Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/146A7D397FF4973B7CFC4719ACC0826D73CCD283.cer
File:                     146A7D397FF4973B7CFC4719ACC0826D73CCD283.cer (raw, json)
Hash identifier:          w2LqD1/F21MOU7fW0A75q89qSY+tGg5nZAU74ILigf4=
Subject key identifier:   14:6A:7D:39:7F:F4:97:3B:7C:FC:47:19:AC:C0:82:6D:73:CC:D2:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B03CFD321235CE47E380D2386A6C08CE00B039B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/146A7D397FF4973B7CFC4719ACC0826D73CCD283.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 19:03:48 +0000
Certificate not after:    Fri 03 Jan 2025 19:08:48 +0000
Subordinate resources:    AS: 61782
                          IP: 200.77.176.0/22
                          IP: 2804:1940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:03:cf:d3:21:23:5c:e4:7e:38:0d:23:86:a6:c0:8c:e0:0b:03:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 19:03:48 2024 GMT
            Not After : Jan  3 19:08:48 2025 GMT
        Subject: CN=146A7D397FF4973B7CFC4719ACC0826D73CCD283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:be:52:29:f5:74:42:57:89:29:56:24:b5:
                    7d:67:5d:ed:c2:ad:c3:5c:60:2e:16:54:b7:29:4f:
                    0b:f8:53:fe:83:c5:33:5b:56:10:ad:80:28:a8:0c:
                    6b:3b:2d:d1:2e:3b:3b:68:cb:c5:be:e7:af:03:09:
                    cb:51:f7:6a:17:da:e0:8b:38:67:03:20:25:cd:e7:
                    4a:0f:2e:62:51:bd:4d:f5:71:a8:c0:d5:e2:c9:67:
                    c7:5e:84:b1:0e:de:06:b8:24:23:75:86:7f:07:0b:
                    e3:8c:e3:16:91:20:85:7a:11:ad:bf:94:8f:75:b4:
                    d2:bd:c5:8b:70:63:d5:39:57:1d:0c:96:f4:1c:61:
                    e5:38:17:00:76:97:60:80:b3:78:dc:d6:43:c3:23:
                    92:c6:74:86:69:5a:ce:d5:3d:8c:af:25:1b:7b:07:
                    50:55:61:b4:7e:ec:e9:15:75:04:de:33:16:19:fd:
                    c0:b0:51:98:b8:25:67:e4:24:e1:04:49:11:ae:b7:
                    46:8f:1b:c3:dd:18:92:0f:90:cc:2f:fe:31:76:7a:
                    3e:b3:76:f2:bb:34:d5:c5:bd:c2:e8:77:6f:dd:a1:
                    85:e5:63:cc:d5:f0:b5:89:46:77:d0:46:14:ac:c9:
                    ea:c7:fa:63:3c:86:e5:73:08:dd:84:fc:4d:4e:c4:
                    4d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:6A:7D:39:7F:F4:97:3B:7C:FC:47:19:AC:C0:82:6D:73:CC:D2:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/146A7D397FF4973B7CFC4719ACC0826D73CCD283.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22
                IPv6:
                  2804:1940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61782

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:ab:43:60:ba:58:9f:b2:54:39:74:5f:a8:9e:95:80:28:
         05:ac:75:44:da:96:4c:6b:10:e2:d9:f4:22:22:ea:4d:8e:19:
         84:50:bc:71:9c:97:cb:55:97:ee:ff:c1:a7:9b:b1:62:9b:6f:
         68:f0:47:31:98:28:a6:7b:6e:70:8b:d1:b2:1c:7e:5a:09:60:
         1c:3f:5c:53:cc:4b:cc:89:f2:4b:8a:d9:c8:9a:a4:8d:b6:aa:
         53:ef:bb:19:82:74:ac:b9:f6:24:92:e8:4b:b2:f5:33:30:ab:
         4b:db:37:5b:eb:0d:cb:77:79:96:ea:37:85:10:34:08:92:70:
         3e:d9:a2:16:eb:01:80:8a:42:9e:b5:b6:7b:09:b5:03:97:7e:
         9a:c8:d9:84:9f:a0:4e:17:1e:eb:d0:ff:de:7f:17:96:46:58:
         40:74:a7:70:60:53:4b:e2:5f:c4:8e:ac:53:e3:31:79:31:16:
         b2:55:04:cf:3b:7e:06:e6:2d:89:d5:3f:b8:b7:de:0f:17:35:
         02:d3:04:55:39:b5:1e:7e:1f:a4:77:ec:1a:f0:74:86:40:89:
         02:80:a8:27:08:d0:6f:30:c0:b6:5b:55:9f:64:1b:6e:65:7b:
         16:08:62:2c:7e:df:40:6c:28:87:d2:90:25:93:89:e0:0a:8d:
         80:ab:5c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org