Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
File:                     40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer (raw, json)
Hash identifier:          09P/oUl+yTvsR1/d3Pjd7RJs3wZqJvmJMPayFmaAnJY=
Subject key identifier:   40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FE07FDE4A61FE1DE611A112F3996C0D0E61F23A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 03:05:55 +0000
Certificate not after:    Tue 08 Oct 2024 03:10:55 +0000
Subordinate resources:    AS: 263924
                          AS: 264491
                          IP: 131.255.176.0/22
                          IP: 138.219.52.0/22
                          IP: 168.232.172.0/22
                          IP: 170.247.252.0/22
                          IP: 2804:2074::/32
                          IP: 2804:27d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e0:7f:de:4a:61:fe:1d:e6:11:a1:12:f3:99:6c:0d:0e:61:f2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 03:05:55 2023 GMT
            Not After : Oct  8 03:10:55 2024 GMT
        Subject: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:76:52:94:9d:b0:84:da:ac:67:8a:23:3c:f0:
                    a0:8b:c1:f2:f9:86:a2:26:4b:52:88:06:b3:1c:4d:
                    4b:6a:c5:18:3f:4c:3c:26:1c:93:63:5c:6d:91:32:
                    b2:e5:d4:8f:6c:df:82:5c:9d:48:7d:a6:63:b2:f3:
                    aa:d1:87:eb:e8:06:48:7c:d6:71:6b:dc:d0:d9:57:
                    da:b1:ab:f3:a0:cc:50:ec:fd:ad:9a:74:5f:56:9e:
                    15:1c:59:a5:23:6a:27:5f:39:93:72:88:2c:31:5c:
                    a2:e7:33:5d:83:64:80:bf:e0:c0:82:71:15:30:61:
                    a5:09:4f:61:c7:42:49:a3:39:2d:f7:64:11:25:7e:
                    1c:40:7d:fb:a6:c9:76:29:b0:86:92:a5:08:9a:b1:
                    9b:06:93:aa:a7:1f:f3:14:86:12:d5:d9:f8:02:4f:
                    41:5b:e7:22:62:2f:9a:52:56:e8:d1:84:3a:0a:07:
                    73:8a:93:ae:c6:e7:d5:b0:34:6c:2b:70:5c:c5:23:
                    ad:82:4f:f9:a1:33:b2:94:84:32:a8:1a:55:08:29:
                    ae:54:e7:f8:df:5b:3b:21:ea:4e:ad:6c:85:ad:2b:
                    91:61:48:8b:8e:99:42:d9:f5:9b:9b:f8:93:7e:97:
                    d5:64:48:c8:4a:92:fe:af:d6:fc:b4:52:7f:0c:15:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/22
                  138.219.52.0/22
                  168.232.172.0/22
                  170.247.252.0/22
                IPv6:
                  2804:2074::/32
                  2804:27d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263924
                  264491

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:ef:4f:ea:b3:54:1d:20:c6:c9:af:73:de:02:67:fb:65:
         0e:9f:e5:d2:da:5b:c4:08:3e:2d:27:3b:df:1d:8c:c5:7e:69:
         5a:8d:d8:78:eb:01:25:d2:7c:ae:0a:2a:dd:1b:3f:c8:4e:f5:
         08:9d:03:58:87:7d:7a:67:12:06:a5:da:b3:65:32:e8:bf:11:
         7f:5a:88:5d:2b:5b:6a:5c:8d:11:bc:1f:5f:da:bd:13:25:56:
         5d:c0:1e:ae:5b:60:6f:77:48:74:93:79:98:41:98:c7:34:02:
         ae:0a:94:e3:8a:6e:43:1b:92:ea:38:87:ca:da:fb:16:7a:ba:
         4f:37:44:9a:fe:62:e5:d4:e3:4b:fa:b2:d1:b8:e2:a8:f7:34:
         7b:87:5c:0c:d5:24:99:d3:b7:b1:1d:ca:ff:ae:77:f2:4e:6f:
         00:f5:7e:88:4d:74:d5:fc:f0:af:49:54:92:2d:cc:80:63:a2:
         50:52:62:74:19:d7:58:53:43:da:a1:cd:15:81:d4:e6:85:65:
         6d:a1:37:2c:d0:f3:c2:ef:e6:8d:10:2d:8c:3c:c3:d6:ba:fd:
         e2:78:62:d1:37:8f:43:99:ac:2d:7f:62:d4:d8:35:2e:66:94:
         ba:9d:78:0f:5a:81:7c:0d:d9:39:79:ce:04:4c:ee:c3:fd:91:
         60:89:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org