Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer
File:                     EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer (raw, json)
Hash identifier:          yWTaAEYrczshKvEjTR+wNsdJX1T64wjlQEE+RvTJaTI=
Subject key identifier:   EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E2E27EEE9B5AF782F884D4D1B1EEB3BFCA28EC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 16:28:37 +0000
Certificate not after:    Wed 11 Sep 2024 16:33:37 +0000
Subordinate resources:    AS: 268149
                          IP: 45.170.92.0/22
                          IP: 2804:58c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:27:ee:e9:b5:af:78:2f:88:4d:4d:1b:1e:eb:3b:fc:a2:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 16:28:37 2023 GMT
            Not After : Sep 11 16:33:37 2024 GMT
        Subject: CN=EC27B2D17E0186C08D879669E1FC4B395BBB0B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:39:71:a6:43:b6:d0:79:b3:d7:1a:d0:d9:
                    05:9a:39:84:15:1e:29:03:e7:9b:7d:fe:99:05:80:
                    e1:9f:a5:3f:15:d7:f9:c0:8c:7b:17:d3:0b:39:28:
                    1e:f9:f2:df:e5:36:a8:a5:43:52:7a:61:b0:8a:83:
                    8a:20:98:e7:dd:cc:1b:70:f8:19:21:81:9b:26:a8:
                    ab:3c:11:41:0d:b3:9b:94:7b:52:59:b0:91:0d:7b:
                    83:d0:c2:f3:f5:8c:99:fb:bc:6e:29:e5:94:7a:25:
                    46:8c:dd:5a:ee:b5:52:f6:62:08:96:9f:4b:51:40:
                    cc:97:5d:08:34:fd:ad:22:37:30:d3:6e:54:84:87:
                    3b:36:a8:86:c5:2a:61:0e:4f:05:43:aa:cb:81:71:
                    6a:3a:11:fd:99:18:f9:7a:12:ae:01:5d:00:c6:19:
                    1e:ed:88:77:d7:47:e8:99:a4:e9:3d:6c:c5:a3:6d:
                    54:25:12:74:ea:08:2e:fe:6e:a2:38:f5:46:66:e4:
                    62:26:eb:3c:b6:fa:34:95:69:6e:a1:08:49:5b:d8:
                    bc:06:f5:1b:a4:4d:0e:48:4f:66:db:5a:29:43:b6:
                    28:f4:03:c6:e9:dc:ec:a8:b8:60:38:ea:8f:7a:16:
                    e5:7f:96:22:70:2c:10:45:3e:57:c4:dc:fb:a3:c5:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.92.0/22
                IPv6:
                  2804:58c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268149

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:dd:70:c9:d7:a5:0b:86:3c:d3:01:4f:be:51:86:c1:49:
         2d:13:f2:52:ef:b9:fe:3e:99:86:bc:1d:39:4f:ae:05:f6:76:
         a3:f1:09:f9:6d:1b:52:74:96:ec:d6:fa:89:10:69:4d:b6:6a:
         89:ce:b7:c2:a6:48:88:86:a6:9d:f0:b2:1b:6a:6e:bb:86:b2:
         da:74:ba:fe:44:05:eb:c7:a4:a3:f3:97:dd:2a:d6:35:17:ea:
         06:1f:f2:95:e2:8f:41:07:08:b0:ec:f9:75:42:9b:b3:bf:24:
         c9:99:f3:95:6b:57:f4:8c:f5:45:b8:d0:ae:da:f3:61:4b:95:
         2f:7b:70:a9:9f:7d:e8:b2:a3:3c:c2:70:f4:0e:57:30:1d:42:
         54:f1:89:be:a8:2f:01:92:09:a1:54:24:15:f7:fd:09:e8:5c:
         94:77:49:e7:2c:ab:60:de:4c:ce:0c:1e:97:41:fe:0a:31:cb:
         67:75:a1:e9:cd:c7:65:37:d2:f0:49:0d:62:55:0b:d7:48:7c:
         08:3c:2a:02:19:1f:e0:cb:24:fa:77:e4:63:35:4d:00:2d:a2:
         de:a3:be:41:4a:85:e1:13:2c:db:fb:aa:0b:e5:14:a1:c9:ae:
         45:7a:53:95:a9:6e:65:41:94:17:61:9b:f8:35:1d:f5:e5:ce:
         0d:29:88:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org