Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46E827DE98C674A14FD2E85CA05F5520380CF093.cer
File:                     46E827DE98C674A14FD2E85CA05F5520380CF093.cer (raw, json)
Hash identifier:          2AwiQf+ege2uLrhmO/DnnX5MAL/GAMfeJaQKXhoiUyQ=
Subject key identifier:   46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       503161380BD2E96D6B2DAA8FAB252A63DCA74737
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/46E827DE98C674A14FD2E85CA05F5520380CF093.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 Jan 2024 12:27:19 +0000
Certificate not after:    Fri 24 Jan 2025 12:32:19 +0000
Subordinate resources:    AS: 264948
                          IP: 168.232.196.0/22
                          IP: 2804:3064::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:31:61:38:0b:d2:e9:6d:6b:2d:aa:8f:ab:25:2a:63:dc:a7:47:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:27:19 2024 GMT
            Not After : Jan 24 12:32:19 2025 GMT
        Subject: CN=46E827DE98C674A14FD2E85CA05F5520380CF093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:4b:e3:72:e7:a4:21:36:40:25:81:c7:b4:
                    23:55:5c:5d:19:6e:b4:ea:5a:4e:ba:28:35:ef:5b:
                    ef:64:ba:8c:bf:72:1c:aa:5f:ad:e7:e5:f6:e2:d2:
                    f7:82:92:28:53:e1:55:30:35:f2:cc:f6:80:d9:c9:
                    5c:a3:4c:1c:87:06:f7:c6:76:39:3f:2d:60:75:b8:
                    32:cb:50:48:74:30:fb:3d:96:0d:17:56:c5:f3:fe:
                    b4:ec:c2:48:fb:3d:28:f7:71:3b:f6:ec:86:ad:b8:
                    c8:e2:b2:6e:8e:65:65:ae:d1:73:63:35:93:4c:28:
                    1a:9b:b5:6e:cb:91:c6:b2:fb:b9:bd:3f:8f:f8:12:
                    15:6a:ee:52:bf:97:3e:01:3a:45:69:cf:99:6e:94:
                    81:f6:f8:14:4d:bc:f6:d9:23:12:cd:78:50:10:09:
                    5e:6d:1b:29:80:70:be:cb:d1:23:f3:5c:0b:3c:60:
                    f2:b8:54:82:f7:51:32:4b:1d:27:4c:c1:eb:9d:c3:
                    72:c0:88:4a:db:6b:15:8f:b3:59:76:65:c4:ac:86:
                    11:20:02:7b:fa:a6:05:7f:78:50:8a:04:ed:e8:fa:
                    ae:a9:73:be:d0:52:d5:ec:a5:15:92:42:54:a7:b4:
                    8d:c3:93:a1:95:ce:06:0e:00:8b:9b:ce:57:2b:84:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:E8:27:DE:98:C6:74:A1:4F:D2:E8:5C:A0:5F:55:20:38:0C:F0:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/46E827DE98C674A14FD2E85CA05F5520380CF093.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22
                IPv6:
                  2804:3064::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264948

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:9b:9d:29:82:e9:3b:b7:ab:f1:9a:0e:05:13:35:3b:4c:
         ed:6e:61:d9:c9:39:b6:e0:1d:97:54:5a:81:4c:b0:70:35:52:
         0d:8a:9b:23:4a:7b:ff:a7:e0:37:7c:72:89:3f:3d:f3:a3:c7:
         c2:5d:8d:3f:43:7b:cd:96:f5:3d:9d:96:1c:e6:d2:5b:df:a1:
         96:6c:8a:48:ab:a3:65:70:e2:17:da:4d:64:a1:4e:90:54:1c:
         7d:96:d8:a8:f6:56:2c:bd:29:6e:90:7b:00:1e:fc:ce:18:86:
         99:c4:46:e1:c0:ac:8f:2c:d4:b5:bd:a9:c9:67:09:b6:65:3c:
         99:1d:75:a1:0c:04:ad:c8:50:39:a8:6c:c8:89:5f:62:d4:9c:
         eb:7d:d7:41:6c:a7:f2:10:07:3a:49:ee:a8:75:1f:2e:8b:83:
         43:c7:fd:e2:23:93:71:24:d3:c5:0a:52:34:99:1f:e0:69:b6:
         e6:2e:32:47:6e:97:78:c8:a1:a4:c6:e6:be:f6:37:a3:62:97:
         1e:eb:7c:88:5f:74:71:8c:74:ce:05:a8:bf:da:66:90:d1:d0:
         15:1b:22:2a:8e:eb:da:9e:a4:41:07:3f:50:6e:05:69:4d:08:
         36:5f:7b:46:85:0c:bf:3b:7e:c0:4d:68:bc:c6:ab:4f:d5:8d:
         0c:2f:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----