Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
File:                     40E329E137ACE9C947E72E009F44D35DDC786723.cer (raw, json)
Hash identifier:          TNTCZ1diaryC9dZvQOFRJ5Xc7ePh96dB6dXc4/nFihg=
Subject key identifier:   40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E69BBE86A838EC82DAB80177ED8A8F27499DB60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.mft
caRepository:             rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Jun 2023 18:33:37 +0000
Certificate not after:    Mon 03 Jun 2024 18:38:37 +0000
Subordinate resources:    AS: 264026
                          IP: 143.0.188.0/22
                          IP: 2804:29a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:bb:e8:6a:83:8e:c8:2d:ab:80:17:7e:d8:a8:f2:74:99:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 18:33:37 2023 GMT
            Not After : Jun  3 18:38:37 2024 GMT
        Subject: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:27:53:c0:ab:d5:d2:f9:af:7c:c3:d5:18:
                    a5:2a:79:2c:07:9a:29:ff:28:c5:7c:99:61:54:a5:
                    fe:46:75:d5:9a:07:70:d9:bb:83:15:92:ca:2f:de:
                    08:ca:c9:3b:c2:d5:18:14:fe:ef:3e:2c:92:d7:00:
                    16:e1:4d:05:94:04:78:0b:26:bc:c2:30:1d:bb:53:
                    0e:e7:ec:5e:3d:14:cc:73:de:a7:2b:e6:0f:49:d9:
                    65:7c:c0:55:88:6d:4c:f0:30:17:b5:43:52:2b:60:
                    55:07:c1:87:27:6f:17:e1:7b:a3:7a:fb:b9:48:5e:
                    e9:e1:8c:d0:58:4c:f3:39:c6:03:bc:52:e1:15:6e:
                    cb:2f:cf:e7:37:cd:d4:f2:e7:41:42:4a:18:0f:b9:
                    9c:03:e9:29:76:1c:93:b4:8a:47:2f:58:c2:6f:64:
                    bc:a0:9a:64:44:ee:95:55:56:25:e4:92:bd:55:80:
                    24:09:75:b5:da:7a:3c:bb:2d:56:e4:88:1d:0f:68:
                    d5:0d:a6:c7:bc:95:85:14:d1:e0:ac:90:18:71:46:
                    46:f6:4c:4e:9d:71:3e:ec:03:1b:a6:88:6a:11:93:
                    6f:e0:a7:41:a8:fd:70:63:b5:e6:b5:36:9a:4c:0d:
                    b3:29:13:1b:5a:97:f1:fa:68:9d:52:8a:13:24:a6:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.188.0/22
                IPv6:
                  2804:29a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264026

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:e6:7f:61:df:8b:72:bf:96:eb:99:cd:de:8b:fc:9c:7e:
         85:bb:55:b1:8b:9c:35:9e:d4:7b:72:63:a5:b5:f5:5e:4e:5b:
         21:8e:aa:fd:2e:6e:a4:ee:d3:8d:d3:a6:2c:ad:d2:f3:49:83:
         cc:ea:11:4d:3c:87:6c:49:fb:2b:9d:b1:44:14:18:9c:9c:c9:
         02:2c:eb:72:3f:0a:2d:b3:c6:17:ba:b1:37:52:41:91:7e:35:
         ac:3f:b6:05:68:d8:2c:eb:6a:ea:90:32:0e:8c:0b:87:53:c8:
         f6:f7:d4:9e:a1:61:5c:4e:a8:6d:f0:0d:92:ab:c6:01:a2:de:
         e7:07:2d:30:e0:47:e7:50:99:87:a5:9d:c6:a2:8a:5c:bf:be:
         3d:2e:cf:df:41:d3:4c:df:58:6e:4b:67:13:05:81:8f:84:ba:
         ee:cc:6b:6a:ff:bc:6e:28:0e:07:d6:a4:2b:1e:79:e4:7a:3a:
         27:73:0b:c3:10:ed:f8:12:34:80:2d:c7:1e:e0:ae:c7:00:44:
         8b:1a:77:cf:7f:ba:d1:54:2f:11:ee:ef:20:6e:5f:e1:d7:56:
         25:92:69:1a:b4:66:ad:95:8e:83:7f:74:a2:f5:d4:22:cc:f0:
         0e:d6:fe:be:39:a2:69:d9:f0:3e:68:d7:72:aa:bd:82:ed:f0:
         79:0b:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org