Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.cer
File:                     F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.cer (raw, json)
Hash identifier:          Nf4Bhgymgj4Q2+CeP/3nGOu61RuE+Sc4DzCv3Euv8OI=
Subject key identifier:   F4:0A:F1:C5:C6:1B:43:6E:7E:0D:0E:DE:58:C1:33:81:1B:6B:01:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B28040E7A7D8DC2521FCA4E162376D760AB27BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 20:33:36 +0000
Certificate not after:    Mon 30 Sep 2024 20:38:36 +0000
Subordinate resources:    AS: 270274
                          IP: 200.124.84.0/22
                          IP: 2804:6980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:28:04:0e:7a:7d:8d:c2:52:1f:ca:4e:16:23:76:d7:60:ab:27:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  2 20:33:36 2023 GMT
            Not After : Sep 30 20:38:36 2024 GMT
        Subject: CN=F40AF1C5C61B436E7E0D0EDE58C133811B6B0153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:70:b8:ab:1c:b0:21:65:da:e5:08:ea:71:
                    e6:45:d5:58:f5:e1:85:ce:77:d6:9d:65:c6:b8:80:
                    51:b6:dd:9e:ff:a3:e2:8a:1f:e0:2d:cb:22:a8:33:
                    37:be:37:85:81:cb:2b:e0:60:77:9e:1d:44:b5:ab:
                    94:16:da:45:fc:f1:e7:c9:d2:8f:91:63:c9:9a:47:
                    0a:7a:54:16:b9:54:df:c1:8b:c8:7c:ac:67:af:e4:
                    da:d7:30:a7:5e:30:03:4f:b0:b1:33:d1:f5:b1:04:
                    86:7b:4a:56:98:23:47:1d:8e:3f:f1:a8:84:15:59:
                    ce:d9:de:56:f1:57:07:b3:51:9b:4b:c2:46:b9:47:
                    c1:e3:3e:7c:9b:d2:e1:e0:da:41:87:48:fc:91:27:
                    bf:42:61:0c:12:95:69:17:86:1b:36:21:61:fb:3f:
                    a5:6c:14:04:c7:26:df:a8:b6:da:cf:ca:52:05:e6:
                    6f:e6:d4:5b:32:11:d5:73:34:ff:b0:1e:ba:07:2b:
                    25:80:51:6b:dd:90:6b:fd:fe:66:64:54:26:fb:59:
                    b8:df:83:ba:09:77:32:cd:9b:e0:be:cf:87:bb:f7:
                    8b:a0:04:09:6a:e3:36:a1:c9:b2:0e:a5:4c:69:76:
                    80:7c:5a:40:d6:5f:87:63:54:d4:c0:02:c7:ed:54:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:0A:F1:C5:C6:1B:43:6E:7E:0D:0E:DE:58:C1:33:81:1B:6B:01:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23JqkAJDsnA7N6VpdPJFMgTcnpJT6Mfsi1cbSH9Y7EyZ/0/F40AF1C5C61B436E7E0D0EDE58C133811B6B0153.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.84.0/22
                IPv6:
                  2804:6980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270274

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:06:6f:92:19:23:d3:b8:73:e8:e7:4b:b9:21:69:4b:c8:
         a3:bf:5a:09:f8:58:b3:18:09:9b:f6:0a:10:e1:fa:84:5d:03:
         13:a4:d4:73:aa:7a:48:d7:ee:39:0d:70:2d:7f:e6:64:cf:1e:
         ef:27:18:d2:e6:f6:07:3a:ee:c6:6f:05:44:09:b2:7f:42:ad:
         49:30:01:51:1d:b2:5d:b7:b6:49:34:19:82:c7:9e:91:d7:c5:
         83:ec:51:f6:0e:68:0d:ac:f4:a5:cc:1a:fd:87:d8:a4:7e:ab:
         be:56:98:15:2a:e0:3c:bc:a7:c2:24:8e:46:60:ad:62:f5:89:
         18:ba:52:8a:1b:00:e7:16:a2:9a:df:fb:59:11:91:89:a7:21:
         44:e2:7a:5b:ae:e2:1b:6a:44:30:6d:ad:6c:0e:3c:a0:3f:b5:
         3f:06:2c:52:7b:11:ab:98:c7:93:4e:f4:61:8d:ab:c6:29:fb:
         e4:65:51:da:d9:b9:01:f7:38:cf:47:fe:7f:c4:f2:25:4f:84:
         c5:b5:ae:69:f9:c3:f3:08:4d:a2:88:bc:59:6f:79:7e:dd:5f:
         b9:ce:17:38:8a:7d:9a:ab:b2:b2:72:76:e8:51:ec:40:ed:ee:
         b9:12:19:0b:18:08:c7:41:3d:1d:2f:1b:ec:06:90:07:7d:41:
         fc:ff:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org