Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.cer
File:                     427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.cer (raw, json)
Hash identifier:          V+hn6tAnHONUuC1/dBZBRWV2qrEPWlFGZFzcZfN/C98=
Subject key identifier:   42:7F:A1:F0:5F:64:D5:F8:4B:B0:9B:D5:C3:A5:A3:1E:33:E8:1F:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       09A228FEF48A0D2C61AACB7FFF4AF953F47FFD59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Mar 2023 22:29:07 +0000
Certificate not after:    Fri 08 Mar 2024 22:34:07 +0000
Subordinate resources:    AS: 268374
                          IP: 45.239.24.0/22
                          IP: 2804:5030::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a2:28:fe:f4:8a:0d:2c:61:aa:cb:7f:ff:4a:f9:53:f4:7f:fd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 10 22:29:07 2023 GMT
            Not After : Mar  8 22:34:07 2024 GMT
        Subject: CN=427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:bd:38:e1:d2:18:21:62:03:f6:ff:20:81:
                    13:b6:d3:ec:f1:60:c0:61:40:dc:d0:2b:46:5d:60:
                    1e:5d:4a:82:95:48:3b:23:e7:a9:d0:e9:d1:e0:70:
                    2f:f7:fa:a3:f6:94:1c:ad:11:38:00:93:07:0a:87:
                    68:7a:5d:17:31:05:63:04:b4:80:06:b6:a3:30:6a:
                    d7:0d:cb:ac:c5:2a:a6:5b:6c:f1:74:0e:16:ab:1e:
                    d6:29:ec:9a:ea:7b:13:75:31:dd:42:eb:45:19:cc:
                    91:ba:d1:81:0a:12:d7:1b:2a:8c:4d:91:d0:52:e3:
                    25:10:c7:d7:7e:f7:94:2e:77:da:13:b7:04:09:da:
                    87:cc:02:f3:52:c0:3a:31:9f:a1:3e:d3:a9:ea:60:
                    a2:ef:d8:c5:4b:75:82:f1:b9:b9:01:cf:a6:82:2c:
                    74:c5:35:24:19:d6:14:90:c1:78:97:aa:0e:89:51:
                    f8:56:9f:24:a3:8d:9e:88:da:98:2e:2d:70:59:6c:
                    7b:35:d9:9c:a7:ec:8c:d3:c8:d8:dc:52:0e:66:00:
                    cd:6b:e4:13:12:6e:a6:96:71:18:fc:48:44:20:1d:
                    6d:0a:eb:f0:0a:df:ed:17:8a:2d:99:3a:6e:2c:2e:
                    92:80:a6:0e:bc:e1:75:4a:75:e7:18:96:82:b6:22:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:7F:A1:F0:5F:64:D5:F8:4B:B0:9B:D5:C3:A5:A3:1E:33:E8:1F:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/427FA1F05F64D5F84BB09BD5C3A5A31E33E81F3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.24.0/22
                IPv6:
                  2804:5030::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268374

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:df:10:4c:24:d3:be:04:3a:6b:8c:b8:0a:79:dc:dc:75:
         5d:5a:1c:e8:84:cb:4e:3a:a3:b0:73:8b:3e:12:18:e4:53:80:
         6e:cf:9d:23:f0:41:4a:43:9c:27:6a:fb:4c:01:c3:41:f8:25:
         24:68:00:72:bf:5d:13:2b:d6:c0:28:2a:28:17:b6:cd:ea:58:
         7d:cc:b7:11:de:84:8d:6b:c8:b5:65:d2:a3:26:27:36:f3:4e:
         77:2b:57:ca:3e:bd:81:35:fd:1e:e3:64:51:e5:93:33:d6:9e:
         78:b1:c7:38:1d:f8:25:27:01:4a:1f:6f:fe:df:78:11:04:ec:
         a1:3b:7c:40:6b:f6:60:df:52:9a:89:1f:f9:a5:52:fc:6f:bb:
         d6:5d:89:3d:16:4b:82:ca:38:73:e5:2b:7c:6b:e2:bf:df:7a:
         de:e3:6e:e7:90:99:67:74:a3:e7:d8:1c:50:2a:06:ae:c3:a8:
         d0:e6:f1:7f:ad:b1:08:5e:0c:44:55:f3:85:23:64:22:d2:01:
         ac:4c:b6:8e:ec:0e:bf:6c:5d:fa:2e:06:b9:9e:9b:ee:a2:b0:
         3a:8f:f8:a5:1a:a0:f3:57:f3:3e:7e:34:01:5b:d1:2f:5f:b9:
         b3:62:0d:8f:5a:ca:ac:1a:df:bc:29:a9:cd:82:52:2e:c2:3c:
         b6:55:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org