Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
File:                     127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer (raw, json)
Hash identifier:          XzulsCvTzZy9HcP17n4r5UMosz5LORDZQnt8xKRSMQQ=
Subject key identifier:   12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23BA9BD4B6690F2F112ED432E1222E7572D69B81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 20:48:56 +0000
Certificate not after:    Fri 07 Mar 2025 20:53:56 +0000
Subordinate resources:    AS: 264025
                          IP: 143.137.32.0/22
                          IP: 168.197.56.0/22
                          IP: 2804:299c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ba:9b:d4:b6:69:0f:2f:11:2e:d4:32:e1:22:2e:75:72:d6:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 20:48:56 2024 GMT
            Not After : Mar  7 20:53:56 2025 GMT
        Subject: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:eb:84:12:80:61:f2:f5:8a:a2:b1:45:23:
                    6d:55:ff:59:2d:4e:aa:08:7d:86:0b:bd:30:62:03:
                    9a:04:1a:81:fa:82:13:4b:39:ca:47:10:1b:3c:4c:
                    a4:73:da:0a:21:60:f2:70:11:a4:fc:c3:4e:63:0b:
                    e9:1b:ab:17:e1:22:bc:3b:82:4b:0f:73:95:87:dd:
                    3a:4c:80:09:8b:f6:7f:68:3d:9e:4e:ab:2a:b8:50:
                    8e:6e:96:06:da:ab:e6:29:e9:14:e4:7c:24:b3:3a:
                    f4:8e:a2:bf:d4:96:0c:dd:39:f7:1d:1d:8f:8c:04:
                    09:3f:91:87:2e:64:97:ff:8f:f7:bc:ee:76:b7:b1:
                    db:e2:04:8a:6b:79:70:8d:33:29:6a:74:27:b0:68:
                    5d:7f:4f:37:2b:11:6c:9e:69:43:c9:68:55:ed:4f:
                    d8:ae:90:42:ff:b5:60:0c:40:81:75:80:f5:dc:08:
                    b6:31:07:26:84:07:2c:36:21:2b:87:2d:4d:d1:3e:
                    be:e3:4a:2a:ea:f4:ba:bb:9f:93:43:7e:33:1b:c4:
                    68:75:bc:77:dc:74:ae:a6:aa:b4:e4:6d:66:a5:00:
                    dd:fb:8a:30:5a:70:12:44:9e:cf:1f:d5:34:b1:78:
                    51:f2:33:58:2b:ca:ed:1f:40:0b:dc:80:ad:1a:60:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/22
                  168.197.56.0/22
                IPv6:
                  2804:299c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264025

    Signature Algorithm: sha256WithRSAEncryption
         17:4b:0b:cb:ec:cd:eb:29:9b:86:e5:d1:6f:dc:42:fe:6c:d2:
         c9:56:3f:ba:6c:70:2d:9e:48:5a:80:62:a6:55:6a:cb:b5:8f:
         dd:27:60:d5:ce:18:8f:dc:5a:76:7e:24:63:66:89:9c:90:c4:
         be:74:8f:42:96:55:20:39:02:0a:2e:17:f5:49:c7:e7:6f:f5:
         da:0c:8e:e0:36:d7:6d:6d:0f:84:d1:f9:28:24:a8:b4:e2:67:
         ed:c7:6c:be:6e:c1:82:e4:b1:a6:7d:12:5d:b6:4d:39:17:42:
         7a:ba:ca:03:86:d9:a0:02:21:1a:43:20:39:52:6e:0a:52:21:
         a8:55:0c:ce:65:ae:bf:41:28:fb:a3:60:62:0f:a8:5d:db:be:
         18:69:86:1f:1e:0a:03:44:5f:e3:fb:76:67:ce:a9:4d:53:a7:
         be:e6:2e:e6:bd:51:ce:31:ff:8e:ba:3d:0e:6a:87:72:cf:3b:
         61:46:50:24:57:0a:95:df:80:3f:85:fc:6e:d0:9b:51:66:77:
         21:90:c0:96:4a:34:7a:87:71:60:cf:18:9d:32:19:4e:d9:ce:
         09:5e:a7:10:3b:64:14:48:ad:e8:49:15:6f:ee:5d:52:5c:f5:
         16:52:16:d8:3a:54:49:2f:9f:52:6e:37:8f:f1:53:fe:1b:e8:
         3a:00:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org