Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
File:                     40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer (raw, json)
Hash identifier:          3frUzEtFs+snHZV0D10ONVdpC4yM+j2h36n934WeFN4=
Subject key identifier:   40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7BC0D41B2BCAC6D5CCD0CCEE02FE3F8BED6BF262
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Oct 2023 11:15:08 +0000
Certificate not after:    Mon 14 Oct 2024 11:20:08 +0000
Subordinate resources:    AS: 28283
                          IP: 177.72.224.0/21
                          IP: 187.0.0.0/20
                          IP: 187.103.224.0/19
                          IP: 189.14.224.0/20
                          IP: 200.240.224.0/19
                          IP: 201.148.244.0/22
                          IP: 2804:378::/32
                          IP: 2804:624::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:d4:1b:2b:ca:c6:d5:cc:d0:cc:ee:02:fe:3f:8b:ed:6b:f2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 11:15:08 2023 GMT
            Not After : Oct 14 11:20:08 2024 GMT
        Subject: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:e5:a0:98:22:ce:15:c7:fd:0b:e6:c3:5f:
                    95:53:20:cf:73:12:00:3a:24:8d:0b:ed:02:81:98:
                    fa:22:65:0f:a9:ee:bb:cb:cf:2f:f0:3e:4e:19:55:
                    59:6d:df:30:74:8f:d9:69:86:6a:f8:10:10:c4:61:
                    93:4e:a6:1f:de:8e:96:5f:74:9c:a7:aa:64:88:30:
                    40:20:4b:d1:f1:6a:fc:87:cc:40:98:4f:69:9b:ba:
                    2e:34:71:cd:05:b1:2f:29:37:4d:53:bb:2b:83:87:
                    15:62:eb:1e:32:7f:1f:c7:0b:da:ef:59:50:7b:95:
                    b7:6f:6e:ac:c0:c6:86:aa:68:da:04:7d:f1:5c:75:
                    90:71:ba:25:bf:b9:b4:18:5a:86:b9:37:21:75:ae:
                    28:c7:ba:89:e4:9c:35:de:6d:c8:b3:44:98:d4:85:
                    6d:12:c4:d6:79:a4:90:8b:31:db:da:73:d2:bd:0c:
                    3c:bf:ab:13:ee:96:ea:d1:e4:24:03:da:b0:0f:70:
                    0e:95:61:36:c2:77:9a:82:32:5e:3b:7c:bc:9e:19:
                    34:25:c3:22:05:db:6f:66:f5:5f:27:56:ea:4a:9c:
                    45:7b:e7:f6:94:4c:1b:8e:fa:c5:14:f5:81:89:7e:
                    4f:8a:3c:dd:c3:e4:b6:d3:4c:13:54:7e:e6:e9:57:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.224.0/21
                  187.0.0.0/20
                  187.103.224.0/19
                  189.14.224.0/20
                  200.240.224.0/19
                  201.148.244.0/22
                IPv6:
                  2804:378::/32
                  2804:624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28283

    Signature Algorithm: sha256WithRSAEncryption
         08:20:4a:f5:08:98:9d:0d:b5:0d:ab:e0:46:da:8e:aa:82:b8:
         f9:6a:fd:cc:52:62:63:69:0b:3f:2f:b5:28:8e:9c:43:b6:31:
         d4:80:8b:02:96:2e:3e:d6:79:25:22:98:90:e2:b5:85:80:0d:
         8e:d3:a3:c3:e1:fd:4a:ea:db:3f:6d:5f:98:cf:37:13:f3:cc:
         4c:3b:d3:5e:15:1f:12:5b:a2:87:41:8c:ca:eb:c0:ee:88:45:
         6e:6e:e3:5c:1e:b0:66:37:37:2b:50:43:98:74:b7:b9:2c:d5:
         7d:ce:a2:ad:45:d2:da:da:0d:69:9b:6d:96:7a:f5:7d:ff:b9:
         0c:4c:71:9e:30:a0:8b:38:1c:14:fb:f1:ab:4c:9b:66:5c:9b:
         e0:b9:24:5f:1b:37:45:0f:ba:19:27:7d:dc:1f:26:d2:99:38:
         92:af:c2:ab:2a:9b:84:79:62:1d:d5:35:5f:b2:ba:45:f5:de:
         d0:c5:9c:d1:36:2b:28:d3:dc:87:2c:18:00:f7:08:3b:cd:b6:
         94:4e:cf:59:ab:5f:6e:b2:20:78:4c:73:d9:e4:90:5b:99:89:
         07:e1:03:39:15:4b:fe:9d:f3:49:40:cd:66:fd:5b:5f:8f:39:
         70:90:05:87:fc:47:8c:0b:9a:ee:fc:c0:cb:57:38:fa:8d:73:
         1a:1c:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org