Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer
File:                     27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.cer (raw, json)
Hash identifier:          6D+1Uc2It+0DuxlCyfdTxTdm5lNJrkcjlePdDb+zh7k=
Subject key identifier:   27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       487E2D1153E7FE6C3D91D19558F05D02F8AAD8FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 11:35:10 +0000
Certificate not after:    Fri 03 Jan 2025 11:40:10 +0000
Subordinate resources:    AS: 267657
                          IP: 45.224.112.0/22
                          IP: 2804:44d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7e:2d:11:53:e7:fe:6c:3d:91:d1:95:58:f0:5d:02:f8:aa:d8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 11:35:10 2024 GMT
            Not After : Jan  3 11:40:10 2025 GMT
        Subject: CN=27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:b1:8b:86:ac:a1:20:b9:ec:43:5a:c1:f4:
                    1b:2d:b4:f9:9c:42:8c:44:bf:d3:24:32:11:4e:b3:
                    62:17:1b:42:23:e3:f5:ab:f4:14:b7:76:94:f5:6a:
                    30:13:7b:67:ab:f1:b8:3b:6e:43:28:cf:28:b4:ca:
                    08:74:d6:d3:b8:1b:96:07:17:a1:4c:5a:f6:fe:af:
                    ed:03:51:92:da:0d:7f:4d:3f:d1:de:14:16:95:7b:
                    42:98:d8:40:0f:af:57:86:17:ee:82:20:e5:f6:0b:
                    01:dc:e9:2c:bc:b9:ce:39:59:c5:d3:93:e7:f0:bf:
                    d6:54:dc:24:d8:50:78:11:ea:e4:bf:fd:9c:de:07:
                    4b:5b:52:6e:34:0c:7e:bd:9e:61:d0:14:0e:91:01:
                    df:11:9f:ab:e0:34:68:b7:51:38:e8:fd:f7:bf:bf:
                    5f:6d:ae:13:9d:77:4a:80:e7:ca:fa:65:74:ef:52:
                    51:08:f6:4e:26:53:7f:9e:e8:a3:21:81:9c:05:a6:
                    c1:a8:e0:9b:84:fe:c3:31:e7:59:aa:64:6d:0a:96:
                    01:80:bb:cd:fe:38:a8:e3:1a:ad:d7:e4:24:cd:fb:
                    e7:11:15:ff:0b:34:08:9a:73:d0:fe:c5:bc:80:90:
                    9f:4a:58:68:40:76:be:4f:7e:43:89:a3:34:7c:08:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:B6:24:8B:1E:05:8E:2E:E0:A7:11:BA:AE:5F:6C:BD:F6:1C:61:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/27B6248B1E058E2EE0A711BAAE5F6CBDF61C6104.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.112.0/22
                IPv6:
                  2804:44d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267657

    Signature Algorithm: sha256WithRSAEncryption
         b2:3b:8e:8d:9e:57:7c:34:77:18:a1:25:75:79:64:1a:dc:28:
         d8:c8:8c:08:cd:4e:82:b4:08:b2:b4:5a:c9:69:bb:48:3b:e6:
         40:c3:5d:26:b2:a4:47:3f:81:b8:b6:99:69:7e:7d:46:bf:06:
         cf:fe:a7:34:cf:be:51:15:57:4d:bf:63:ad:4b:63:80:e8:15:
         4c:32:14:a1:c5:46:99:d6:61:c9:48:88:b4:c8:e5:d5:95:f9:
         69:5e:a9:0b:4f:d3:eb:8c:34:4b:3a:bf:43:ea:63:48:ec:fd:
         9f:a5:4c:a6:8c:10:2e:0b:a2:6c:cd:ab:e4:dc:b6:29:fa:0f:
         7c:41:e2:b6:90:96:79:30:9d:38:cc:2f:2b:c1:7d:ab:80:9b:
         90:18:46:88:73:5e:4d:c6:22:da:51:72:19:aa:86:86:0f:56:
         06:59:ed:13:d3:6b:71:b5:26:b9:50:d5:72:0f:e4:a6:62:59:
         1b:71:b8:9b:4b:47:a2:0d:b7:7e:96:6f:88:ce:5c:89:8e:74:
         3d:30:b9:92:12:c1:1b:39:87:a6:28:6b:3d:78:30:6b:79:a0:
         31:c2:17:5b:44:38:c6:46:f2:0e:54:2c:76:f4:9a:99:1e:0c:
         f4:2d:6a:02:73:8c:3c:4d:b6:6a:76:5b:06:11:31:22:2e:44:
         79:ea:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org