Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27B34B7A2B26017128BA6316C7CF5C1264D35F80.cer
File:                     27B34B7A2B26017128BA6316C7CF5C1264D35F80.cer (raw, json)
Hash identifier:          Q8mLiy+Dk5hBQ7OzWZMgurdmI492FNhksjChM4MdH3U=
Subject key identifier:   27:B3:4B:7A:2B:26:01:71:28:BA:63:16:C7:CF:5C:12:64:D3:5F:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10D7815C16E83D1FE883A97125BCA6404197907C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/27B34B7A2B26017128BA6316C7CF5C1264D35F80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Jan 2023 13:26:51 +0000
Certificate not after:    Fri 12 Jan 2024 13:31:51 +0000
Subordinate resources:    AS: 268707
                          AS: 270966
                          IP: 45.169.160.0/23
                          IP: 2804:5984::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d7:81:5c:16:e8:3d:1f:e8:83:a9:71:25:bc:a6:40:41:97:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 13 13:26:51 2023 GMT
            Not After : Jan 12 13:31:51 2024 GMT
        Subject: CN=27B34B7A2B26017128BA6316C7CF5C1264D35F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:e2:8e:bb:34:fc:68:ed:1f:63:69:57:38:
                    6d:d6:a2:12:8f:ed:78:67:bf:c1:42:a2:92:6c:ee:
                    7b:5b:35:e3:36:cf:7f:b8:41:5f:7d:58:a0:5b:9b:
                    f2:17:e5:d0:05:9b:eb:eb:f2:4d:ab:24:7b:a4:f1:
                    97:c2:cc:d2:77:45:35:59:3f:0d:d4:66:dc:c3:c6:
                    5c:de:cb:bf:91:c6:e1:00:d5:25:a4:6a:10:62:cc:
                    09:74:50:3c:b9:24:0b:f5:e1:91:46:82:c2:e5:1c:
                    32:26:ef:99:91:04:5c:4c:9d:1a:63:1d:1d:4f:0a:
                    2e:2e:2f:c3:ce:3a:89:d8:bd:07:5c:be:58:56:d8:
                    21:31:c1:7f:25:07:02:52:18:50:ca:11:b9:c7:18:
                    63:c3:28:2f:14:b4:86:2c:a1:b7:34:f5:d8:55:9e:
                    3e:b6:df:b8:7d:d3:9a:d3:7a:bd:0f:38:2d:84:66:
                    a6:d8:6e:49:5c:61:03:71:e9:63:c5:ab:09:fb:12:
                    7e:7a:a6:f3:7a:44:c9:71:70:f2:33:f9:18:2c:1f:
                    2a:26:a7:a5:37:b7:73:f2:c1:f5:0d:be:ce:79:2b:
                    55:6d:3c:c7:04:36:4e:25:23:48:6f:5a:61:b4:a5:
                    72:39:cc:78:d9:81:a1:e8:76:99:cd:6a:de:d1:b7:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:B3:4B:7A:2B:26:01:71:28:BA:63:16:C7:CF:5C:12:64:D3:5F:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/27B34B7A2B26017128BA6316C7CF5C1264D35F80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/23
                IPv6:
                  2804:5984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268707
                  270966

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:f3:d1:96:c0:b6:a3:41:f6:30:e1:5d:14:08:ee:4e:91:
         21:54:8d:53:47:ce:11:4c:d9:49:60:ac:e3:a5:f9:d0:15:58:
         0f:d4:ee:be:29:6b:fb:a6:26:d6:e3:39:b1:ff:e0:7a:68:d7:
         b9:f6:d3:f3:56:85:db:44:f6:07:c6:d0:23:d8:59:dc:67:f3:
         fc:f0:27:59:c8:0f:20:4a:5f:09:92:bd:87:3d:ca:45:a2:35:
         4d:89:fc:7c:df:7f:49:1f:6c:5b:97:21:fd:19:0b:d2:66:96:
         79:3c:cf:78:9d:7b:41:53:f6:20:26:dd:ef:b1:36:5a:c8:b8:
         0a:14:1b:89:d0:b3:dd:83:74:c5:bb:f4:2f:e0:38:1b:51:6e:
         79:0e:14:ee:41:58:e8:83:bb:ba:50:44:c1:76:ea:1d:b8:74:
         79:a7:b0:e8:79:ad:b0:17:ad:c6:89:bb:ec:d9:b8:7c:a9:66:
         1c:aa:05:27:33:97:13:06:57:01:15:6d:3e:50:b2:8a:5a:d8:
         91:c2:80:83:1d:6e:d0:b5:a0:f8:80:f2:da:95:50:97:3e:53:
         1a:be:02:09:b5:e4:12:19:ba:4a:cf:6b:ad:7a:29:51:c3:27:
         d7:d6:d7:86:eb:b3:d6:0d:2e:ad:c9:ff:fd:3b:75:da:7e:1f:
         e8:83:2b:29
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgIUENeBXBboPR/og6lxJbymQEGXkHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMTMxMzI2NTFaFw0yNDAxMTIxMzMxNTFaMDMxMTAvBgNV
BAMTKDI3QjM0QjdBMkIyNjAxNzEyOEJBNjMxNkM3Q0Y1QzEyNjREMzVGODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4eKOuzT8aO0fY2lXOG3WohKP
7Xhnv8FCopJs7ntbNeM2z3+4QV99WKBbm/IX5dAFm+vr8k2rJHuk8ZfCzNJ3RTVZ
Pw3UZtzDxlzey7+RxuEA1SWkahBizAl0UDy5JAv14ZFGgsLlHDIm75mRBFxMnRpj
HR1PCi4uL8POOonYvQdcvlhW2CExwX8lBwJSGFDKEbnHGGPDKC8UtIYsobc09dhV
nj6237h905rTer0POC2EZqbYbklcYQNx6WPFqwn7En56pvN6RMlxcPIz+RgsHyom
p6U3t3PywfUNvs55K1VtPMcENk4lI0hvWmG0pXI5zHjZgaHodpnNat7Rt3IhAgMB
AAGjggMfMIIDGzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQns0t6KyYBcSi6
YxbHz1wSZNNfgDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BcUVEcXU1Uk5oOEZ0TWpleUdua1doUENWZ0xTMnVxZjR5
bVJoVUs3cjlFVi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9BcUVEcXU1Uk5oOEZ0TWpleUdua1doUENWZ0xTMnVxZjR5
bVJoVUs3cjlFVi8wLzI3QjM0QjdBMkIyNjAxNzEyOEJBNjMxNkM3Q0Y1QzEyNjRE
MzVGODAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAS2poDANBAIAAjAHAwUA
KARZhDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEGaMCAwQidjANBgkqhkiG9w0B
AQsFAAOCAQEALxjz0ZbAtqNB9jDhXRQI7k6RIVSNU0fOEUzZSWCs46X50BVYD9Tu
vilr+6Ym1uM5sf/gemjXufbT81aF20T2B8bQI9hZ3Gfz/PAnWcgPIEpfCZK9hz3K
RaI1TYn8fN9/SR9sW5ch/RkL0maWeTzPeJ17QVP2ICbd77E2Wsi4ChQbidCz3YN0
xbv0L+A4G1FueQ4U7kFY6IO7ulBEwXbqHbh0eaew6HmtsBetxom77Nm4fKlmHKoF
JzOXEwZXARVtPlCyilrYkcKAgx1u0LWg+IDy2pVQlz5TGr4CCbXkEhm6Ss9rrXop
UcMn19bXhuuz1g0urcn//Tt12n4f6IMrKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org