Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46A26687390BDE92C5E6D542E38555BDA980B228.cer
File:                     46A26687390BDE92C5E6D542E38555BDA980B228.cer (raw, json)
Hash identifier:          RKrqaij+91ogJkkpPmyDC+fd3jmRLs73HX1nG8SkFZ4=
Subject key identifier:   46:A2:66:87:39:0B:DE:92:C5:E6:D5:42:E3:85:55:BD:A9:80:B2:28
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       202164280FB510BE87682816BECC77BDC0773D59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/46A26687390BDE92C5E6D542E38555BDA980B228.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 14:54:40 +0000
Certificate not after:    Tue 19 Mar 2024 14:59:40 +0000
Subordinate resources:    AS: 268632
                          IP: 45.164.156.0/22
                          IP: 2804:5428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:21:64:28:0f:b5:10:be:87:68:28:16:be:cc:77:bd:c0:77:3d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 14:54:40 2023 GMT
            Not After : Mar 19 14:59:40 2024 GMT
        Subject: CN=46A26687390BDE92C5E6D542E38555BDA980B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:50:ce:6d:cd:6d:6b:00:96:c0:d5:f9:8c:
                    87:fa:24:68:ef:8a:97:13:80:ef:97:59:93:d7:76:
                    3b:6f:e6:c3:fb:34:be:6b:06:09:42:6d:7f:f6:88:
                    e4:6a:0f:2f:8a:8e:f6:ec:66:cc:d3:64:55:ec:ad:
                    98:3f:75:d3:d2:b7:2d:0a:9c:33:4d:be:3d:eb:28:
                    a0:78:b5:6c:70:97:1d:c9:f9:a5:38:1f:8b:75:19:
                    d7:a5:b1:2c:d6:12:18:b9:e4:e1:5e:7c:8c:e0:4d:
                    92:1e:14:22:12:4b:3f:a2:29:85:ac:e7:4b:ea:ea:
                    d0:9e:90:ba:91:9b:19:11:b6:41:fe:9b:a3:c2:15:
                    a6:08:aa:25:1d:a9:2c:0b:4e:5a:c8:dc:5f:a1:08:
                    a2:33:8d:ae:67:d8:c3:e7:06:81:cf:b4:73:80:91:
                    cd:50:ed:79:12:63:2c:70:43:28:d7:d2:0d:07:4c:
                    91:b5:47:2f:85:66:f4:12:3e:7d:2f:6e:2f:7a:a6:
                    cb:60:bf:b6:ba:2f:12:d7:2b:a0:53:0a:16:1c:b3:
                    12:87:c5:cc:4a:be:87:eb:d8:4f:c3:56:32:c9:e9:
                    a5:43:fc:80:ae:1b:04:86:26:65:c6:88:75:b3:6f:
                    8f:c9:d9:35:ed:3b:cc:83:a8:07:d4:31:3a:f9:05:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:A2:66:87:39:0B:DE:92:C5:E6:D5:42:E3:85:55:BD:A9:80:B2:28
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HCjq4n6W4akJCMqU9UNbEaB13g6ATWbSz7G5Gv5C5eJ/0/46A26687390BDE92C5E6D542E38555BDA980B228.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.156.0/22
                IPv6:
                  2804:5428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268632

    Signature Algorithm: sha256WithRSAEncryption
         64:8a:62:83:7d:2b:ba:70:1e:07:75:8f:5a:f3:6d:60:8c:18:
         b8:b9:30:04:ac:32:bf:a6:2f:a1:3a:50:56:b7:ca:48:03:ee:
         c6:9c:d2:e7:89:d1:f3:9c:93:56:90:cd:38:a8:f4:f0:df:bd:
         54:dc:09:b3:2e:93:fa:29:15:7d:38:82:69:cf:25:27:83:f8:
         21:86:0b:8a:bf:53:8e:e8:0c:f8:03:c7:15:6c:d9:1a:28:78:
         62:d2:67:33:87:1c:dc:81:83:74:dd:3c:03:05:cf:6e:17:3e:
         0b:a4:39:04:fa:d3:be:76:c3:c7:58:8d:eb:3f:13:c5:4f:97:
         27:7e:0e:c1:fb:a2:ac:e4:a4:e4:75:13:c8:31:0b:b1:2e:a7:
         b8:77:98:cd:11:f2:1d:f4:27:ef:27:8d:25:f3:a6:e6:0a:c7:
         96:d7:d1:bf:92:25:47:46:b0:c5:9b:fb:cb:63:2f:ec:9d:74:
         92:69:9d:5c:3a:9c:c9:a5:ef:32:6c:73:19:b6:7f:25:b7:35:
         2c:c2:39:b5:81:c5:7e:00:67:c6:42:09:e6:69:f9:53:01:5d:
         22:de:35:0e:60:84:69:e0:b2:bb:b3:45:b1:4f:08:d0:d8:34:
         89:12:ed:a4:c2:bb:06:c6:41:bc:c0:fe:1a:f1:eb:96:66:52:
         82:7f:0f:20
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUICFkKA+1EL6HaCgWvsx3vcB3PVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMjExNDU0NDBaFw0yNDAzMTkxNDU5NDBaMDMxMTAvBgNV
BAMTKDQ2QTI2Njg3MzkwQkRFOTJDNUU2RDU0MkUzODU1NUJEQTk4MEIyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6VDObc1tawCWwNX5jIf6JGjv
ipcTgO+XWZPXdjtv5sP7NL5rBglCbX/2iORqDy+KjvbsZszTZFXsrZg/ddPSty0K
nDNNvj3rKKB4tWxwlx3J+aU4H4t1GdelsSzWEhi55OFefIzgTZIeFCISSz+iKYWs
50vq6tCekLqRmxkRtkH+m6PCFaYIqiUdqSwLTlrI3F+hCKIzja5n2MPnBoHPtHOA
kc1Q7XkSYyxwQyjX0g0HTJG1Ry+FZvQSPn0vbi96pstgv7a6LxLXK6BTChYcsxKH
xcxKvofr2E/DVjLJ6aVD/ICuGwSGJmXGiHWzb4/J2TXtO8yDqAfUMTr5BWltAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGomaHOQveksXm
1ULjhVW9qYCyKDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82SENqcTRuNlc0YWtKQ01xVTlVTmJFYUIxM2c2QVRXYlN6
N0c1R3Y1QzVlSi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82SENqcTRuNlc0YWtKQ01xVTlVTmJFYUIxM2c2QVRXYlN6
N0c1R3Y1QzVlSi8wLzQ2QTI2Njg3MzkwQkRFOTJDNUU2RDU0MkUzODU1NUJEQTk4
MEIyMjgubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2knDANBAIAAjAHAwUA
KARUKDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGVgwDQYJKoZIhvcNAQELBQAD
ggEBAGSKYoN9K7pwHgd1j1rzbWCMGLi5MASsMr+mL6E6UFa3ykgD7sac0ueJ0fOc
k1aQzTio9PDfvVTcCbMuk/opFX04gmnPJSeD+CGGC4q/U47oDPgDxxVs2RooeGLS
ZzOHHNyBg3TdPAMFz24XPgukOQT60752w8dYjes/E8VPlyd+DsH7oqzkpOR1E8gx
C7Eup7h3mM0R8h30J+8njSXzpuYKx5bX0b+SJUdGsMWb+8tjL+yddJJpnVw6nMml
7zJscxm2fyW3NSzCObWBxX4AZ8ZCCeZp+VMBXSLeNQ5ghGngsruzRbFPCNDYNIkS
7aTCuwbGQbzA/hrx65ZmUoJ/DyA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org