Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer
File:                     2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer (raw, json)
Hash identifier:          WVMaKvSqwXmiZdLZiE8Gq2wHAqIa8/iFuL24msx9zl8=
Subject key identifier:   28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       158B599D79EF1437E89E2CCE755DD3BAA5ADA764
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 16:05:09 +0000
Certificate not after:    Thu 11 Jul 2024 16:10:09 +0000
Subordinate resources:    AS: 266979
                          IP: 45.226.200.0/22
                          IP: 2804:4644::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8b:59:9d:79:ef:14:37:e8:9e:2c:ce:75:5d:d3:ba:a5:ad:a7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 16:05:09 2023 GMT
            Not After : Jul 11 16:10:09 2024 GMT
        Subject: CN=2846EF00ABCF957143EA63F63FEA122DA8D3143E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:c4:7d:18:2c:28:81:fb:fe:c4:b4:a7:27:
                    ff:8f:4f:b7:47:ed:35:bc:7a:7c:b3:87:e0:63:c8:
                    aa:ef:ad:92:5a:7b:d0:ca:5f:63:4b:c4:83:ec:60:
                    19:d1:ce:5d:0e:4f:2e:7b:37:4c:3c:74:0c:48:7d:
                    da:d2:f9:4d:71:3d:14:2d:6e:0a:9d:9b:3a:98:4c:
                    25:11:1e:fe:97:74:cd:83:1f:71:c3:3e:24:48:c1:
                    2b:44:65:cf:1f:93:7f:eb:e6:d8:dd:59:d0:06:38:
                    c0:a8:b0:e2:9d:37:26:9e:2f:d7:19:be:6a:37:ba:
                    75:6b:ac:d3:cb:3e:9b:cd:d9:f4:5a:72:96:c3:62:
                    c0:0a:8d:a0:38:d4:e3:96:04:28:5e:d0:94:29:97:
                    e1:54:fd:30:2f:c5:36:b5:49:1d:98:79:51:12:62:
                    0c:c3:37:de:54:62:dd:61:74:55:fd:5d:fc:ea:d8:
                    d0:35:6d:d4:f2:cc:82:e0:af:8b:87:2f:5a:ec:5f:
                    fd:c9:a3:df:0e:1c:9e:56:b7:20:3b:a0:c3:fa:d1:
                    08:10:3a:09:23:27:35:f5:24:4a:b7:60:fa:a8:49:
                    c4:73:02:4b:29:cf:f5:6d:ca:3b:8f:0d:0c:f5:f9:
                    3e:1b:1e:c7:c6:7a:c4:da:ce:e3:57:ce:7e:78:80:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.200.0/22
                IPv6:
                  2804:4644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266979

    Signature Algorithm: sha256WithRSAEncryption
         a4:8d:fa:b6:94:b9:19:95:06:d5:96:58:df:d3:45:3a:ef:a7:
         ca:47:11:56:63:6d:85:db:f1:96:ec:f3:0f:e6:0f:fd:53:79:
         5d:f5:9c:9f:4a:50:66:27:eb:3e:d3:fd:c7:b0:e1:b2:da:d2:
         e2:da:91:6e:14:81:08:ff:b6:e2:5d:a4:8e:79:28:17:cd:23:
         7a:a4:78:93:b8:a6:b0:bf:c2:ab:72:19:80:32:7f:3b:c8:70:
         be:1e:99:3c:78:01:d3:eb:ee:99:63:0c:8f:ae:b7:54:50:4c:
         1d:1b:77:e8:f8:c8:8a:17:ce:0c:03:2f:54:bf:49:44:e5:23:
         66:a3:d9:ab:7c:73:4e:ac:2c:32:c8:dd:e3:70:37:b2:a6:98:
         ab:35:f9:6f:11:16:0e:a6:36:f6:a1:11:a1:c5:b9:df:34:2e:
         b2:af:42:96:70:87:1a:cc:41:d4:31:0e:24:fd:fa:16:d9:07:
         54:d7:a7:49:46:9a:85:9f:ab:82:e0:2e:eb:66:5a:81:1d:17:
         5b:5a:7a:fe:94:bf:07:7d:e7:e7:01:18:47:54:b4:e1:57:0d:
         5d:62:0f:5e:40:27:78:6c:51:03:1b:0d:e5:d4:76:9b:1c:37:
         f0:b6:c4:8f:21:02:7f:89:d1:f5:df:22:38:14:9c:22:e3:a5:
         9f:9b:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org