Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.cer
File:                     8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.cer (raw, json)
Hash identifier:          FmjMirxhcPtpR9kOqWwgA3BQJP8ONs9OJB9IkOpdCNA=
Subject key identifier:   8A:27:BC:F7:4D:27:B0:FF:E8:47:8E:11:F3:A0:9A:4E:59:E5:F9:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       036A0A49BD1B48974DC5F4D95CE6509CDCBB3CA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 19:13:02 +0000
Certificate not after:    Fri 19 Jul 2024 19:18:02 +0000
Subordinate resources:    AS: 269034
                          IP: 45.178.108.0/22
                          IP: 2804:5e74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:0a:49:bd:1b:48:97:4d:c5:f4:d9:5c:e6:50:9c:dc:bb:3c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 19:13:02 2023 GMT
            Not After : Jul 19 19:18:02 2024 GMT
        Subject: CN=8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:ad:c2:83:26:12:a1:f7:9e:4c:93:e1:76:
                    b3:07:15:04:20:49:5f:3c:af:56:54:7b:2a:33:79:
                    aa:20:2f:78:51:3d:15:f5:ca:7f:a6:7f:22:64:21:
                    b0:bd:21:88:5f:a8:92:52:3a:35:b5:15:30:7e:eb:
                    1c:d9:1e:c7:94:34:27:ea:3e:12:00:41:17:7c:e5:
                    61:ea:a4:e1:d3:ac:72:b0:99:c0:bf:5b:2a:94:cb:
                    66:08:a0:4d:5a:c7:d9:82:65:15:ee:97:d3:ec:31:
                    9c:bc:dd:0f:8c:42:b9:cf:5f:78:cc:45:5d:a0:25:
                    25:bf:fc:6a:a9:db:fc:3c:d8:67:10:83:46:af:81:
                    09:6e:f9:a4:7e:d5:a1:44:b8:c7:c0:47:f0:bb:e8:
                    63:2c:52:16:36:28:30:32:dd:48:71:bd:17:31:fa:
                    00:ab:2a:14:d0:72:79:72:d7:31:49:44:45:e2:63:
                    29:6f:27:41:c2:8c:25:b9:c9:aa:a0:c7:d0:89:ba:
                    3c:c9:2c:57:97:a3:f5:87:fc:56:3f:bd:c8:ed:6d:
                    db:69:df:10:64:9f:45:63:bf:48:22:a5:6e:2b:fb:
                    ce:86:88:1d:d3:2c:15:6a:cd:91:d4:f8:43:66:95:
                    c7:ad:a8:59:02:4c:ec:e9:f8:70:19:72:49:ce:fc:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:27:BC:F7:4D:27:B0:FF:E8:47:8E:11:F3:A0:9A:4E:59:E5:F9:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/0/8A27BCF74D27B0FFE8478E11F3A09A4E59E5F9C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.108.0/22
                IPv6:
                  2804:5e74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269034

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:01:e0:f6:7d:36:25:e6:17:2c:01:04:2b:7f:d9:71:3c:
         01:73:86:6e:2a:c8:86:1b:5c:91:83:1e:dd:d4:61:7a:99:cb:
         ba:0e:37:00:40:2c:af:38:6e:1e:2b:eb:e9:d9:64:05:55:18:
         db:e9:b0:c2:fa:a8:b5:86:3c:2d:c3:38:ff:ee:c3:ec:ca:5b:
         10:f1:74:14:c1:89:f8:7c:38:e3:8e:49:d4:2d:4b:17:51:33:
         ca:c2:3c:49:d0:5d:24:c7:b2:78:44:39:b6:22:8b:91:fc:1e:
         43:34:8b:37:43:f9:3c:a5:d8:be:34:91:ef:af:f8:f3:a4:f6:
         f6:6e:41:56:d8:12:c2:bf:54:38:4b:07:2a:e7:60:9f:31:87:
         45:bc:3b:7c:8d:c6:57:51:46:02:c2:8d:17:5c:cf:d0:be:57:
         9b:fa:b4:eb:df:30:13:21:38:50:58:42:1e:fd:2d:ce:dc:73:
         42:0c:dc:ea:78:27:4a:1f:16:04:54:40:52:54:18:d4:ee:8f:
         46:a0:43:b0:c3:11:c1:94:ce:14:5c:1c:b5:c0:04:b0:29:84:
         10:3d:4a:d4:41:e7:3b:25:3c:df:30:d9:6e:56:53:68:3a:94:
         93:61:66:83:cb:2c:f3:09:26:e7:82:48:c0:02:5c:91:a5:e1:
         98:8f:c1:44
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUA2oKSb0bSJdNxfTZXOZQnNy7PKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjExOTEzMDJaFw0yNDA3MTkxOTE4MDJaMDMxMTAvBgNV
BAMTKDhBMjdCQ0Y3NEQyN0IwRkZFODQ3OEUxMUYzQTA5QTRFNTlFNUY5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVa3CgyYSofeeTJPhdrMHFQQg
SV88r1ZUeyozeaogL3hRPRX1yn+mfyJkIbC9IYhfqJJSOjW1FTB+6xzZHseUNCfq
PhIAQRd85WHqpOHTrHKwmcC/WyqUy2YIoE1ax9mCZRXul9PsMZy83Q+MQrnPX3jM
RV2gJSW//Gqp2/w82GcQg0avgQlu+aR+1aFEuMfAR/C76GMsUhY2KDAy3UhxvRcx
+gCrKhTQcnly1zFJREXiYylvJ0HCjCW5yaqgx9CJujzJLFeXo/WH/FY/vcjtbdtp
3xBkn0Vjv0gipW4r+86GiB3TLBVqzZHU+ENmlcetqFkCTOzp+HAZcknO/Eg/AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKJ7z3TSew/+hH
jhHzoJpOWeX5wTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80d2c2em55cTJLa0d0UUFrdVVyblNUdlNza1JHc01mclBy
U2Jwd2pITEczcC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby80d2c2em55cTJLa0d0UUFrdVVyblNUdlNza1JHc01mclBy
U2Jwd2pITEczcC8wLzhBMjdCQ0Y3NEQyN0IwRkZFODQ3OEUxMUYzQTA5QTRFNTlF
NUY5QzEubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2ybDANBAIAAjAHAwUA
KARedDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGuowDQYJKoZIhvcNAQELBQAD
ggEBAEH1AeD2fTYl5hcsAQQrf9lxPAFzhm4qyIYbXJGDHt3UYXqZy7oONwBALK84
bh4r6+nZZAVVGNvpsML6qLWGPC3DOP/uw+zKWxDxdBTBifh8OOOOSdQtSxdRM8rC
PEnQXSTHsnhEObYii5H8HkM0izdD+Tyl2L40ke+v+POk9vZuQVbYEsK/VDhLByrn
YJ8xh0W8O3yNxldRRgLCjRdcz9C+V5v6tOvfMBMhOFBYQh79Lc7cc0IM3Op4J0of
FgRUQFJUGNTuj0agQ7DDEcGUzhRcHLXABLAphBA9StRB5zslPN8w2W5WU2g6lJNh
ZoPLLPMJJueCSMACXJGl4ZiPwUQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org