Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40209EB56DBE9B90721379291AA6F10A592354FB.cer
File:                     40209EB56DBE9B90721379291AA6F10A592354FB.cer (raw, json)
Hash identifier:          l8NVZhVv5cIel6oYDKzx26lC+phDIGtt1wL9JISU7k4=
Subject key identifier:   40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       73EE5EC6525FC20F9E3030F10EE47A20074F64BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 16:26:33 +0000
Certificate not after:    Wed 02 Apr 2025 16:31:33 +0000
Subordinate resources:    AS: 262417
                          IP: 168.90.28.0/22
                          IP: 177.37.64.0/19
                          IP: 177.129.200.0/22
                          IP: 179.43.4.0/22
                          IP: 186.219.56.0/22
                          IP: 2804:e24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ee:5e:c6:52:5f:c2:0f:9e:30:30:f1:0e:e4:7a:20:07:4f:64:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 16:26:33 2024 GMT
            Not After : Apr  2 16:31:33 2025 GMT
        Subject: CN=40209EB56DBE9B90721379291AA6F10A592354FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:3f:92:10:48:58:29:f7:24:ed:55:b9:ef:
                    e6:26:31:b2:f4:de:b6:e4:ef:fc:11:33:79:38:35:
                    47:cb:4b:78:c8:48:db:68:0b:24:25:bf:10:fa:4d:
                    55:c5:f4:57:fe:92:8c:2b:7b:2f:5d:59:85:9a:79:
                    04:ad:e6:0f:37:6e:5c:92:14:33:be:87:f6:f5:5c:
                    49:a8:8e:3a:35:d6:a6:74:35:3e:ef:2f:f0:0a:0b:
                    5b:24:79:6f:94:db:28:e1:d0:64:ee:be:b4:67:cd:
                    4d:b6:42:91:1e:ab:b0:1c:72:e5:c8:e8:ff:ac:5b:
                    71:b0:0f:6d:a7:ec:74:75:3a:6b:4d:e0:59:68:0a:
                    9f:f3:8a:32:04:02:f7:40:30:4a:56:14:ab:2a:33:
                    1d:1a:95:6b:21:cf:5a:da:6a:8b:2a:94:17:62:3b:
                    51:54:b0:0b:ff:d0:cd:93:b5:ab:64:4c:9e:0b:0c:
                    14:f7:32:4f:b0:8d:33:a2:39:12:63:07:44:0f:8e:
                    a9:2e:19:ba:aa:f1:d4:2d:fe:dc:06:20:6b:2d:38:
                    2d:20:d7:dd:cd:19:ac:54:f1:03:62:af:a4:d1:8b:
                    65:a0:e9:2c:ed:4b:43:b3:8c:e9:26:0d:f4:20:cd:
                    0b:1d:d8:ab:f3:d1:e5:c6:63:6d:bc:88:13:ac:a0:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:20:9E:B5:6D:BE:9B:90:72:13:79:29:1A:A6:F1:0A:59:23:54:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/40209EB56DBE9B90721379291AA6F10A592354FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.28.0/22
                  177.37.64.0/19
                  177.129.200.0/22
                  179.43.4.0/22
                  186.219.56.0/22
                IPv6:
                  2804:e24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262417

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:fb:bc:00:04:4e:38:14:42:75:39:86:c3:1e:91:75:b5:
         4b:a9:a6:42:43:a0:50:dd:7a:97:54:96:04:95:01:2f:f0:75:
         1e:34:6d:04:90:e7:f4:79:4a:19:5c:29:89:e1:d5:04:5d:11:
         4e:a6:2c:a1:67:96:17:50:28:59:46:8a:13:e5:5b:48:d7:ed:
         97:5f:84:40:ab:d0:42:67:e3:85:94:a0:1c:5c:64:e1:4c:61:
         f1:2c:c6:45:7b:9f:72:60:7f:34:3e:22:95:ab:9e:0b:d7:4f:
         6c:80:99:79:14:8d:7c:44:5c:39:45:89:bf:09:dd:b0:f2:6b:
         81:00:97:74:5a:92:db:44:13:4a:31:2c:ad:9b:2d:44:72:3e:
         27:0d:50:b2:08:84:c8:1f:c5:ae:58:29:19:b8:e6:ad:52:2f:
         bf:b2:79:95:ea:99:ff:ab:af:e7:ed:7f:e2:e0:8f:17:04:6f:
         d9:0d:78:c8:51:59:7d:d1:14:d1:2b:35:08:fe:99:a9:24:25:
         6a:5c:d1:5c:22:7a:f3:72:bc:72:35:e3:c8:eb:a4:09:8e:f1:
         a2:7c:5a:63:ff:bc:7d:1a:59:a6:f8:87:b3:24:9f:8a:01:c9:
         d0:44:76:64:1f:38:47:2a:02:68:b0:96:b6:d2:3e:80:b6:51:
         8a:27:a8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org