Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4327E94D24BF1D498BFF8AC79247C8CF39C7AAEB.cer
File:                     4327E94D24BF1D498BFF8AC79247C8CF39C7AAEB.cer (raw, json)
Hash identifier:          IwCvSmlUhOY85fmTmDOSi1aPmhw4LzhhbWoDzr2NrNA=
Subject key identifier:   43:27:E9:4D:24:BF:1D:49:8B:FF:8A:C7:92:47:C8:CF:39:C7:AA:EB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       706A9D68B68BA2CF0C9CC8FA2F5A9E756CDD3E54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/4327E94D24BF1D498BFF8AC79247C8CF39C7AAEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 20:37:45 +0000
Certificate not after:    Thu 21 Sep 2023 20:42:45 +0000
Subordinate resources:    AS: 271160
                          IP: 179.48.12.0/22
                          IP: 2804:772c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6a:9d:68:b6:8b:a2:cf:0c:9c:c8:fa:2f:5a:9e:75:6c:dd:3e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 20:37:45 2022 GMT
            Not After : Sep 21 20:42:45 2023 GMT
        Subject: CN=4327E94D24BF1D498BFF8AC79247C8CF39C7AAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:f1:9f:51:42:63:06:3e:65:d2:ba:69:00:
                    8e:9e:43:6f:d4:69:33:3c:90:30:95:24:ca:c8:36:
                    52:08:08:71:38:e7:e2:80:77:2e:de:3b:59:b3:8d:
                    26:d9:38:f8:40:47:37:44:fe:5b:d2:02:51:b3:69:
                    3e:9b:a8:09:d5:20:55:a1:98:30:db:10:67:5a:2b:
                    fc:89:85:8e:e7:d3:bb:34:0b:ec:be:c4:4f:6b:d7:
                    b9:be:07:cb:53:7a:2d:0f:ee:a6:99:d3:db:1f:ee:
                    05:a7:f9:f6:47:65:a7:f7:d4:38:d2:97:d9:0a:99:
                    82:9a:88:98:e8:5f:9a:fe:8e:a5:f7:44:c3:54:40:
                    88:ec:fe:5e:a6:e9:7c:5f:b8:71:5c:e9:b8:f0:f5:
                    bb:6f:d7:96:b3:41:17:9b:fe:08:7a:53:b3:d9:af:
                    23:59:70:eb:f2:b3:65:78:67:7d:37:8c:45:90:f3:
                    dd:95:32:c0:c7:2a:fd:db:61:2e:2e:7d:6c:88:dc:
                    da:aa:2c:4f:49:41:48:13:64:7c:f2:f4:52:b3:b4:
                    5c:78:9a:50:5f:f8:aa:65:29:cc:b6:d5:70:f5:62:
                    02:06:10:c3:2d:c2:0f:01:8e:74:3a:c5:99:46:ec:
                    91:62:5e:02:dd:b8:a7:a8:ce:22:29:87:2b:0b:4a:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:27:E9:4D:24:BF:1D:49:8B:FF:8A:C7:92:47:C8:CF:39:C7:AA:EB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/4327E94D24BF1D498BFF8AC79247C8CF39C7AAEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.12.0/22
                IPv6:
                  2804:772c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271160

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:d1:80:5d:c5:1d:4c:e6:15:bc:7c:e0:12:09:bc:63:f5:
         ec:b5:46:69:5c:b7:83:00:a9:14:97:83:27:79:91:56:bd:01:
         a3:f6:d3:9d:1b:ef:c9:90:a6:ae:12:31:a0:b6:aa:ac:ce:32:
         b4:4c:57:38:cc:74:50:7d:27:a1:1d:08:14:fa:d1:eb:9b:8e:
         c8:55:6d:91:73:11:07:41:49:63:c7:a0:28:11:41:58:99:60:
         87:5b:67:d3:ab:71:07:91:ff:42:e0:a4:a6:5f:da:53:be:fc:
         c5:65:b8:9c:2d:89:45:18:9d:4e:fe:66:4f:b8:47:3b:cb:7d:
         25:be:39:2a:e8:d1:51:8b:81:b0:ce:ad:dc:b0:ff:ff:ab:fe:
         dd:17:c1:e4:5d:3e:ca:5b:00:da:4e:74:a1:f6:1e:d6:32:21:
         3c:dc:6b:f7:3e:fe:11:61:de:f7:dd:4c:32:cd:2e:34:92:49:
         47:b1:b5:ba:8d:61:7e:75:3e:dd:93:a3:01:cd:0b:80:37:52:
         0e:33:ec:cc:fb:d8:a4:7a:20:ef:be:05:7c:24:b9:40:c5:54:
         81:69:66:e5:2a:06:b4:3e:64:ca:2e:45:80:08:65:c7:64:79:
         d0:c0:a2:41:c4:ca:e3:1b:cc:97:6d:37:d2:bf:b0:c9:53:ef:
         1b:6b:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org