Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A127EAF9B9E0F649F23AF465A7D2C071715F5903.cer
File:                     A127EAF9B9E0F649F23AF465A7D2C071715F5903.cer (raw, json)
Hash identifier:          p90hA4ZTS+qo0sWAjuRl+CcNUu0bOIp1xxjlButwj3Y=
Subject key identifier:   A1:27:EA:F9:B9:E0:F6:49:F2:3A:F4:65:A7:D2:C0:71:71:5F:59:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AB59714B658C44AA37007122A8511AC44F46F80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/A127EAF9B9E0F649F23AF465A7D2C071715F5903.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 18:55:23 +0000
Certificate not after:    Mon 07 Apr 2025 19:00:23 +0000
Subordinate resources:    AS: 61876
                          IP: 201.150.124.0/22
                          IP: 2804:1ab0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b5:97:14:b6:58:c4:4a:a3:70:07:12:2a:85:11:ac:44:f4:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 18:55:23 2024 GMT
            Not After : Apr  7 19:00:23 2025 GMT
        Subject: CN=A127EAF9B9E0F649F23AF465A7D2C071715F5903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:20:bc:94:04:b4:06:4b:6c:23:ed:a3:0d:
                    de:81:a1:a4:58:40:8d:02:17:1f:63:36:57:1b:e4:
                    bd:12:96:91:51:cf:f2:9f:2e:2f:a0:ca:4c:56:36:
                    00:5a:2f:29:e2:2e:bb:34:af:fb:01:f7:42:c1:81:
                    d7:81:ff:a1:de:a4:1f:b8:4d:24:ce:21:6b:be:f0:
                    66:53:78:c4:ed:72:ac:a3:eb:0c:4b:56:fc:84:c7:
                    41:13:64:07:d5:0a:73:62:cc:27:bc:75:86:ac:dc:
                    18:91:2d:33:b6:78:ad:61:40:7f:55:2e:49:68:0f:
                    d9:9e:42:7f:b9:78:2e:ad:f7:25:a5:76:2d:6b:bc:
                    c8:27:77:7f:da:57:02:d1:41:06:ba:ee:11:61:0b:
                    55:c6:ff:d5:a4:15:8f:40:66:11:86:2c:0a:18:57:
                    8d:3a:06:d0:5b:1e:70:64:88:6a:51:09:52:3d:cc:
                    50:44:32:42:3e:dd:69:54:2b:c1:8e:75:7d:79:36:
                    a2:3a:20:3a:b9:cc:96:f8:a6:33:f9:6d:ef:1e:4f:
                    c4:ad:54:2e:97:8e:ee:f3:97:01:6a:4e:7a:46:4c:
                    ec:54:90:c3:fc:06:2e:41:98:ad:7c:63:a4:d5:23:
                    7d:3f:1f:bf:ed:86:5f:a4:5a:23:e8:89:a7:8b:54:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:27:EA:F9:B9:E0:F6:49:F2:3A:F4:65:A7:D2:C0:71:71:5F:59:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/A127EAF9B9E0F649F23AF465A7D2C071715F5903.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/22
                IPv6:
                  2804:1ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61876

    Signature Algorithm: sha256WithRSAEncryption
         1a:2e:f6:02:93:9b:70:5b:56:d8:af:bb:f8:9e:f0:fb:dc:e0:
         4f:ea:18:48:56:6f:5e:46:6b:f3:e0:c0:e2:d8:36:51:e2:d3:
         de:01:92:fa:fc:8b:12:aa:6c:c7:60:5b:dc:f3:9b:b2:8f:91:
         e2:78:3d:51:04:68:1b:5f:af:ef:78:4c:e8:43:08:ca:45:d0:
         37:4b:e2:24:40:16:d3:d8:b4:d6:ff:c4:89:27:d4:7a:cc:0c:
         d9:ec:f9:a6:6d:9a:7e:08:5b:23:45:55:dd:e2:2e:f9:41:62:
         39:8c:af:8a:3a:99:1d:c3:fe:b7:00:9f:e6:b9:d4:6e:52:65:
         00:81:46:ee:2a:99:b4:e4:40:db:de:c7:0f:01:60:15:ca:0e:
         a4:d5:db:17:c5:02:1b:39:70:52:06:ff:15:ab:0f:f5:f9:24:
         61:b9:d2:0a:94:5a:d7:09:77:56:1d:04:89:27:13:44:13:33:
         3d:a8:05:68:7e:9e:f6:29:02:d3:04:70:b6:c8:4a:83:11:46:
         55:09:e7:2e:4a:89:0a:3d:99:51:98:86:84:cb:f0:a9:22:7c:
         1d:f6:05:1b:42:e2:58:c9:04:bf:81:ca:aa:67:0b:a7:83:75:
         d0:30:b1:99:6c:64:e1:d0:39:26:68:1a:4f:53:85:69:70:ea:
         90:da:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org