Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.cer
File:                     273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.cer (raw, json)
Hash identifier:          YVw6BPmZPgpcAiV8Tn3TgjcGk4qDyBRlQ8Ya+t5zzbM=
Subject key identifier:   27:3C:9E:F9:6A:99:17:BB:D4:A1:8D:BA:49:5C:4C:70:7A:8A:C9:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B9F276CF7439E92FBE7A117A8F3FE08F69C2D8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Apr 2024 10:55:16 +0000
Certificate not after:    Sat 05 Apr 2025 11:00:16 +0000
Subordinate resources:    AS: 263516
                          IP: 177.84.60.0/22
                          IP: 200.9.123.0/24
                          IP: 2804:131c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9f:27:6c:f7:43:9e:92:fb:e7:a1:17:a8:f3:fe:08:f6:9c:2d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 10:55:16 2024 GMT
            Not After : Apr  5 11:00:16 2025 GMT
        Subject: CN=273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:30:23:13:01:9a:31:42:41:7f:79:67:17:
                    9f:28:b0:f9:f6:7d:ab:ad:5f:34:40:05:6c:95:3c:
                    c6:10:c6:c6:e7:52:2d:16:f0:ed:be:08:a4:c2:0e:
                    7b:58:8a:bc:50:91:68:c5:6d:48:eb:5d:bc:62:30:
                    41:60:1c:cc:d9:f5:cd:5e:ce:bb:0c:28:03:34:52:
                    7c:ac:95:6b:07:f8:73:f1:37:86:e2:a3:d0:76:2f:
                    df:ca:19:24:d2:81:a5:28:3d:78:26:a2:08:ab:e0:
                    11:f4:e9:bc:e9:33:a7:5b:2e:59:4c:45:26:6f:33:
                    f6:5e:f5:35:a0:63:70:55:71:2e:a1:be:4e:73:60:
                    7d:8f:c8:4d:49:75:14:2f:f2:25:93:fb:dc:81:57:
                    4a:cf:20:15:43:8a:e0:5d:78:3f:cc:81:24:5d:c4:
                    14:f2:13:0c:48:05:99:ec:cf:f2:b6:70:79:f3:d1:
                    59:fe:76:ee:d2:94:dd:f0:2d:e1:66:6f:3f:4b:e8:
                    fa:b5:4e:45:b2:eb:43:a7:d4:4a:d1:df:89:d1:9e:
                    11:a9:25:ea:ee:ae:7b:c7:a4:82:c7:b2:1a:91:c7:
                    3a:a5:34:e8:70:80:01:cd:3c:e1:45:7e:97:b7:57:
                    cf:ef:28:57:ae:45:4b:b4:b1:95:9e:d7:7d:aa:f6:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:3C:9E:F9:6A:99:17:BB:D4:A1:8D:BA:49:5C:4C:70:7A:8A:C9:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.60.0/22
                  200.9.123.0/24
                IPv6:
                  2804:131c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263516

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:6e:1f:50:d8:c6:f0:3d:c7:80:9a:eb:69:ab:94:f9:46:
         5d:ae:01:be:1a:a4:a8:73:59:a2:08:cd:3a:c4:2b:06:7a:09:
         ef:14:13:7f:8c:bb:91:19:98:8f:f0:fe:8b:3e:75:d8:3c:76:
         3f:db:04:4d:30:81:76:97:30:7e:92:4a:6f:19:fc:33:11:72:
         18:40:e2:36:88:24:1e:d6:f1:7e:f2:be:1e:11:83:57:49:8e:
         05:cc:1c:11:c2:0d:3e:cf:e4:fb:01:36:a3:5f:15:0e:0d:72:
         a4:49:e9:f4:63:d3:33:08:d5:9b:b5:f7:7b:0d:cf:d3:3e:32:
         62:5d:68:79:a5:3a:ce:a2:cd:d7:d7:b2:6f:02:8c:ed:3f:a1:
         2d:69:ea:75:9f:36:e3:bb:57:03:04:50:42:79:3e:2c:4b:a6:
         19:e9:3d:ae:49:9a:c0:e4:3f:9e:11:49:2c:8e:8e:39:98:26:
         cf:b9:93:84:21:44:49:ea:ff:2b:35:c7:07:aa:14:1d:60:0f:
         53:b1:30:c1:d8:ba:ba:dd:55:7c:60:80:a7:62:20:0c:c6:3e:
         cf:fe:71:3d:8b:fd:9c:9b:f2:2b:f5:6c:ef:a8:92:91:8d:af:
         26:59:6e:f7:55:ca:1d:4a:4e:1d:af:cd:df:ad:f9:e3:9a:5f:
         5d:a7:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org