Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/146BA143EC3513667FCE6EAF44051FF30639C298.cer
File:                     146BA143EC3513667FCE6EAF44051FF30639C298.cer (raw, json)
Hash identifier:          W+2zCjCEKXt1ikjQ94+FiUtxqnpjjbY6xUXuxQuZbng=
Subject key identifier:   14:6B:A1:43:EC:35:13:66:7F:CE:6E:AF:44:05:1F:F3:06:39:C2:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       553C66EF801E242B55F48B994CF7F1D9DEB70DA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/146BA143EC3513667FCE6EAF44051FF30639C298.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jun 2022 15:26:04 +0000
Certificate not after:    Thu 22 Jun 2023 15:31:04 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3c:66:ef:80:1e:24:2b:55:f4:8b:99:4c:f7:f1:d9:de:b7:0d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 15:26:04 2022 GMT
            Not After : Jun 22 15:31:04 2023 GMT
        Subject: CN=146BA143EC3513667FCE6EAF44051FF30639C298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:c8:ba:22:f8:74:51:7d:32:4d:96:df:c1:
                    2b:43:1e:6a:87:3b:21:52:71:e5:ab:ad:2f:ae:2e:
                    98:e5:d6:4c:c4:06:ba:67:3d:01:eb:e7:37:7c:cc:
                    9d:64:bf:f4:89:ee:f4:2e:14:12:4d:78:45:8e:f0:
                    14:cb:fe:7e:be:72:ba:d7:d1:6a:86:15:3c:dd:75:
                    0f:00:2f:52:c5:92:b7:91:62:16:fe:a2:df:a1:d9:
                    dc:a4:e3:92:9c:31:58:bb:a0:b1:7e:5e:c0:f3:0f:
                    e2:84:4e:b6:b5:e8:01:cd:7b:46:87:9d:47:c3:af:
                    04:6b:97:4d:31:7a:f2:9a:d6:e5:7d:b7:15:03:cf:
                    eb:56:03:a9:60:c5:43:ee:be:26:f9:22:5d:08:44:
                    8f:9f:e1:77:29:b9:84:78:18:65:30:79:38:1d:7f:
                    49:6e:7c:12:b5:b9:33:e1:aa:a9:74:9c:a8:b8:3c:
                    b8:e6:8b:52:94:d8:8c:f5:49:34:91:ed:b9:1a:e6:
                    2c:0d:3b:c9:c9:b8:6f:e4:88:4c:ff:2f:44:9a:d0:
                    95:cf:45:a5:81:94:11:b0:40:cf:05:74:14:49:50:
                    44:2b:fc:3b:ff:2b:2c:cf:c3:42:c3:41:df:e2:4f:
                    5c:f9:7e:fb:b3:0f:fe:6d:11:67:ab:8b:76:3b:c8:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:6B:A1:43:EC:35:13:66:7F:CE:6E:AF:44:05:1F:F3:06:39:C2:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/146BA143EC3513667FCE6EAF44051FF30639C298.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:5f:6e:d3:1f:0f:93:9b:b0:33:b6:aa:3b:40:ee:f5:72:
         b4:cc:67:86:5b:14:d7:98:db:66:ef:0a:e6:6a:fa:64:c5:e2:
         0d:38:71:19:d7:4c:37:c8:f5:bf:4a:e8:34:4f:65:52:1b:04:
         a8:86:a9:8e:71:eb:d2:61:a3:87:4e:2d:d8:ab:50:28:7a:2c:
         49:a7:d2:2a:f7:fe:35:50:ea:e2:5a:db:ff:f2:8a:73:ac:41:
         08:e3:a5:58:0a:50:4a:12:a8:84:b4:4b:96:b4:11:c8:34:80:
         9d:65:2a:6d:b9:4e:d5:82:71:a2:13:90:c4:60:e6:af:d3:eb:
         3b:70:66:6b:d9:06:74:06:67:d0:9a:c7:4e:bf:ca:6e:17:02:
         b8:1d:b0:6a:5f:58:ce:f0:0e:83:6f:46:02:df:48:6f:23:8e:
         fa:5d:f6:86:fc:d8:32:c2:ee:f4:09:6c:73:c2:2e:27:24:a4:
         55:01:16:3f:85:12:d3:b0:bd:ce:6d:43:bb:7e:04:b3:94:47:
         3e:86:dc:7e:58:b5:eb:3e:d5:79:b5:14:dd:a2:7f:7e:e0:26:
         77:b9:05:4e:45:b9:8b:63:9e:b0:fc:20:2a:11:e8:75:9e:68:
         21:65:29:ce:4f:bb:42:2e:57:d4:88:f6:fe:46:2e:f9:cf:4e:
         91:33:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org