Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.cer
File:                     273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.cer (raw, json)
Hash identifier:          zmWkJn0Lv2HPnxiLHhr61QAKOipzhLif0Ttp0Kf7IGg=
Subject key identifier:   27:3D:34:05:FC:3C:25:BB:C6:A3:CB:18:AF:97:62:8E:BF:41:62:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6636CD6AE141DBB2A968DB96900F754D470F9A32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 19:49:37 +0000
Certificate not after:    Mon 31 Mar 2025 19:54:37 +0000
Subordinate resources:    AS: 28368
                          AS: 53173
                          IP: 177.44.176.0 -- 177.44.190.255
                          IP: 177.184.128.0/20
                          IP: 177.200.80.0/20
                          IP: 186.225.32.0/19
                          IP: 187.60.32.0/20
                          IP: 189.84.112.0/20
                          IP: 2804:854::/32
                          IP: 2804:e4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:cd:6a:e1:41:db:b2:a9:68:db:96:90:0f:75:4d:47:0f:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 19:49:37 2024 GMT
            Not After : Mar 31 19:54:37 2025 GMT
        Subject: CN=273D3405FC3C25BBC6A3CB18AF97628EBF4162A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:b9:89:23:7e:1d:e5:bd:84:82:8e:c2:d6:
                    09:e1:62:22:ef:f1:98:64:df:ce:19:ea:22:a1:e7:
                    f6:7e:74:6d:32:23:c2:f6:d2:bd:21:9e:f8:8f:89:
                    19:2c:32:e5:89:da:bd:65:5e:10:ba:90:e5:63:db:
                    ce:50:66:99:e9:c1:00:2a:b2:18:25:7c:31:44:e1:
                    9c:14:2d:47:2e:17:21:c7:a2:5d:f4:8b:68:b3:56:
                    da:2f:0f:17:48:f3:33:af:86:ff:85:5a:6e:b7:ae:
                    5d:67:89:c8:6f:8d:d0:6d:5d:3e:48:e3:f1:48:66:
                    6e:a7:af:ed:85:63:51:c4:c7:1b:e0:87:af:53:d5:
                    17:37:a3:8a:69:6d:2e:fd:1c:70:0c:bd:f2:5d:f0:
                    da:38:85:56:f3:ec:44:32:41:ac:7d:b7:b9:0a:62:
                    e9:e8:5f:1d:77:51:55:7e:06:3e:35:b0:1e:c6:ae:
                    51:8d:12:59:c3:9e:c5:ad:99:68:86:ba:c0:ae:df:
                    6f:3e:86:7c:09:6c:f9:1d:95:e9:67:93:25:7a:39:
                    29:2b:32:f5:74:fb:1f:ec:2e:b2:10:69:19:e9:68:
                    78:57:41:bd:d8:92:a4:88:d2:c3:f7:da:30:e6:b2:
                    d8:8d:a0:4b:19:b5:9e:c4:43:ab:ee:02:d3:49:22:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:3D:34:05:FC:3C:25:BB:C6:A3:CB:18:AF:97:62:8E:BF:41:62:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/0/273D3405FC3C25BBC6A3CB18AF97628EBF4162A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.176.0-177.44.190.255
                  177.184.128.0/20
                  177.200.80.0/20
                  186.225.32.0/19
                  187.60.32.0/20
                  189.84.112.0/20
                IPv6:
                  2804:854::/32
                  2804:e4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28368
                  53173

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:65:ee:f5:66:e0:7a:74:81:70:3d:11:e2:a3:04:b0:5b:
         ee:a3:60:d0:e3:65:5b:21:e0:5b:65:7b:9e:a5:80:7a:80:d6:
         aa:b4:fd:e4:83:14:10:9b:5c:98:9f:d1:1b:6a:71:7b:04:5a:
         33:2c:62:c8:a3:3f:22:93:03:41:7d:ea:4e:ba:9e:f8:92:28:
         13:1e:d2:e0:35:74:86:a9:46:99:14:4f:d8:8f:2d:ee:96:ae:
         d3:6e:82:29:9c:e9:26:95:a2:f4:1e:74:51:44:c0:0d:a3:e3:
         14:f7:de:9f:f3:a5:50:25:06:f1:d5:81:8f:01:b3:6b:be:b3:
         19:18:f6:38:85:f0:6f:a0:ac:82:bd:d7:a8:02:11:d9:46:c7:
         76:b0:53:9f:e7:06:97:11:77:0c:a1:98:13:53:57:a2:b2:0b:
         29:09:b6:37:6d:51:c8:83:5e:44:a5:e4:be:8e:ab:5d:a6:47:
         e4:be:6c:1d:b6:b1:e4:19:53:85:79:f9:a8:f7:e9:a2:75:00:
         49:c9:54:8f:d7:87:70:c8:41:cb:8b:ae:bf:3a:18:fb:00:ee:
         2b:28:92:a5:e5:f1:93:ae:04:2b:af:3c:18:d9:2f:49:26:08:
         b3:2a:03:e3:10:a6:92:34:27:53:02:c1:a0:31:0f:c5:a9:ee:
         4a:65:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org