Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
File:                     940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer (raw, json)
Hash identifier:          mBq0hyW1xXsSksjpafrL9e1iS/keZU7HHYrzFo7hOHw=
Subject key identifier:   94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2279CE56CC0ECB571980BFF36995F29A4E4443AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 01:03:11 +0000
Certificate not after:    Wed 04 Dec 2024 01:08:11 +0000
Subordinate resources:    AS: 270598
                          IP: 186.219.224.0/22
                          IP: 2804:6e74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:ce:56:cc:0e:cb:57:19:80:bf:f3:69:95:f2:9a:4e:44:43:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 01:03:11 2023 GMT
            Not After : Dec  4 01:08:11 2024 GMT
        Subject: CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:35:3f:06:ae:6a:cf:39:52:66:6b:55:4f:
                    bf:36:cd:d3:de:c2:64:fc:92:cc:2c:ed:53:c8:6d:
                    f3:11:83:31:fb:78:c8:e6:1f:fc:1c:c4:ef:33:7e:
                    82:c4:b6:b3:83:7b:70:bb:c8:17:8a:e5:5e:7a:d2:
                    94:ef:f9:9e:7d:7d:b1:32:86:60:47:62:22:60:be:
                    76:fe:9a:e3:31:cd:1a:9e:57:8d:b6:b9:ba:91:a1:
                    41:0d:5f:74:ff:dc:ea:22:10:58:f3:4c:3d:e6:9f:
                    9c:7c:a4:1a:0f:d9:61:8a:01:91:a9:08:95:69:d9:
                    e2:6b:8e:e4:ab:9c:68:a3:36:3a:5c:32:30:60:80:
                    01:8f:ad:09:c6:f2:3a:ff:50:98:70:bc:d4:f0:cd:
                    46:52:28:9a:b2:6a:69:5c:42:a0:b2:4b:07:65:9c:
                    f2:df:e1:f0:cc:35:4b:64:99:bc:47:6a:2f:17:21:
                    58:06:f7:de:d8:79:9e:52:9c:e9:b7:53:8f:25:f3:
                    26:8b:ed:bf:3b:97:75:65:24:e7:c3:40:a8:99:6a:
                    5b:e2:7c:8d:80:bd:cf:5e:09:78:0f:71:37:84:3e:
                    8f:69:4f:2f:eb:d4:32:60:9f:35:55:59:19:38:b9:
                    b9:b8:f9:9d:45:7d:e4:89:93:50:76:a4:dd:4e:9f:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.224.0/22
                IPv6:
                  2804:6e74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270598

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:05:2f:8a:de:3b:65:e5:ec:b7:ff:78:b2:61:91:d7:30:
         33:71:9f:0d:3d:83:19:f4:e1:ef:35:8b:0f:e6:c6:3a:d1:ea:
         c4:41:a8:5a:3a:b6:01:6a:25:b2:2b:0d:20:cf:9c:0c:d4:91:
         88:a4:74:9d:fc:b5:f9:90:de:e7:56:64:16:2b:98:6e:8b:c2:
         84:88:c4:16:e0:a8:cb:5e:f5:8c:c1:3d:d0:ac:f8:bd:7c:8b:
         1b:6a:31:1b:e6:d4:c3:20:ff:20:5a:3c:56:2e:1e:8f:c3:55:
         fc:0c:b7:39:aa:a4:d3:f2:63:d1:83:89:ff:57:55:9d:46:89:
         28:81:66:90:ae:15:6e:d6:ed:f0:b6:5b:6c:c0:02:6c:fe:da:
         9a:fa:0f:dd:7e:dc:d5:65:6e:21:18:42:43:16:16:f2:7d:b2:
         96:4b:a7:51:69:be:bd:20:65:a8:3b:24:66:ec:de:58:c9:92:
         e2:fb:e2:3d:29:75:c6:10:c5:0e:1c:be:06:5b:8f:0b:5b:96:
         78:fb:9f:de:de:25:7a:dd:e4:a4:c0:a8:7b:ed:8b:a8:bc:7f:
         ef:1e:9b:32:b3:f4:85:7f:d4:00:10:74:a3:fb:b8:88:dd:3b:
         65:61:4b:6c:bd:40:69:fc:fa:6c:e4:66:04:48:23:e5:cf:25:
         f7:55:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org