Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
File:                     126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer (raw, json)
Hash identifier:          xuM36VBg+Kxmr4MkH/DhdKua33mNZgFj74xTFZjJWIg=
Subject key identifier:   12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6ACA96FB77424AF3BB0306B64CAFF30B943F913E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 01:15:09 +0000
Certificate not after:    Thu 17 Oct 2024 01:20:09 +0000
Subordinate resources:    AS: 263584
                          IP: 177.129.136.0/21
                          IP: 2804:f68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:96:fb:77:42:4a:f3:bb:03:06:b6:4c:af:f3:0b:94:3f:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 19 01:15:09 2023 GMT
            Not After : Oct 17 01:20:09 2024 GMT
        Subject: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:bb:11:cf:e5:f9:8b:62:b5:1d:04:e9:ef:
                    cc:7b:e4:60:c2:26:5a:8f:7e:74:c2:f4:3c:44:bf:
                    18:7a:8a:52:c2:1a:fb:fc:b3:8f:db:a9:d1:04:78:
                    a5:63:e3:57:b0:80:ca:ee:19:e2:81:f1:05:52:03:
                    54:f1:9b:7a:de:fc:7e:2b:b2:8c:ac:3f:82:75:f1:
                    9f:29:e9:60:7b:40:25:66:96:18:1a:51:84:f6:30:
                    22:f6:78:55:2b:40:4b:54:be:99:a8:0b:c7:a7:77:
                    b0:ab:2f:ec:4c:92:6e:d0:07:cd:f8:29:1c:c2:07:
                    01:31:15:e6:31:9e:da:5b:72:51:d6:91:3d:78:ca:
                    75:89:53:6b:17:be:26:56:2a:47:32:c3:cd:f7:69:
                    af:ff:06:84:48:c7:05:2d:53:cb:24:55:e1:30:f9:
                    61:27:bb:be:0b:2d:e0:50:9f:c7:26:38:ac:94:90:
                    57:fd:23:f2:4e:71:f1:7f:8e:87:01:c9:53:59:76:
                    73:12:cf:1b:05:bb:47:4d:06:01:c8:3e:e8:d6:18:
                    e8:6a:a9:94:64:8e:fa:8a:0c:c2:9f:fc:0b:3c:ed:
                    8d:45:1c:96:1d:93:e5:4e:5e:f1:4d:59:66:00:32:
                    d1:a0:44:1a:f6:cd:2d:d2:cd:46:78:77:67:06:0f:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21
                IPv6:
                  2804:f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263584

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:a6:82:f7:8d:b0:cc:07:9d:7c:3b:63:b6:b1:61:48:47:
         62:76:81:82:a8:b9:8d:10:d2:b7:60:97:30:32:4b:da:0c:6e:
         b2:df:1a:1a:cb:9d:73:a6:67:78:a9:4d:47:96:73:07:47:06:
         4a:ae:4c:4c:03:bc:2f:72:18:02:4b:f7:c6:04:36:96:d2:6e:
         f6:b1:b7:1d:c3:d7:77:2f:9e:06:ca:bb:9e:67:4b:f4:f9:30:
         95:e1:ef:e3:37:18:26:a6:3f:ac:fb:f7:4c:d2:07:87:78:23:
         94:75:c2:77:6e:33:63:08:55:2b:2f:9a:91:4f:e2:bf:66:d4:
         30:b7:fe:1e:f6:7f:9d:95:9d:90:11:89:63:b3:ae:ca:c1:1f:
         19:d1:de:3d:9b:f7:66:20:69:87:40:f9:98:f3:40:f6:5d:c1:
         45:c1:09:94:32:1a:f3:5b:e7:c8:c9:06:88:4b:82:63:14:0b:
         2b:74:a9:00:a3:eb:ba:3f:7c:55:ef:94:5c:c7:b6:2c:ea:4b:
         09:7a:ae:40:c6:3b:d8:73:41:b1:eb:b0:27:2d:a6:dd:ac:19:
         dd:66:0a:3e:44:54:5d:ef:b5:3e:ad:c1:b2:b7:42:bd:46:82:
         cf:1b:d8:e4:41:e7:ee:14:23:8b:be:ee:aa:63:c9:ce:35:25:
         61:05:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org