Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27D022D8AE2F59929545906088E0AD52D9AF7062.cer
File:                     27D022D8AE2F59929545906088E0AD52D9AF7062.cer (raw, json)
Hash identifier:          /DTI3Xfw9xB9v/ggjLYYxoD6+4MN4H6M17DXy2B56I8=
Subject key identifier:   27:D0:22:D8:AE:2F:59:92:95:45:90:60:88:E0:AD:52:D9:AF:70:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55C3A9E99C473217D4BEBFB6DC5CD6A571E7F615
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 16:45:34 +0000
Certificate not after:    Thu 28 Jul 2022 16:50:34 +0000
Subordinate resources:    AS: 263545
                          IP: 191.6.0.0/22
                          IP: 2804:13ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c3:a9:e9:9c:47:32:17:d4:be:bf:b6:dc:5c:d6:a5:71:e7:f6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 16:45:34 2021 GMT
            Not After : Jul 28 16:50:34 2022 GMT
        Subject: CN=27D022D8AE2F59929545906088E0AD52D9AF7062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:10:ec:2d:65:1a:5d:70:54:7c:f8:cf:b4:
                    e7:1f:55:9b:09:7b:54:26:ae:16:e3:e2:68:b7:92:
                    56:63:cb:8e:6a:75:ba:fd:d4:6b:b7:78:73:55:c0:
                    7d:80:c1:39:ed:35:f0:4c:fa:a3:aa:7c:8f:d8:fe:
                    09:9d:1c:62:d2:10:48:e4:cf:5a:8f:eb:e2:5f:cf:
                    fd:86:0f:ed:93:39:03:b3:3b:41:ae:65:ea:aa:03:
                    14:99:91:f5:b7:10:82:c9:73:e3:27:00:f8:75:3a:
                    18:ad:43:1e:07:bd:ce:49:60:63:9c:fd:a5:82:2b:
                    0c:17:45:67:3d:b3:7c:75:16:40:d2:fa:05:e2:c4:
                    73:ff:e1:91:18:b7:6a:77:30:aa:7a:53:fd:d8:8b:
                    7e:68:2f:63:97:93:cb:c6:63:5b:50:8b:fb:a1:2b:
                    11:15:0c:f2:c0:42:a3:80:29:8b:89:eb:27:fe:0e:
                    c7:4c:19:f2:1c:34:0e:0a:d3:f9:1d:8a:fc:95:02:
                    d8:24:d2:91:66:97:86:6a:79:05:bd:59:ea:52:b1:
                    f2:9a:10:08:10:64:ee:5a:51:c0:de:53:54:72:cc:
                    25:e3:0c:e6:bb:c6:9c:93:c5:72:8e:eb:84:19:1a:
                    90:e2:42:8c:73:db:52:25:b7:32:72:6f:aa:4a:92:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:D0:22:D8:AE:2F:59:92:95:45:90:60:88:E0:AD:52:D9:AF:70:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/27D022D8AE2F59929545906088E0AD52D9AF7062.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.0.0/22
                IPv6:
                  2804:13ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263545

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:92:14:93:b4:ce:fa:45:25:67:ce:80:5b:60:e7:82:8a:
         11:31:72:d2:c6:15:3e:74:4a:7b:25:da:34:08:d1:ed:78:91:
         76:a0:b8:0b:81:53:6f:2f:b1:28:c9:45:94:aa:b4:d6:92:d3:
         6b:4e:27:3d:29:00:8d:3f:7e:19:f6:e7:c6:30:bd:3b:79:1b:
         a3:05:a3:af:fc:7f:73:a9:f9:ee:c4:d7:3d:c6:28:51:1d:d5:
         31:9a:fe:22:0b:f3:00:ac:81:69:91:37:e3:f4:49:ec:c0:ff:
         64:7b:44:9b:e6:ac:eb:79:19:ba:7c:06:b1:fb:39:3f:0b:e0:
         22:99:ee:5f:d2:31:ce:26:8b:9d:96:30:39:98:76:6b:26:9b:
         67:db:53:4c:2f:eb:4b:08:95:30:e8:99:87:6d:2a:b5:b8:59:
         c4:05:76:07:20:8b:8f:67:3d:69:e2:f8:2e:db:92:9b:94:42:
         f2:e4:6e:30:f4:7b:1f:3a:0f:e2:b0:19:f0:cb:e1:08:ce:77:
         5d:b3:68:93:da:cf:78:43:70:93:d4:da:ea:5c:df:02:22:56:
         8b:61:10:32:7d:26:8b:bc:f6:9a:51:2a:13:93:52:15:08:ca:
         9f:03:ca:a5:d9:c0:00:07:64:58:0b:75:0a:81:8c:6e:d9:01:
         66:07:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org