Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27A8015BFEC5EBA7025A454640167B4EED01A511.cer
File:                     27A8015BFEC5EBA7025A454640167B4EED01A511.cer (raw, json)
Hash identifier:          ZY+RddxXd4PQPGqcgYlrvdsWVmwSWE/xoZmaNu/qlb8=
Subject key identifier:   27:A8:01:5B:FE:C5:EB:A7:02:5A:45:46:40:16:7B:4E:ED:01:A5:11
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       628B1526A67657A5595D4919107A2613FFF4BE78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/27A8015BFEC5EBA7025A454640167B4EED01A511.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 18:02:14 +0000
Certificate not after:    Mon 27 May 2024 18:07:14 +0000
Subordinate resources:    AS: 262789
                          IP: 177.221.120.0/21
                          IP: 186.233.128.0/21
                          IP: 2804:208::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8b:15:26:a6:76:57:a5:59:5d:49:19:10:7a:26:13:ff:f4:be:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 18:02:14 2023 GMT
            Not After : May 27 18:07:14 2024 GMT
        Subject: CN=27A8015BFEC5EBA7025A454640167B4EED01A511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a3:ae:ac:d0:b8:ca:36:e7:01:ab:ab:9f:ab:
                    9e:75:04:ff:42:81:dd:72:10:7b:fb:5e:ad:51:ab:
                    91:25:3c:16:ff:3e:3d:01:51:28:e9:31:2b:a5:05:
                    af:c9:f4:39:26:9d:2e:9e:a3:d4:56:5b:17:76:76:
                    a0:d0:99:aa:9c:cd:2d:ba:fe:66:e7:0e:02:a7:73:
                    aa:2d:cb:3e:7d:fe:ec:61:74:ec:b1:ed:31:c9:31:
                    0b:38:6a:e1:b4:74:aa:25:73:c2:a9:07:a9:d2:f1:
                    d5:0b:62:0f:63:20:b9:50:8e:b3:f1:1c:cb:00:f1:
                    3c:a1:f6:36:62:5f:a7:28:6e:c4:9c:aa:f4:b4:f5:
                    e7:e8:09:35:3a:88:d3:b0:22:23:e4:61:c9:bc:13:
                    dc:bc:8f:d7:db:40:d8:15:cd:c4:2b:07:9f:5b:41:
                    1e:b2:a8:61:f7:43:b7:80:3a:9a:62:c6:27:00:b8:
                    21:20:db:05:0e:09:3c:7d:75:40:ea:58:07:34:57:
                    a6:a6:54:e9:c7:24:62:fe:fc:65:24:69:1c:e8:e2:
                    6d:21:82:0e:c4:b3:c4:ca:68:dc:43:57:cd:d5:44:
                    a3:68:9b:67:bb:c4:af:fb:ea:a6:26:01:09:bc:e8:
                    ad:33:84:58:57:51:65:e5:97:18:c0:15:64:03:e6:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:A8:01:5B:FE:C5:EB:A7:02:5A:45:46:40:16:7B:4E:ED:01:A5:11
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/27A8015BFEC5EBA7025A454640167B4EED01A511.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21
                  186.233.128.0/21
                IPv6:
                  2804:208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262789

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:23:55:7d:69:f9:de:15:0a:6f:2a:fb:f2:c5:bf:d1:06:
         d4:13:06:5a:b1:16:f5:64:2c:e0:38:fa:d1:b8:ac:e7:fd:21:
         77:ce:ec:a7:e0:24:c1:0d:2e:ee:3e:41:93:16:94:76:2e:99:
         d6:19:30:f7:de:4f:f4:81:41:cc:3c:d6:38:3c:a3:6f:37:3c:
         51:e7:6b:40:c0:a6:aa:2d:2c:62:2c:46:82:d7:c3:22:88:ef:
         58:f4:1a:9e:b8:ea:13:f0:4f:57:c7:4c:97:0c:05:c8:1f:25:
         8d:f8:7c:9a:a7:c0:66:99:eb:2b:54:7c:54:b2:b8:74:c9:c4:
         4e:73:4f:1b:25:98:48:59:aa:67:96:75:eb:ae:2a:45:93:6b:
         b0:1f:da:be:4a:78:a4:51:d9:57:03:16:6d:33:2e:9a:02:69:
         03:17:db:9e:9f:d5:f9:06:32:3f:5c:1f:9d:a3:73:29:a5:67:
         1e:41:2b:f4:ce:42:63:53:cc:da:9c:05:3e:f9:3c:3e:71:cf:
         de:59:bc:cb:d8:87:66:c8:70:65:a6:92:bb:ee:47:53:fe:9d:
         8d:b3:60:05:84:86:02:3f:44:97:bd:d0:9a:ee:cf:5c:a8:00:
         ce:69:ee:77:49:20:a8:76:9d:b8:ec:06:b3:c5:23:e3:2e:58:
         bb:fe:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org