Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/27E189CF96ABDA0A62F2DFEFB15C075FEE040A57.cer
File:                     27E189CF96ABDA0A62F2DFEFB15C075FEE040A57.cer (raw, json)
Hash identifier:          I9VKS7JojhiLHzdtwlOH/mnSSBGxJSpCPxKU4OaWm00=
Subject key identifier:   27:E1:89:CF:96:AB:DA:0A:62:F2:DF:EF:B1:5C:07:5F:EE:04:0A:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FA727D0CE0666530A9355ABDDE17CD06F3B11A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/27E189CF96ABDA0A62F2DFEFB15C075FEE040A57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 17:43:36 +0000
Certificate not after:    Sat 15 Mar 2025 17:48:36 +0000
Subordinate resources:    AS: 268412
                          IP: 45.160.164.0/22
                          IP: 2804:50d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a7:27:d0:ce:06:66:53:0a:93:55:ab:dd:e1:7c:d0:6f:3b:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 17:43:36 2024 GMT
            Not After : Mar 15 17:48:36 2025 GMT
        Subject: CN=27E189CF96ABDA0A62F2DFEFB15C075FEE040A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:2d:d5:34:18:32:de:ab:ad:40:0c:e5:d9:
                    de:e3:72:d5:15:c8:a3:06:a8:cc:60:e3:30:e3:0d:
                    9e:ed:7a:60:52:58:1a:d7:30:ba:ba:a8:c4:ad:96:
                    58:c9:de:91:f6:0f:bc:cb:cc:be:f8:de:fa:bb:b7:
                    2d:dc:56:5c:e8:80:d2:c4:c4:11:5a:65:eb:31:6e:
                    2f:7e:e6:45:8b:e8:58:4b:6b:0a:f2:6a:16:1d:89:
                    84:73:be:b9:cd:b8:5f:69:70:be:53:0b:67:cf:8a:
                    bb:9c:f3:9f:8c:12:9d:56:47:71:ca:9f:86:0b:3f:
                    10:a2:7b:bf:4c:95:58:a1:e6:28:e9:c6:e2:9c:50:
                    0a:cb:93:22:d7:4a:cb:e5:dc:84:2f:a2:6a:c4:07:
                    4f:2d:2f:6c:0f:fa:3d:27:ab:53:64:5d:63:18:6e:
                    d8:84:4c:20:de:95:4e:38:2f:9f:e7:ae:35:fd:ca:
                    58:b4:5f:5b:ec:e9:1c:43:44:1c:9a:f1:bf:72:70:
                    7d:72:87:f4:b3:01:4b:6e:4c:98:f5:b2:6b:6e:6e:
                    47:ad:91:cd:9d:7a:f2:de:dc:67:df:a5:0c:9a:d6:
                    d4:61:92:11:78:7b:d7:ed:7a:19:90:df:c5:a9:25:
                    7d:86:ba:33:b9:e8:36:ed:c2:31:65:cd:10:1a:d9:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:E1:89:CF:96:AB:DA:0A:62:F2:DF:EF:B1:5C:07:5F:EE:04:0A:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73CP25Y7qyu4tk7HkL6MKp6RAHYxh5XssJiHJJ7W25hH/0/27E189CF96ABDA0A62F2DFEFB15C075FEE040A57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.164.0/22
                IPv6:
                  2804:50d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268412

    Signature Algorithm: sha256WithRSAEncryption
         39:45:e0:76:8c:c4:e1:7a:52:c2:f9:f6:47:12:69:68:c7:d9:
         35:b3:2d:f4:89:5f:64:31:82:72:5d:1d:f0:5e:23:87:24:62:
         b0:69:59:75:08:f9:0d:ff:2c:b6:9e:29:2e:5f:c6:74:5b:be:
         2f:86:db:fc:54:45:68:b5:a0:9b:be:7f:9d:a7:8b:20:b6:8f:
         6e:3f:d7:ab:43:7b:e6:a0:74:55:9b:d3:87:cb:19:43:4c:a6:
         b4:c3:03:85:8f:84:e8:fb:27:0f:36:75:f5:87:d7:f9:f4:4a:
         c0:bf:e1:42:8a:8d:e8:4b:91:53:58:d6:26:ab:28:54:c6:d8:
         52:58:ff:07:66:eb:ab:2a:11:33:4c:cf:d1:70:87:4a:d5:a5:
         32:a5:37:70:c1:84:12:75:e1:76:8c:03:8a:dc:5a:96:51:0b:
         54:8a:88:06:c7:d4:2d:a6:bb:5d:21:3d:da:dd:8e:21:5e:3d:
         43:03:64:b0:81:fb:39:65:06:bb:f5:82:25:4c:e4:ae:30:53:
         92:20:43:0b:07:b2:71:5c:23:06:d8:be:21:ca:27:e3:8d:ff:
         07:75:3d:5c:6c:ff:08:4f:cc:34:6f:84:36:bb:19:ab:34:38:
         58:2b:72:8b:4b:39:2c:c5:8d:8f:11:46:c3:be:6e:4f:c8:7e:
         5c:13:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org