Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.cer
File:                     40D2B6BC49BE13D6C26168179BD8261A93CAEC30.cer (raw, json)
Hash identifier:          BqRysh/Ayr1rnwaqnWdsFtoTAptg3nariZc99ebuzRk=
Subject key identifier:   40:D2:B6:BC:49:BE:13:D6:C2:61:68:17:9B:D8:26:1A:93:CA:EC:30
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D3964966AB0BF5895D820F29D8D7210EB3CF32A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 17:55:50 +0000
Certificate not after:    Mon 10 Mar 2025 18:00:50 +0000
Subordinate resources:    AS: 61707
                          IP: 131.0.180.0/22
                          IP: 2804:1b14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:39:64:96:6a:b0:bf:58:95:d8:20:f2:9d:8d:72:10:eb:3c:f3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 17:55:50 2024 GMT
            Not After : Mar 10 18:00:50 2025 GMT
        Subject: CN=40D2B6BC49BE13D6C26168179BD8261A93CAEC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:bf:37:7e:de:53:75:b2:2f:77:6d:f3:64:
                    4c:84:92:80:9f:d1:ca:e3:23:1e:5e:fa:01:0b:75:
                    a7:75:76:0f:b8:3f:fa:b9:2c:08:6a:88:e8:62:5b:
                    6a:d7:45:b0:05:12:4a:da:a2:48:09:ef:18:d6:c8:
                    4a:b2:d5:eb:97:28:2e:6e:03:1c:24:fb:50:4a:61:
                    95:cd:3e:0d:36:d8:1c:22:ca:4e:51:fc:14:51:3c:
                    4d:e3:e9:ac:02:1d:c8:c4:d6:b8:14:a4:e6:7f:0a:
                    4a:65:25:16:2b:4a:e5:e9:29:5c:5a:79:18:63:17:
                    0c:d2:b1:a2:fb:8e:6b:63:53:46:6a:ea:57:db:16:
                    f3:a1:0b:8b:32:d4:5c:58:c3:83:a0:f6:16:ef:e9:
                    33:13:dc:22:f5:d3:c6:d6:dc:02:43:31:6c:dd:84:
                    7f:8e:b5:3d:8d:0a:a8:c0:cb:42:38:db:c2:9d:6e:
                    78:f1:c9:1f:4c:da:51:a3:3e:df:fe:e0:33:42:e5:
                    f0:6b:21:b2:a5:dd:19:b5:86:0e:c4:b1:10:cb:67:
                    77:0f:e7:51:98:57:4d:b6:e8:5a:90:c3:89:f4:6c:
                    6e:69:1b:5a:12:61:d0:7a:21:9b:70:c6:9c:b8:12:
                    f9:15:0d:23:69:b9:e0:7c:77:b9:1f:46:b9:69:b6:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:D2:B6:BC:49:BE:13:D6:C2:61:68:17:9B:D8:26:1A:93:CA:EC:30
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.180.0/22
                IPv6:
                  2804:1b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61707

    Signature Algorithm: sha256WithRSAEncryption
         1f:c1:91:1e:82:cd:1b:f3:51:ea:d6:25:3a:f6:1e:97:bd:94:
         5c:d5:fc:65:03:60:12:3e:5e:6f:98:de:9a:c7:4d:13:bb:3b:
         ee:67:15:28:28:2b:c0:f6:f2:1c:7f:ff:e7:07:bc:03:ce:8a:
         e3:57:1f:f0:ac:87:fd:a4:97:38:bc:6f:6e:75:d2:27:2e:bd:
         7a:83:cf:88:ce:74:3d:e2:94:01:6a:1d:5e:4a:e7:c1:a3:04:
         93:f1:50:50:4c:5d:ec:fa:9f:2c:a5:23:dd:99:d0:19:78:3b:
         08:e5:ad:a6:d2:69:2c:66:cf:60:49:c0:0a:dc:51:1e:a6:45:
         00:2b:4a:a0:21:4d:cd:39:b0:a8:c6:6f:b1:3c:d0:20:b0:e7:
         74:56:a3:71:0c:cd:99:d0:65:eb:09:45:cf:31:bf:ec:b5:7b:
         a8:ff:46:d3:10:b7:05:e9:d9:42:d1:fb:06:1d:72:29:76:04:
         1b:c5:5f:3c:2e:2f:6d:bd:20:7a:aa:41:c4:4a:3e:0d:4a:df:
         84:ad:28:77:cc:01:72:88:8e:99:bf:07:e3:d5:ef:a9:8c:71:
         56:8f:f0:e3:ca:ae:c6:c2:2d:03:d1:46:c2:4e:91:02:d3:41:
         7b:51:df:03:34:e8:fc:23:76:05:f3:ff:35:0b:6a:e2:e5:54:
         19:2d:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----