Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.cer
File:                     240CF2F9AAAA2AA84082AE34651C39B575156BFE.cer (raw, json)
Hash identifier:          v0XTbMFDgmR/CbONos3TpFkhUfPr0XJ+bYMVBHx+BIU=
Subject key identifier:   24:0C:F2:F9:AA:AA:2A:A8:40:82:AE:34:65:1C:39:B5:75:15:6B:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F9E0DAB657404E65DEA1936BC649B2F30BDB522
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 27 Aug 2023 12:58:53 +0000
Certificate not after:    Sun 25 Aug 2024 13:03:53 +0000
Subordinate resources:    AS: 265086
                          IP: 170.233.32.0/22
                          IP: 2804:3294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9e:0d:ab:65:74:04:e6:5d:ea:19:36:bc:64:9b:2f:30:bd:b5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 27 12:58:53 2023 GMT
            Not After : Aug 25 13:03:53 2024 GMT
        Subject: CN=240CF2F9AAAA2AA84082AE34651C39B575156BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:2b:80:a7:40:21:ea:78:2a:ad:e2:03:68:
                    b1:9d:0b:dc:b4:e0:f3:23:2d:0b:23:1a:62:c9:24:
                    73:24:86:6b:aa:5e:09:c6:7d:74:46:e3:ef:13:e5:
                    71:f2:41:f9:cb:fa:28:45:4f:40:72:6f:b8:c2:04:
                    31:80:58:3f:97:0b:39:c4:9c:86:28:9c:52:44:ab:
                    18:a5:ef:43:c1:e7:5b:6d:29:de:e3:2b:84:db:76:
                    0b:86:d4:2e:5c:fb:0a:96:a5:cd:04:65:a4:d5:c1:
                    c9:d7:55:b2:63:f7:76:3b:89:7d:b7:ec:84:27:ad:
                    93:26:6c:81:e8:68:82:39:e4:35:9a:33:16:46:ef:
                    3c:57:d6:c6:5f:3e:a0:41:1f:ac:ae:f1:40:51:43:
                    97:cf:4a:5f:f3:29:36:cc:80:95:86:79:43:cb:96:
                    61:91:d7:74:37:f5:65:18:c3:30:6c:af:d9:ce:71:
                    22:e6:02:c9:04:88:d6:11:14:23:39:80:1a:fe:db:
                    c1:8b:08:83:03:5e:e8:a0:11:e5:33:ff:5c:00:3e:
                    9d:a7:1e:ad:dc:be:e1:09:55:b5:c9:aa:b5:5b:3d:
                    53:e9:23:b5:33:74:b2:06:79:7f:b8:a8:c2:14:2f:
                    f7:74:cf:41:b4:e9:c1:b3:60:55:15:66:9e:82:0d:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:0C:F2:F9:AA:AA:2A:A8:40:82:AE:34:65:1C:39:B5:75:15:6B:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/240CF2F9AAAA2AA84082AE34651C39B575156BFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.32.0/22
                IPv6:
                  2804:3294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265086

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:9d:75:38:d1:96:7a:c9:d5:89:1b:14:de:bd:d4:c3:a5:
         fd:84:79:35:6b:69:3a:cd:be:76:a3:dd:57:a7:59:18:ce:e8:
         29:3a:66:48:41:2b:27:90:3b:51:50:11:86:2a:7f:d4:d2:e4:
         b3:40:ec:ed:8a:9d:a2:08:99:04:13:fa:1f:f2:cf:1b:b8:2e:
         ef:4f:dc:24:da:ea:02:ad:27:25:40:af:b2:ba:b1:60:09:73:
         0c:3b:2b:16:3e:3e:5c:53:28:43:99:92:81:0b:bf:bf:26:ce:
         1b:05:56:a3:4b:16:43:30:9b:da:00:92:ec:db:11:4e:27:cc:
         89:73:69:27:14:94:ff:28:51:07:ed:f5:e7:5a:39:64:8b:8b:
         f5:be:f8:70:91:89:b6:8c:6d:3e:6f:74:11:0a:3a:5f:78:79:
         1e:86:68:46:02:af:c8:59:e4:7b:fc:c5:67:50:03:9f:b5:3f:
         eb:81:76:b4:c7:05:59:de:eb:66:91:49:2f:60:90:a7:8a:28:
         58:65:4c:45:aa:31:22:e3:36:39:42:b4:71:c2:66:8f:7f:4a:
         19:db:cc:ed:a3:79:15:6a:8b:3b:4d:26:2d:d3:9d:df:f3:75:
         03:c7:25:38:2f:cb:73:2a:0d:45:8c:12:65:53:88:0a:2d:01:
         b1:1e:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org