Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46E3A44C62966D6B8651186BB0877B157D025A80.cer
File:                     46E3A44C62966D6B8651186BB0877B157D025A80.cer (raw, json)
Hash identifier:          om8Dn9+ZhtH2aWWExLdIsk2tVXreCUlfxvU/yrpkGCg=
Subject key identifier:   46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C26BF226FEFC1C0FCE75F6BDDF7AEAB3F4CED22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 14 Jan 2023 14:17:00 +0000
Certificate not after:    Sat 13 Jan 2024 14:22:00 +0000
Subordinate resources:    AS: 266269
                          IP: 170.78.96.0/22
                          IP: 2804:351c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:26:bf:22:6f:ef:c1:c0:fc:e7:5f:6b:dd:f7:ae:ab:3f:4c:ed:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 14 14:17:00 2023 GMT
            Not After : Jan 13 14:22:00 2024 GMT
        Subject: CN=46E3A44C62966D6B8651186BB0877B157D025A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:a3:ad:1d:97:2c:f4:d4:5f:a7:45:97:ca:
                    fa:e2:8d:bb:ed:d9:4e:b6:04:3a:e1:a0:51:c3:37:
                    d7:d5:5b:fb:dd:29:13:c2:7b:c9:1a:5b:32:99:fc:
                    b9:5c:71:3d:07:62:4f:f8:e5:54:61:4b:52:a5:5c:
                    e8:0a:41:c4:ea:1c:5d:79:6f:15:15:4a:0e:4d:c2:
                    c0:c0:35:48:32:95:f5:04:3e:5c:e8:ca:8f:ec:2f:
                    38:03:b9:a7:68:54:e4:e7:08:d5:58:71:1c:6a:92:
                    d0:0b:bf:ce:a8:26:47:cf:eb:1e:a8:44:34:94:c6:
                    43:6c:f5:19:be:b5:b3:42:54:c7:73:91:a0:9b:a9:
                    3a:d1:c7:57:91:c4:9f:bb:50:9f:cc:57:eb:c3:6f:
                    8a:21:84:ed:53:78:2c:34:25:1f:9a:21:d0:e5:96:
                    85:c4:68:25:f8:dd:46:d7:37:11:52:6b:a0:35:f7:
                    57:4e:ae:94:8f:d6:0d:23:73:84:e8:4b:1a:e6:b9:
                    71:26:27:a0:bb:ea:63:1f:fd:11:d3:da:7a:c2:bb:
                    97:e0:08:4c:97:46:9f:94:a4:8b:38:2e:fb:28:41:
                    f8:3a:66:46:68:36:0a:5b:d4:cd:97:e3:13:e7:4c:
                    45:77:d6:d2:74:e6:1f:dc:dc:69:c4:7d:0d:82:4a:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:E3:A4:4C:62:96:6D:6B:86:51:18:6B:B0:87:7B:15:7D:02:5A:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/0/46E3A44C62966D6B8651186BB0877B157D025A80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/22
                IPv6:
                  2804:351c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266269

    Signature Algorithm: sha256WithRSAEncryption
         a5:13:d4:77:54:47:20:b4:8b:d1:15:28:ba:4c:34:60:83:73:
         7d:1b:41:7c:2b:ca:2a:10:81:c7:06:e1:07:87:a6:29:ab:bd:
         ec:cd:fb:7a:6f:a2:e1:58:42:7e:62:f3:91:1c:2e:74:c4:83:
         20:33:14:bd:9c:e6:d4:04:f9:d0:9c:b1:0d:f9:c2:76:a5:e9:
         0a:c4:34:7f:f6:f5:d1:53:d3:f1:0b:6a:b4:55:8a:08:ba:af:
         47:4b:ea:8a:6f:82:58:80:0f:aa:80:91:81:4f:48:d5:10:a6:
         d4:e1:a7:94:08:17:95:3b:e2:7a:84:6f:a2:7d:84:f6:bd:bd:
         3b:00:8e:3e:bc:71:25:21:0c:dd:e0:53:00:b0:ea:fb:4d:7f:
         49:6a:a6:10:ff:4e:2b:10:a2:ce:c4:14:da:19:2d:66:04:b2:
         69:a9:34:28:48:f4:4e:95:13:5e:84:f6:a2:65:ad:05:dd:d4:
         7d:a3:a1:ff:d1:3b:c8:f6:e7:05:bb:8f:f6:15:3c:f1:ca:db:
         71:ff:b9:ea:9e:5d:0e:7a:62:64:cc:37:e7:ee:d9:82:e9:c3:
         5d:d5:cd:18:31:75:9f:a9:a8:e9:74:56:84:12:ae:7b:04:4b:
         60:84:94:73:cb:a2:46:1f:88:da:81:cc:ac:fa:f4:57:95:20:
         ff:c3:39:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org