Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer
File:                     B40E0E8364390F2D35C0AFE6006575BE61886B2F.cer (raw, json)
Hash identifier:          CNuGtE428FhvaVY2aPU1qOFbix/JXbtZj0CRBlSxNsI=
Subject key identifier:   B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A798CF836F187572F11AB5A196AD1E4D1DAB4C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Feb 2023 19:38:35 +0000
Certificate not after:    Tue 06 Feb 2024 19:43:35 +0000
Subordinate resources:    AS: 52641
                          IP: 177.125.132.0/22
                          IP: 201.55.204.0/22
                          IP: 2804:191c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:79:8c:f8:36:f1:87:57:2f:11:ab:5a:19:6a:d1:e4:d1:da:b4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 19:38:35 2023 GMT
            Not After : Feb  6 19:43:35 2024 GMT
        Subject: CN=B40E0E8364390F2D35C0AFE6006575BE61886B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:65:cd:00:27:6c:53:42:6c:d9:12:f8:07:
                    0e:3d:b8:4e:43:49:3a:ec:ac:3d:38:d8:54:26:9e:
                    ff:39:bc:bf:5a:ed:bc:40:97:73:d3:ec:77:1d:05:
                    14:af:0f:e4:80:35:f6:ae:0e:5b:99:26:c5:ec:8b:
                    35:c3:d3:82:37:64:53:bc:ba:03:05:50:fc:14:3f:
                    6d:87:33:97:e2:2b:6b:cd:94:96:f9:58:9c:3c:82:
                    b2:6a:6f:6d:d8:0d:8c:43:46:82:30:e0:26:18:f5:
                    94:18:05:cb:89:da:9d:28:fc:52:eb:d5:e7:c9:cc:
                    ae:09:bb:a2:97:4c:98:3a:35:de:5f:8b:bf:b1:d6:
                    32:2a:d8:0f:52:78:e5:7b:32:de:e3:84:f7:44:a9:
                    f2:ab:84:d9:9d:5c:0c:8d:68:dd:99:50:6c:cb:95:
                    d2:b7:21:02:f3:70:42:1a:c3:a2:bc:7f:47:c4:07:
                    3d:51:1a:65:ac:fa:5d:40:e4:f6:01:25:26:ac:47:
                    4e:52:17:21:5b:7d:ae:46:50:25:3c:17:fe:68:b2:
                    fe:f5:4f:ef:2f:85:79:01:73:d8:dc:d2:ea:19:81:
                    ed:3f:a7:11:45:2d:c5:e0:23:35:a5:4b:23:92:1a:
                    5b:5e:9b:df:af:49:03:ca:f6:6c:de:34:25:fa:18:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:0E:0E:83:64:39:0F:2D:35:C0:AF:E6:00:65:75:BE:61:88:6B:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCw6Q9jetNi2v9dF2SWPrV58kXcRh7ot6YKgjjGhNCVh/0/B40E0E8364390F2D35C0AFE6006575BE61886B2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.132.0/22
                  201.55.204.0/22
                IPv6:
                  2804:191c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52641

    Signature Algorithm: sha256WithRSAEncryption
         5a:c2:67:ca:7d:73:5a:d8:f7:24:9f:33:fb:1b:f7:41:c1:16:
         be:4d:82:08:fe:36:ae:7b:cb:48:b9:37:1d:cd:da:2d:d9:50:
         11:44:f3:80:8d:4d:d9:b6:5d:73:8e:78:e6:30:e8:33:42:5a:
         f6:20:34:8a:44:fe:90:85:e1:5c:c8:e5:54:8c:68:9f:f7:a4:
         ff:de:cf:0a:78:a5:b3:2b:48:bb:42:f2:42:a7:f0:8d:f9:ae:
         a0:ba:5c:bc:b0:a1:0d:bb:bd:98:36:cd:9f:b0:39:c9:5e:18:
         dd:f8:fc:c8:84:e1:94:8b:b4:45:38:62:58:c3:7a:a9:61:5b:
         8f:0b:a8:05:c2:d1:d5:a1:6c:18:a1:8e:93:16:6b:5c:46:fc:
         a7:ab:ae:51:18:9c:0e:21:31:47:86:6b:ed:44:38:bf:14:dc:
         0d:d4:f0:64:9c:ad:2b:a9:9f:d5:65:9c:da:1c:b7:56:9c:01:
         40:d4:47:2a:cf:a1:a2:2b:02:d5:e6:9b:85:82:8d:fa:ea:b2:
         51:18:3a:fd:df:5c:e7:23:7b:f4:00:a5:66:6d:8b:3d:d5:ee:
         09:34:be:f2:52:b4:33:a7:a7:53:86:f5:a7:05:9e:9d:47:b8:
         81:0a:89:a6:72:f8:4a:cc:b1:2d:bf:6a:03:65:1b:b0:75:37:
         bd:a5:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org