Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C40D408A45A26CDB421AC19E23D4A41AF37D3119.cer
File:                     C40D408A45A26CDB421AC19E23D4A41AF37D3119.cer (raw, json)
Hash identifier:          PPRPiSqL+VYg+SOL1AcRxpgRFfh4fAUHzWNlzq0F600=
Subject key identifier:   C4:0D:40:8A:45:A2:6C:DB:42:1A:C1:9E:23:D4:A4:1A:F3:7D:31:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       614AA4EA115EA8AFBABAF5E9883F15A5E01B17C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DW2fkT3wSwwXe5pi3dE5Fmkx7PnQuRGE128bLiiwBg1X/0/C40D408A45A26CDB421AC19E23D4A41AF37D3119.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DW2fkT3wSwwXe5pi3dE5Fmkx7PnQuRGE128bLiiwBg1X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 20:21:27 +0000
Certificate not after:    Thu 30 May 2024 20:26:27 +0000
Subordinate resources:    AS: 263274
                          IP: 179.108.240.0/21
                          IP: 2804:1630::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4a:a4:ea:11:5e:a8:af:ba:ba:f5:e9:88:3f:15:a5:e0:1b:17:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 20:21:27 2023 GMT
            Not After : May 30 20:26:27 2024 GMT
        Subject: CN=C40D408A45A26CDB421AC19E23D4A41AF37D3119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:f2:45:52:0e:87:64:39:59:5d:3f:8d:ee:
                    9b:88:e9:5e:60:ed:8b:c0:a4:3c:39:b0:9e:0b:37:
                    08:27:44:90:dd:52:27:ea:8d:a0:80:a2:cb:0e:c3:
                    61:dd:4d:00:2f:bf:9c:b6:2f:2e:34:f0:c4:24:c0:
                    2f:a2:34:7b:8a:28:9f:a4:0d:ce:f3:88:e8:34:08:
                    65:61:57:fe:03:2f:0e:e1:d0:cf:be:13:60:43:e2:
                    1a:4b:94:4d:7f:25:be:90:ef:bc:88:ee:84:fa:99:
                    09:1f:79:c7:ec:2d:95:99:b7:ce:f5:77:aa:77:89:
                    65:4e:e1:03:33:46:66:dc:da:de:b6:aa:d6:f3:92:
                    b3:61:fd:f0:22:5e:6f:7c:f1:1f:b7:10:98:3f:f3:
                    89:f6:bb:1b:bc:e1:00:e7:9d:05:55:c1:8f:7e:40:
                    ef:71:57:49:40:c4:96:b3:77:43:d0:52:38:38:15:
                    31:26:70:ca:f4:84:a7:0e:6b:dc:d9:fb:6a:c4:4d:
                    42:e2:d8:ad:86:1a:e4:af:b4:66:e7:9e:b7:94:3d:
                    14:ad:27:3b:42:f6:cd:43:e4:d9:92:49:da:02:a1:
                    3c:14:d3:f1:b5:6e:80:3e:66:92:0c:df:ed:7b:76:
                    a3:2d:7c:2b:ef:a2:cf:56:28:5f:4b:4c:d8:b9:19:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:0D:40:8A:45:A2:6C:DB:42:1A:C1:9E:23:D4:A4:1A:F3:7D:31:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DW2fkT3wSwwXe5pi3dE5Fmkx7PnQuRGE128bLiiwBg1X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DW2fkT3wSwwXe5pi3dE5Fmkx7PnQuRGE128bLiiwBg1X/0/C40D408A45A26CDB421AC19E23D4A41AF37D3119.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.240.0/21
                IPv6:
                  2804:1630::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263274

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:3c:2f:27:1a:b4:f6:6c:a5:89:f1:f6:ec:a1:83:24:ec:
         46:09:89:a7:69:a7:fd:e4:72:a2:c9:12:6e:10:7d:4c:5a:20:
         90:dd:e1:65:a7:57:8d:f0:c9:1e:73:50:71:20:1a:de:50:50:
         dd:5c:bd:59:01:6e:65:f3:0d:fd:f8:2f:9a:58:b0:ea:d4:fa:
         74:10:85:d1:9e:46:15:df:f4:04:f3:1e:8d:a4:59:4e:c4:df:
         f0:19:2d:ed:3c:bb:c9:fa:a1:1e:89:da:23:e9:38:ba:6f:c9:
         c8:21:bd:d1:3a:43:20:0d:42:97:29:97:3a:28:23:b2:33:e4:
         43:5a:9a:66:24:05:ba:80:24:b2:79:b5:cb:f6:5f:3c:d4:34:
         a0:ce:a1:01:5f:fe:0e:d4:07:9d:98:e0:ba:8a:d8:a3:93:66:
         66:21:c4:08:78:5d:e5:e0:f6:c1:40:89:04:aa:72:c3:0d:bf:
         44:ea:c1:8f:74:8f:8e:59:2d:0a:c6:69:5f:d2:5d:09:b3:66:
         f4:86:1a:3e:9e:27:f8:2a:85:eb:64:75:95:97:31:e4:f0:dd:
         b4:c4:7f:86:eb:9d:0e:f9:75:0e:e3:bd:d9:57:bf:b5:1f:d0:
         2f:e3:10:a5:57:03:b6:90:4b:8c:c0:c2:a6:11:4d:dc:b1:1a:
         b6:0b:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org