Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer
File:                     273A8E626DF2CB38BF17E437441A4BFFC2540F09.cer (raw, json)
Hash identifier:          ZLzz0oVOj+7hX5y0IsEQtt/cBkOOMj2OO9m+tH4jpgs=
Subject key identifier:   27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66BD66C1F7EB800A2BEF6A077D14045FD63CD44E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft
caRepository:             rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 12:39:22 +0000
Certificate not after:    Tue 11 Mar 2025 12:44:22 +0000
Subordinate resources:    AS: 264009
                          IP: 143.0.140.0/22
                          IP: 168.227.132.0/22
                          IP: 170.78.120.0/22
                          IP: 2804:2954::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:66:c1:f7:eb:80:0a:2b:ef:6a:07:7d:14:04:5f:d6:3c:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 12:39:22 2024 GMT
            Not After : Mar 11 12:44:22 2025 GMT
        Subject: CN=273A8E626DF2CB38BF17E437441A4BFFC2540F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:cb:ca:53:81:5b:41:ea:f0:ef:b9:07:8d:
                    6e:8b:53:9b:3c:6d:fb:e0:78:56:3b:fa:af:df:cd:
                    16:80:12:4e:50:92:df:9b:00:30:6a:2c:93:a9:0a:
                    08:82:be:82:65:a2:8e:d5:47:14:43:2f:8c:17:f8:
                    9e:bc:d6:6b:f1:2e:91:d7:fc:15:1b:a0:90:2e:0f:
                    be:18:40:66:38:8e:be:7b:73:c4:aa:a9:1d:61:f8:
                    1b:01:bb:68:03:5f:b1:9e:a5:3a:3a:d5:52:bd:f2:
                    11:09:4b:0a:3f:cf:00:0f:9c:4d:f6:20:d5:99:74:
                    95:b0:bb:87:f1:dc:e5:f7:0a:ed:09:6b:cc:dd:fb:
                    35:2e:6f:98:00:91:54:e8:53:c4:de:1d:3d:ed:36:
                    6c:6e:c0:e5:35:bd:f7:71:ea:3d:c5:97:50:ba:44:
                    a5:cf:af:48:2c:bd:ca:95:6c:7f:10:bc:9c:cd:e7:
                    7a:c1:ef:79:9e:ae:de:06:76:0e:7e:0b:81:fb:13:
                    dd:26:da:cc:30:b4:85:e2:d6:15:3f:4e:e7:60:bf:
                    3e:c7:ce:4e:72:78:e7:33:6d:ec:1f:da:7b:35:13:
                    81:c7:b3:af:67:bd:d0:8d:78:3b:be:fe:bc:86:59:
                    f6:23:6f:6d:a4:40:50:d1:41:ed:f9:30:67:33:e3:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:3A:8E:62:6D:F2:CB:38:BF:17:E4:37:44:1A:4B:FF:C2:54:0F:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/273A8E626DF2CB38BF17E437441A4BFFC2540F09.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22
                  168.227.132.0/22
                  170.78.120.0/22
                IPv6:
                  2804:2954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264009

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:cf:5b:c8:84:36:cb:12:7d:3d:a1:16:65:66:ac:a0:06:
         08:4a:4b:d9:4d:f1:70:60:b6:41:86:51:83:90:6c:45:be:1f:
         80:80:90:eb:90:6c:98:99:76:4b:6a:40:ad:b6:3e:b6:d8:06:
         22:54:9a:7a:0a:ed:a3:cc:81:55:30:de:0d:b3:e2:23:95:99:
         28:0e:01:05:e3:95:15:56:dc:80:1a:5c:c0:2e:d5:60:ba:94:
         3b:ef:9b:e2:31:f3:2c:c5:fb:6d:37:7a:74:9e:80:69:d7:c9:
         9d:fc:69:69:e4:5a:45:c4:92:f5:83:98:ac:c5:8b:76:dd:31:
         4b:ed:e6:68:bb:67:f2:60:29:b1:44:fe:66:fd:7d:16:6c:c9:
         ee:73:9e:80:d3:07:06:50:4a:55:2c:1c:9c:fe:b1:a9:c1:9b:
         c2:24:76:a9:b3:fa:f7:03:1f:e4:cb:77:c8:cf:ac:a0:1b:73:
         17:2c:04:ad:72:38:47:5a:98:a0:1e:94:26:63:55:5d:41:b6:
         0f:cc:0c:71:59:06:69:d9:e7:21:62:06:55:c3:ee:d6:75:6e:
         4c:da:79:5c:ae:47:b3:d6:9a:77:b7:6e:c7:75:cc:53:6f:d3:
         b9:8a:8d:6a:cb:74:af:42:77:f8:89:80:e1:61:84:e8:02:98:
         60:80:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org