Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/276E9F9CD2E8C67D2D49F27F3EFC333858A4938F.cer
File:                     276E9F9CD2E8C67D2D49F27F3EFC333858A4938F.cer (raw, json)
Hash identifier:          3qO5Dxbgf4lAwBKCLuMeftGJ5uvkYIzGjHeBR1DNRp0=
Subject key identifier:   27:6E:9F:9C:D2:E8:C6:7D:2D:49:F2:7F:3E:FC:33:38:58:A4:93:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C270703687C8949997E7D9B1EACEB2199F828E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/276E9F9CD2E8C67D2D49F27F3EFC333858A4938F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 00:22:31 +0000
Certificate not after:    Wed 06 Mar 2024 00:27:31 +0000
Subordinate resources:    AS: 61942
                          IP: 45.239.100.0/22
                          IP: 131.255.68.0/22
                          IP: 168.196.72.0/22
                          IP: 170.233.164.0/22
                          IP: 201.131.68.0/22
                          IP: 2804:1898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:27:07:03:68:7c:89:49:99:7e:7d:9b:1e:ac:eb:21:99:f8:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 00:22:31 2023 GMT
            Not After : Mar  6 00:27:31 2024 GMT
        Subject: CN=276E9F9CD2E8C67D2D49F27F3EFC333858A4938F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:5d:30:fe:e6:01:2b:f1:af:b7:0c:0f:9b:
                    7b:e8:9d:2d:69:5f:67:a7:16:95:53:f5:c4:10:91:
                    23:1b:78:28:2e:1c:9d:70:a2:01:0b:9e:be:5c:0e:
                    01:68:d5:6d:33:d5:ac:4f:c0:d2:0d:21:9f:31:47:
                    27:fa:0b:44:2c:9c:a5:9f:5f:7d:84:43:31:71:12:
                    4a:22:98:88:8c:2c:3f:91:c1:e1:e6:91:5a:22:af:
                    ab:34:e1:35:86:dd:be:95:5b:cb:b2:60:d0:bb:3c:
                    2e:9e:b3:7e:fa:89:ad:d0:fb:58:47:8b:e6:71:44:
                    8f:8d:01:a5:0e:57:fc:05:d2:92:d7:c4:3b:91:6b:
                    7e:51:a2:7e:c2:dc:4c:0c:5c:d8:9d:99:b9:ac:25:
                    9a:be:a0:b6:af:7a:ac:f6:50:b6:a9:7c:81:84:33:
                    34:50:d5:b3:58:8b:a1:c4:62:20:24:c1:2d:3a:60:
                    5f:b9:1c:cb:b3:35:34:7d:a8:c1:4c:d3:d5:48:76:
                    11:60:03:41:de:66:f2:cb:1f:a8:75:97:86:da:be:
                    c6:4f:62:61:15:32:01:42:53:60:05:c8:0a:ff:4b:
                    2b:63:95:ee:15:91:56:bc:f6:6b:74:bc:47:f2:1a:
                    62:20:c4:b3:c5:28:a3:6b:ff:c0:de:84:10:c6:a3:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:6E:9F:9C:D2:E8:C6:7D:2D:49:F2:7F:3E:FC:33:38:58:A4:93:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/276E9F9CD2E8C67D2D49F27F3EFC333858A4938F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22
                  131.255.68.0/22
                  168.196.72.0/22
                  170.233.164.0/22
                  201.131.68.0/22
                IPv6:
                  2804:1898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61942

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:2f:94:ce:a9:6b:fd:08:7c:0c:a6:f8:e7:c1:0f:18:d5:
         61:0a:ba:d9:75:cc:45:ce:ee:ee:ed:00:27:02:da:48:77:ef:
         f3:19:c3:85:88:1a:c9:b0:86:15:af:6c:ed:30:48:3f:02:ec:
         d6:f2:87:f9:30:8f:d6:09:33:03:ea:4e:0d:96:a1:32:37:6b:
         66:12:80:d9:19:76:89:4e:48:36:78:f3:b3:08:e6:31:d6:e6:
         c1:12:37:4f:f6:f6:e6:af:5e:11:b9:5f:ff:4d:1a:29:72:b7:
         ff:ed:6a:68:cf:53:bd:3c:af:79:7f:48:7a:b9:83:83:3b:f4:
         fc:d9:f4:29:05:db:af:74:d3:34:d6:13:0a:5a:3a:3f:c4:fc:
         08:e8:c6:e4:f8:1f:d1:9a:5d:64:7e:78:d0:f9:12:99:57:a7:
         25:ee:98:21:dc:fb:62:57:fa:32:51:26:8f:96:af:99:43:d9:
         92:49:28:85:5d:ac:2c:f9:ed:d1:7d:b1:84:53:2b:ee:7c:18:
         ee:eb:7d:a7:3e:36:49:c3:c6:ae:be:de:b0:22:05:5b:98:77:
         58:00:04:ca:f7:9a:44:01:6d:45:ba:a3:54:7f:7a:39:fd:36:
         56:bf:31:f1:b1:bb:66:6f:6f:03:7a:10:83:ce:58:f7:d6:79:
         d5:56:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org