17 2023 GMT
            Not After : Mar 20 20:28:17 2024 GMT
        Subject: CN=272886A8E57CF86D6F4E4B669DC32D76194F0FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:fd:15:7f:e9:86:d3:62:9d:e6:f8:82:6d:
                    d5:5c:b1:63:67:13:4c:7d:a6:5b:88:51:9f:f3:30:
                    ab:28:a7:11:4f:d7:4b:1a:fa:6f:fd:2a:f1:fa:2c:
                    d7:03:93:9b:eb:18:e9:e0:65:c5:8e:e3:a5:98:f5:
                    9d:3c:68:b9:34:98:c6:98:af:c3:f3:4b:87:37:5f:
                    77:77:8a:cc:29:40:fd:ec:54:9f:03:25:fc:01:73:
                    34:6c:04:b0:ec:bd:6b:d0:47:86:13:f7:c2:04:a7:
                    be:84:0a:cc:3a:3b:d7:aa:06:a7:23:49:2a:15:7b:
                    00:db:45:35:a2:04:87:7c:aa:3f:ed:79:0d:0a:2b:
                    29:d5:ee:2e:ff:8a:ed:4f:e0:f4:94:45:c0:4b:bc:
                    1f:a0:9b:36:ae:c8:29:31:33:c9:ad:36:42:17:aa:
                    8b:1f:7e:d3:8d:c4:63:80:9d:dc:09:70:ea:8f:4e:
                    43:95:fb:c4:a3:60:d9:31:5a:5f:bd:cf:38:cd:b6:
                    fe:65:23:00:a1:73:db:bf:66:41:8b:af:2a:21:13:
                    0c:1f:32:45:9a:06:6f:b8:2c:8e:0a:09:b4:50:be:
                    0d:e1:fe:74:67:5e:2a:6e:b4:a3:ad:a1:af:5f:67:
                    3a:07:b7:5c:74:9d:6d:34:79:5d:2a:15:25:fa:fe:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:28:86:A8:E5:7C:F8:6D:6F:4E:4B:66:9D:C3:2D:76:19:4F:0F:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/272886A8E57CF86D6F4E4B669DC32D76194F0FBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/22
                IPv6:
                  2804:7fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271701

    Signature Algorithm: sha256WithRSAEncryption
         b4:71:07:d4:a5:89:c6:c3:4a:5f:cf:89:7d:61:34:9e:88:a4:
         04:bf:c7:8c:eb:7b:bb:7c:97:91:29:e4:03:9c:fa:28:23:86:
         bb:48:c7:38:db:e3:9e:7c:41:ac:b8:94:c6:ab:d9:c6:c8:e6:
         fc:40:87:75:9a:3a:8d:37:77:07:ae:64:fc:f8:76:bd:ee:66:
         9a:b2:ea:37:c9:c8:20:e5:b3:6a:85:30:92:ae:2b:c0:b1:b0:
         9a:7b:4c:35:29:b7:24:f7:f8:0e:8c:d6:b5:b9:32:ff:95:59:
         dd:c5:ce:19:ae:3d:c7:49:8e:a5:25:a5:50:53:44:be:14:1d:
         86:5d:51:8b:e9:9c:ed:42:31:40:21:f5:75:eb:76:f1:ca:54:
         22:b4:65:f8:2b:bc:0a:47:85:98:6a:49:26:0f:21:55:7f:ad:
         86:03:db:91:e9:2a:94:49:ac:37:c2:eb:4a:a1:a7:d3:5e:7f:
         76:3d:6e:97:e1:df:d5:e2:60:70:ac:d7:23:75:26:6d:37:aa:
         5d:c8:00:63:d0:a4:98:45:b2:a5:40:20:e7:f1:ce:f1:cf:0b:
         01:8e:a2:13:f3:0b:53:7d:40:9d:c8:60:bf:de:4d:b3:7e:d5:
         e9:f7:a8:f9:98:64:8e:c4:e3:5a:fc:05:48:ed:bf:e3:17:b9:
         da:bd:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org