Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B46CF148F877DDC4F3197ECF01FA18B0593366A7.cer
File:                     B46CF148F877DDC4F3197ECF01FA18B0593366A7.cer (raw, json)
Hash identifier:          LsGGIMwqKMVFYk1ojvgGK4RaqemvIHSwExofjY5pRss=
Subject key identifier:   B4:6C:F1:48:F8:77:DD:C4:F3:19:7E:CF:01:FA:18:B0:59:33:66:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21BCD8FB2BD2B14AE660AF6BBC15E8618EA7AFEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/B46CF148F877DDC4F3197ECF01FA18B0593366A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 19:11:38 +0000
Certificate not after:    Fri 17 May 2024 19:16:38 +0000
Subordinate resources:    AS: 52927
                          IP: 177.185.32.0/21
                          IP: 2804:adc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bc:d8:fb:2b:d2:b1:4a:e6:60:af:6b:bc:15:e8:61:8e:a7:af:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 19 19:11:38 2023 GMT
            Not After : May 17 19:16:38 2024 GMT
        Subject: CN=B46CF148F877DDC4F3197ECF01FA18B0593366A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:98:ca:46:40:b1:2b:8b:db:02:21:2e:f6:
                    33:33:a2:67:e4:6c:9f:9e:93:66:b9:9e:ae:55:a5:
                    be:27:c6:ef:71:84:4c:92:8f:3f:f9:99:a0:47:13:
                    75:c2:32:01:50:a0:f8:17:72:95:de:3d:ce:0f:fe:
                    73:72:27:3e:78:ae:29:5e:70:62:5a:21:4f:b6:35:
                    c3:6d:12:38:23:57:53:2f:30:b4:17:7f:d3:04:7a:
                    9c:59:e1:f3:b8:fc:d2:bb:10:b2:7d:66:83:ea:6c:
                    f0:85:76:a2:22:91:02:1b:d7:31:4b:f3:cf:ca:6a:
                    17:bd:4c:b3:1c:eb:29:e1:1e:55:ad:61:0e:59:87:
                    c4:8c:a7:f0:a1:12:31:da:fe:b1:91:11:5e:39:fc:
                    ba:f9:b7:e7:59:13:b3:dd:0f:ab:ef:22:ef:15:39:
                    f6:44:5d:a1:cf:7e:99:58:29:33:15:06:d8:73:8c:
                    4e:b5:d4:03:6b:3c:8f:f1:12:99:44:59:81:56:e1:
                    74:5a:cc:26:56:3f:72:1d:1d:a2:95:bd:33:eb:e1:
                    d7:27:52:11:37:a9:ae:06:1c:ef:db:fe:59:3a:aa:
                    2a:71:6a:9c:6b:c6:26:c2:4e:70:4a:1c:c8:0e:83:
                    7e:09:d9:e9:b8:dc:77:08:8a:a0:58:1d:c9:96:29:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:6C:F1:48:F8:77:DD:C4:F3:19:7E:CF:01:FA:18:B0:59:33:66:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/B46CF148F877DDC4F3197ECF01FA18B0593366A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.32.0/21
                IPv6:
                  2804:adc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52927

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:33:24:81:4d:43:b7:21:de:df:60:4a:9b:6f:9b:ad:01:
         f7:63:1c:ac:96:d2:39:bf:97:16:a0:fc:d4:97:20:49:cb:87:
         26:79:56:02:71:49:93:c0:03:de:4f:f2:1a:c3:6c:0f:1b:71:
         b7:34:99:44:95:b8:7f:ad:44:4b:3f:46:40:c6:ba:52:2b:86:
         bc:82:12:3d:96:70:47:ba:f5:ec:ea:e2:d4:fc:1f:ce:4b:60:
         04:01:6b:4d:7f:1d:a3:7e:3a:07:b8:b5:ef:fe:dd:4b:ca:52:
         61:a0:d9:6b:39:92:63:d9:ae:a7:97:fb:6e:39:11:5e:a4:02:
         58:be:43:96:24:54:0c:e9:44:83:78:00:97:0b:fe:1e:c6:e2:
         3d:c0:ca:ca:06:21:1e:24:74:9e:bc:37:88:c7:00:ea:fd:69:
         30:d6:c9:e2:e0:07:51:57:30:83:45:bc:59:68:c4:ac:3b:52:
         6d:ea:56:0b:15:11:61:23:59:96:49:58:60:eb:9f:3f:c6:e2:
         d3:a1:9c:2e:a9:a9:b0:93:d0:72:5a:51:ad:b3:aa:86:a4:f1:
         fe:97:b8:42:68:8b:23:42:24:13:2c:40:3e:e4:b3:e0:12:12:
         ce:c2:aa:66:91:a3:ce:3b:23:b5:20:44:4b:03:ce:45:75:80:
         59:45:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:16:55 2025 by rpki-client