Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F40E8B511F61E426EDC54B9DBCF1DF89402429E5.cer
File:                     F40E8B511F61E426EDC54B9DBCF1DF89402429E5.cer (raw, json)
Hash identifier:          SENHXtN5BNZZ3cF4KG1LDPAS3NCDLohEwjH8Lq9O+eU=
Subject key identifier:   F4:0E:8B:51:1F:61:E4:26:ED:C5:4B:9D:BC:F1:DF:89:40:24:29:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68B4D76E0EF8BB0DD0687392BDC0A23CAA04CFF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/F40E8B511F61E426EDC54B9DBCF1DF89402429E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 18:16:05 +0000
Certificate not after:    Mon 10 Mar 2025 18:21:05 +0000
Subordinate resources:    AS: 263541
                          IP: 191.5.164.0/22
                          IP: 191.241.20.0/22
                          IP: 2804:1398::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:d7:6e:0e:f8:bb:0d:d0:68:73:92:bd:c0:a2:3c:aa:04:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 18:16:05 2024 GMT
            Not After : Mar 10 18:21:05 2025 GMT
        Subject: CN=F40E8B511F61E426EDC54B9DBCF1DF89402429E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:17:05:df:8d:94:1b:11:52:96:46:47:85:
                    e3:a5:01:c4:99:ee:4e:e3:1f:60:db:85:d6:7c:fb:
                    01:f6:e2:1b:64:95:fe:b5:eb:fe:3e:1c:16:1b:53:
                    b2:b0:12:fb:c1:cb:6d:7b:d1:26:c0:75:a0:e8:fd:
                    1d:77:b9:dc:a7:78:77:1c:ef:1b:51:43:c8:c9:07:
                    49:19:8d:3a:52:cd:4c:d8:3f:78:39:43:e2:28:95:
                    b1:2a:14:38:7d:33:d4:2c:af:b2:6d:d6:b5:28:a9:
                    c3:a6:d6:fe:81:d3:db:38:79:b5:d6:35:2c:4d:ff:
                    3c:86:7a:e1:29:40:9e:e9:4d:bf:28:2d:8d:66:f5:
                    38:86:4a:00:3d:ae:c5:21:5a:74:13:13:55:e7:bd:
                    74:74:60:b9:69:16:63:77:9a:98:67:de:a4:ef:be:
                    31:33:4a:0b:cb:c4:94:24:9a:e1:7b:b5:76:3f:6f:
                    b5:53:d2:d7:62:8f:dc:80:eb:e7:43:44:93:ee:b8:
                    d5:6a:5f:80:92:c4:c8:79:1f:53:71:be:88:de:20:
                    37:08:fc:fb:8e:6f:97:d4:e6:81:73:cb:ae:3b:a8:
                    5b:85:96:39:5e:58:de:b8:64:41:3c:89:ce:ab:07:
                    e7:23:37:0c:20:be:e9:a2:e9:37:e9:97:3b:cc:71:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:0E:8B:51:1F:61:E4:26:ED:C5:4B:9D:BC:F1:DF:89:40:24:29:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/F40E8B511F61E426EDC54B9DBCF1DF89402429E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22
                  191.241.20.0/22
                IPv6:
                  2804:1398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263541

    Signature Algorithm: sha256WithRSAEncryption
         89:08:9e:c1:16:1f:ba:af:e2:61:79:dd:65:e2:e6:29:20:7d:
         1b:2f:9a:c9:f3:45:92:d0:c4:45:01:6d:f9:1b:3b:04:0f:ef:
         07:3c:b3:f1:59:47:a4:5e:9e:76:32:a8:c4:87:3f:4b:dc:66:
         99:d3:03:ca:55:f2:98:27:71:dd:05:17:eb:5a:fb:02:08:70:
         80:04:a4:56:53:d6:54:09:95:25:23:dc:3b:eb:a3:2d:91:3d:
         6e:81:b0:e2:5a:0a:63:0a:52:8a:4e:d1:01:c6:49:ef:41:67:
         40:84:18:b5:bd:17:d7:4a:39:7f:7c:16:7e:c1:c1:1c:bd:53:
         4d:c0:56:23:f2:f7:5c:64:f8:32:14:4b:89:34:f3:29:76:71:
         43:a4:de:a7:81:a7:c2:cb:aa:b2:de:1e:d6:36:f2:0d:fc:3d:
         22:44:69:c3:83:41:92:6c:32:a9:55:fa:0f:62:66:90:3f:00:
         14:e4:f9:87:30:2c:28:09:3b:82:24:bf:e1:8d:37:85:64:33:
         f9:e4:91:cc:1b:c7:f1:dc:0c:05:1e:ee:af:c5:3d:b2:37:d4:
         40:e0:28:24:2e:75:ee:a6:ae:7e:1b:9f:b3:51:a3:94:bd:71:
         70:43:d2:25:57:8e:f9:d9:15:70:c5:c5:18:6d:eb:8f:90:d8:
         7a:fb:5f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org