Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.cer
File:                     40B2FBC716FE695B73EE27C9E977630BDF53BDD2.cer (raw, json)
Hash identifier:          l3PKsP8MNdCbnD4NC4V3lNNPDUYAG8lqhclkTTaxYxE=
Subject key identifier:   40:B2:FB:C7:16:FE:69:5B:73:EE:27:C9:E9:77:63:0B:DF:53:BD:D2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CBAD464961CD2FA96453FE48AE84BF8D61904F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Jul 2022 19:12:13 +0000
Certificate not after:    Thu 13 Jul 2023 19:17:13 +0000
Subordinate resources:    AS: 265924
                          IP: 131.196.116.0/22
                          IP: 2804:3ff4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ba:d4:64:96:1c:d2:fa:96:45:3f:e4:8a:e8:4b:f8:d6:19:04:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 19:12:13 2022 GMT
            Not After : Jul 13 19:17:13 2023 GMT
        Subject: CN=40B2FBC716FE695B73EE27C9E977630BDF53BDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:31:cf:1f:67:bd:0b:98:9c:c8:41:89:73:
                    c5:54:6f:94:4f:53:21:7c:3e:3d:d2:d5:04:17:1f:
                    f1:46:80:e0:3e:b6:b5:c9:ba:87:00:2d:1c:f1:20:
                    b2:20:5b:8a:4f:2e:b0:3d:32:78:fc:29:a1:af:5e:
                    51:f7:71:44:da:7f:97:8e:d1:e9:4b:73:aa:3f:96:
                    f5:cc:2f:5c:b8:66:28:9a:c4:fe:a8:7c:d6:b0:c0:
                    05:c6:ba:77:e4:03:56:8c:8d:ff:32:3f:71:d1:e7:
                    00:95:a0:ae:07:cd:bf:d0:af:26:04:84:62:76:3c:
                    cd:20:09:2d:85:7b:5c:73:f8:a7:9d:7e:46:3d:8a:
                    53:15:71:c0:85:d8:03:c2:73:f6:80:0b:8f:11:51:
                    ac:3f:63:73:da:d0:3a:15:34:f1:63:7a:df:cc:b6:
                    c4:37:f9:6e:3b:3e:af:d5:f3:ed:56:d4:6b:00:f2:
                    d4:8c:16:04:e6:8b:01:69:67:48:7b:af:f3:f0:8b:
                    fc:11:d0:1c:48:a3:2b:a6:a3:42:0c:df:72:25:f5:
                    84:87:ec:f3:28:68:d5:dd:05:d3:20:18:40:3d:3c:
                    87:25:4c:96:46:85:c9:a4:4f:a4:f8:07:07:81:bf:
                    11:3b:bb:65:70:8a:87:40:a4:6f:f9:4f:73:03:dc:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:B2:FB:C7:16:FE:69:5B:73:EE:27:C9:E9:77:63:0B:DF:53:BD:D2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H8ywLeDwTHvcxpJwcpef5Ecb61P8oxFMWSNWimk4rthP/0/40B2FBC716FE695B73EE27C9E977630BDF53BDD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.116.0/22
                IPv6:
                  2804:3ff4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265924

    Signature Algorithm: sha256WithRSAEncryption
         1a:ba:fc:48:52:0a:87:ae:bb:ad:30:58:6b:a3:f4:64:c4:b3:
         94:b4:ec:b8:5d:66:0b:e2:a6:f5:91:80:a1:f1:98:a2:6e:73:
         45:a1:44:f7:41:d9:5a:9e:9c:d1:04:94:a8:0e:41:9b:01:09:
         24:af:52:23:98:57:5f:9d:1c:fa:69:3b:d3:3b:5a:73:7b:8c:
         06:56:7b:f0:43:0f:c9:f6:e4:ae:68:9d:d4:49:60:ed:b2:21:
         51:a5:a6:19:26:51:a2:8a:b7:93:bb:9a:1e:1c:8a:f0:52:57:
         a8:61:af:97:5c:c8:bc:28:47:b9:75:95:2e:82:61:58:42:aa:
         42:ca:4a:bc:e9:d2:1b:9f:d5:af:fb:95:7d:60:65:56:51:fd:
         9f:c2:a7:4c:03:6b:6b:d0:d1:3d:eb:2d:94:21:d7:22:8c:e6:
         8c:f4:f4:c6:1c:f9:47:7b:b2:5d:62:f5:0f:8c:09:63:21:91:
         49:0d:45:1a:7c:d2:9d:4a:3e:79:ed:87:88:4b:5f:fd:56:d8:
         da:0e:a9:35:d5:d2:3c:26:95:42:a8:1a:06:ee:45:c9:c4:c9:
         c4:59:b8:40:9e:22:af:2e:6f:e6:18:e9:ca:ee:63:8d:47:ee:
         fd:b4:2d:3c:83:a2:a8:66:87:b2:11:49:e3:c4:39:46:a8:e9:
         66:98:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org