Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer
File:                     6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.cer (raw, json)
Hash identifier:          pDzL7ilyCi47HHuSRKIsdfWcFJZvHpxdYdfcZnhIf9E=
Subject key identifier:   69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E1CBFB8B9BEC9563606BBBEBADFCA85F2847841
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:10:45 +0000
Certificate not after:    Wed 26 Feb 2025 19:15:45 +0000
Subordinate resources:    AS: 14457
                          AS: 262391
                          IP: 45.235.16.0/22
                          IP: 131.0.76.0/22
                          IP: 168.181.68.0/22
                          IP: 170.254.124.0/22
                          IP: 177.125.220.0/22
                          IP: 177.131.112.0/20
                          IP: 190.89.104.0/22
                          IP: 200.53.16.0/20
                          IP: 2804:8c0::/32
                          IP: 2804:1a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1c:bf:b8:b9:be:c9:56:36:06:bb:be:ba:df:ca:85:f2:84:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 19:10:45 2024 GMT
            Not After : Feb 26 19:15:45 2025 GMT
        Subject: CN=6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:ec:f8:13:7b:2f:13:6f:40:9e:0a:c0:35:
                    7b:8b:48:1d:e8:93:a3:46:62:87:c9:68:96:a5:b3:
                    0c:e7:43:f0:b4:ce:50:d0:b8:8d:00:85:f6:9d:3e:
                    0a:d0:6a:01:9e:a7:f9:b1:bc:37:2b:cf:c1:24:d2:
                    ec:49:09:c4:e5:ee:19:dc:d2:a5:00:b7:3e:62:80:
                    af:ca:12:f0:db:d1:1c:7a:58:78:32:9f:7c:cc:91:
                    06:c2:35:1d:68:98:b2:9e:83:8a:a9:37:6b:b0:b0:
                    6e:ce:1c:69:e1:e9:61:f2:94:f0:22:d3:5a:63:61:
                    10:b0:66:0e:b7:92:29:18:44:be:aa:25:99:7d:27:
                    1b:e1:e3:f9:55:d7:cb:62:1f:3d:77:24:18:65:58:
                    b7:c8:33:d2:0c:6f:c0:a3:5e:0d:c9:a2:fb:78:5a:
                    3d:95:59:cf:1e:4a:22:33:02:f0:55:db:d3:bc:ba:
                    df:83:0a:b7:d8:73:d3:8d:4a:d8:2b:61:0f:93:3b:
                    ce:8c:5c:f8:b4:98:84:8f:64:ec:ac:23:c6:b5:cf:
                    d7:70:4c:70:5a:5f:2a:46:af:5d:06:4b:bc:7e:a3:
                    68:61:85:8c:55:26:92:8a:ae:77:78:08:25:0f:01:
                    ac:a2:82:3c:40:56:cc:34:a2:d0:c6:ae:93:dc:30:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:40:B8:D2:97:29:F5:A3:FB:C8:C0:D0:7D:1E:A5:82:89:4E:3D:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/0/6940B8D29729F5A3FBC8C0D07D1EA582894E3D6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.16.0/22
                  131.0.76.0/22
                  168.181.68.0/22
                  170.254.124.0/22
                  177.125.220.0/22
                  177.131.112.0/20
                  190.89.104.0/22
                  200.53.16.0/20
                IPv6:
                  2804:8c0::/32
                  2804:1a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14457
                  262391

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:68:95:2b:a6:7a:cb:5c:a1:19:40:2f:c3:35:f2:b1:e3:
         cb:af:f3:76:ea:fd:13:7a:e4:a1:04:b6:87:7b:3f:4a:3c:95:
         54:c3:d5:9a:ae:dd:c9:7d:12:47:a3:5a:af:e8:95:5b:0b:78:
         fc:bc:fa:2d:52:9e:5a:f9:d9:78:4a:9f:00:39:c0:a3:2a:86:
         f2:ae:50:6b:77:84:7a:cd:4d:2a:66:1a:a8:c3:dc:af:6a:e8:
         59:86:d1:78:f8:cc:ba:5e:ee:e2:97:1e:60:83:d4:75:4e:6d:
         39:f0:f9:14:9b:c5:8e:a6:9a:f2:3b:5a:eb:9b:64:cb:f6:07:
         41:94:63:38:4c:e8:6c:e1:1b:4c:9c:3f:60:ad:06:62:12:f6:
         09:6a:4e:37:2b:3a:57:74:ed:87:9d:24:d4:3d:9a:fe:73:50:
         5d:35:ab:4b:0c:ce:99:38:85:28:8c:da:e5:25:06:8c:23:c0:
         af:55:fe:1c:9c:00:47:19:98:29:3a:af:12:10:6b:3b:cd:36:
         fa:a5:91:e2:b1:f8:11:91:b5:93:d6:cb:8d:f4:65:75:1c:41:
         a8:6f:08:0b:85:1b:87:06:ca:d5:66:c8:af:c5:bc:9e:33:09:
         dd:35:b8:af:29:28:00:49:3c:cc:1c:72:6f:58:ca:23:f5:a1:
         61:bb:5b:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUfhy/uLm+yVY2Bru+ut/KhfKEeEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMjgxOTEwNDVaFw0yNTAyMjYxOTE1NDVaMDMxMTAvBgNV
BAMTKDY5NDBCOEQyOTcyOUY1QTNGQkM4QzBEMDdEMUVBNTgyODk0RTNENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQOz4E3svE29AngrANXuLSB3o
k6NGYofJaJalswznQ/C0zlDQuI0AhfadPgrQagGep/mxvDcrz8Ek0uxJCcTl7hnc
0qUAtz5igK/KEvDb0Rx6WHgyn3zMkQbCNR1omLKeg4qpN2uwsG7OHGnh6WHylPAi
01pjYRCwZg63kikYRL6qJZl9Jxvh4/lV18tiHz13JBhlWLfIM9IMb8CjXg3Jovt4
Wj2VWc8eSiIzAvBV29O8ut+DCrfYc9ONStgrYQ+TO86MXPi0mISPZOysI8a1z9dw
THBaXypGr10GS7x+o2hhhYxVJpKKrnd4CCUPAayigjxAVsw0otDGrpPcMPlDAgMB
AAGjggNOMIIDSjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRpQLjSlyn1o/vI
wNB9HqWCiU49bjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPgYIKwYB
BQUHAQsEggEwMIIBLDBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFa
b0U0S3VuV1k5LzAvMIGJBggrBgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFa
b0U0S3VuV1k5LzAvNjk0MEI4RDI5NzI5RjVBM0ZCQzhDMEQwN0QxRUE1ODI4OTRF
M0Q2RS5tZnQwPwYIKwYBBQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJv
LmJyL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQCLesQAwQCgwBMAwQCqLVE
AwQCqv58AwQCsX3cAwQEsYNwAwQCvlloAwQEyDUQMBQEAgACMA4DBQAoBAjAAwUA
KAQaZDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgI4eQIDBAD3MA0GCSqGSIb3DQEB
CwUAA4IBAQA9IWiVK6Z6y1yhGUAvwzXysePLr/N26v0TeuShBLaHez9KPJVUw9Wa
rt3JfRJHo1qv6JVbC3j8vPotUp5a+dl4Sp8AOcCjKobyrlBrd4R6zU0qZhqow9yv
auhZhtF4+My6Xu7ilx5gg9R1Tm058PkUm8WOppryO1rrm2TL9gdBlGM4TOhs4RtM
nD9grQZiEvYJak43KzpXdO2HnSTUPZr+c1BdNatLDM6ZOIUojNrlJQaMI8CvVf4c
nABHGZgpOq8SEGs7zTb6pZHisfgRkbWT1suN9GV1HEGobwgLhRuHBsrVZsivxbye
MwndNbivKSgASTzMHHJvWMoj9aFhu1uy
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org