Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2040C1272A1F5F77630022CCB689577F699AE41B.cer
File:                     2040C1272A1F5F77630022CCB689577F699AE41B.cer (raw, json)
Hash identifier:          7URHt2mq0uwL2A/Hsu50+HDnTcqO3Dz0YgJx06gVcCg=
Subject key identifier:   20:40:C1:27:2A:1F:5F:77:63:00:22:CC:B6:89:57:7F:69:9A:E4:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6032EABBA8DCEB4A54C6B0582D51300C82BDC7B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2040C1272A1F5F77630022CCB689577F699AE41B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 May 2022 17:59:00 +0000
Certificate not after:    Fri 05 May 2023 18:04:00 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:32:ea:bb:a8:dc:eb:4a:54:c6:b0:58:2d:51:30:0c:82:bd:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  6 17:59:00 2022 GMT
            Not After : May  5 18:04:00 2023 GMT
        Subject: CN=2040C1272A1F5F77630022CCB689577F699AE41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:ef:dd:cb:0e:d6:ad:5d:a9:67:7c:f2:61:
                    a9:db:3b:d6:e9:88:70:a3:84:b9:b9:0b:5b:6a:7b:
                    4f:34:7b:1a:d7:82:76:82:6d:a5:40:70:b6:79:47:
                    02:c3:71:db:54:5e:ae:17:2e:20:f1:77:1d:8d:26:
                    37:e2:6b:10:37:1f:d8:63:33:2a:0c:db:95:3e:38:
                    43:e1:6a:23:50:41:3f:76:d0:0f:70:9c:32:96:cf:
                    98:73:2e:a2:9d:7a:66:c9:11:f0:7d:77:a2:46:02:
                    81:49:f2:01:ce:68:d7:5b:1c:4b:28:80:8d:c4:36:
                    65:92:90:b4:9d:79:48:00:dc:a4:fa:9a:43:78:87:
                    28:c6:ca:36:f4:13:24:55:99:6c:7d:81:e3:4d:eb:
                    3f:5b:eb:1b:61:e6:de:09:77:0c:b7:83:73:15:bb:
                    fb:c1:12:9f:c1:65:0e:f7:b5:0b:3b:c1:6a:6e:32:
                    88:e5:f9:72:f8:ef:8a:36:2f:46:9f:4c:69:1f:d0:
                    c5:4b:88:11:0a:2e:c5:95:4b:6e:5d:6c:e1:b9:37:
                    35:03:76:05:88:6f:82:76:91:54:d4:bf:ec:84:a1:
                    85:ba:b5:a8:e7:56:f6:df:c8:01:dc:01:f2:b6:aa:
                    cc:8f:31:af:91:f0:ff:ec:63:7e:c4:97:1d:1e:c7:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:40:C1:27:2A:1F:5F:77:63:00:22:CC:B6:89:57:7F:69:9A:E4:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/2040C1272A1F5F77630022CCB689577F699AE41B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         a4:1a:65:89:8c:f8:a4:b3:8f:7e:0e:c7:ac:3b:2b:4f:ed:64:
         84:65:b6:e1:9b:1a:0d:93:54:aa:0b:bd:73:a9:c1:0d:1e:89:
         69:fa:cc:3b:b1:06:7d:24:4b:d9:ac:74:6a:45:f2:6d:89:0d:
         c7:3b:ac:d2:f2:f8:0b:37:e1:95:1c:13:42:8c:f7:4f:67:0e:
         38:b8:d8:21:c6:ce:01:85:0f:8c:42:b5:25:9a:9d:45:1b:1a:
         8b:2e:5d:cc:3c:4e:a7:70:37:e7:ca:df:67:26:5a:8a:28:54:
         32:b7:3f:6d:4a:4e:82:42:1c:8d:17:52:41:74:65:29:b5:05:
         01:6a:56:e3:63:1a:77:c2:3e:70:33:f4:d3:ed:61:28:09:e8:
         1e:43:7f:25:d7:14:7e:bd:ba:de:bc:6d:cd:39:e6:79:fc:cf:
         f6:7a:36:58:26:47:c8:5f:90:68:62:aa:7f:e8:2b:e9:43:c8:
         7d:1a:43:57:9f:f4:72:09:91:11:f9:75:99:17:ef:fe:7a:7b:
         ba:30:52:9a:da:58:0f:23:75:1e:61:b0:f4:a2:53:33:28:f0:
         1f:da:8a:d5:22:b3:1b:24:87:73:f5:f3:87:d1:41:7f:38:01:
         b7:84:e5:20:cd:67:e4:a4:90:ca:7f:6d:db:11:9b:6b:14:d1:
         86:05:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org