Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.cer
File:                     46EDF45B1643CD96084C46A7A17FEEF4054C22BE.cer (raw, json)
Hash identifier:          ZZUeOa7i4I73rynDfYAeNGEXCaeFB1MfTip9udjECxQ=
Subject key identifier:   46:ED:F4:5B:16:43:CD:96:08:4C:46:A7:A1:7F:EE:F4:05:4C:22:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0641FDF11B16FFF3AF686BAA8384F9C72C703C85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 02 Sep 2023 00:05:51 +0000
Certificate not after:    Sat 31 Aug 2024 00:10:51 +0000
Subordinate resources:    AS: 23289
                          IP: 200.160.208.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:41:fd:f1:1b:16:ff:f3:af:68:6b:aa:83:84:f9:c7:2c:70:3c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  2 00:05:51 2023 GMT
            Not After : Aug 31 00:10:51 2024 GMT
        Subject: CN=46EDF45B1643CD96084C46A7A17FEEF4054C22BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:93:63:89:c5:51:57:bb:e6:67:00:c3:7e:
                    b8:ef:10:4b:b5:ae:e6:02:c8:84:6d:90:78:7f:57:
                    d9:ab:b0:31:4e:39:50:55:68:fc:1a:0d:9d:9d:5c:
                    cc:61:2a:d9:81:bc:af:17:3e:02:38:cb:2c:c3:88:
                    94:df:09:04:0f:69:c7:45:2c:8f:e3:8f:1f:da:ee:
                    eb:9b:17:2a:29:ca:5d:f8:2e:5e:d4:fc:06:5a:d6:
                    a2:a6:d5:81:34:d7:8b:77:9f:10:4a:80:9c:6d:a4:
                    5e:49:96:ef:d1:f6:45:f6:86:ae:16:14:26:86:ee:
                    d0:75:28:94:d9:6a:60:b9:48:78:f2:24:45:24:97:
                    39:1a:14:32:a6:c0:71:08:a7:be:e6:66:b1:87:67:
                    3a:f7:bb:99:70:c3:9d:07:d5:eb:0c:38:b3:4e:d2:
                    38:13:4f:3b:05:63:7e:c3:f1:f2:6e:86:fa:75:22:
                    3e:0e:b4:e7:a4:ae:27:c0:b3:9c:21:e3:0a:20:09:
                    71:b0:eb:fe:ad:e1:e6:f6:9b:00:7b:ab:d0:2a:65:
                    db:ad:49:05:69:54:e7:3d:9b:5f:a6:b0:d8:57:20:
                    fd:0e:58:50:b0:b5:e2:fe:e5:b8:31:19:57:c4:cc:
                    8b:ca:98:82:d7:5e:d8:2b:1d:f1:2d:8a:56:91:9a:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:ED:F4:5B:16:43:CD:96:08:4C:46:A7:A1:7F:EE:F4:05:4C:22:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/1/46EDF45B1643CD96084C46A7A17FEEF4054C22BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23289

    Signature Algorithm: sha256WithRSAEncryption
         28:56:2c:5f:aa:d8:9b:a0:c4:7f:18:38:06:19:69:ec:02:93:
         64:0d:0d:99:a6:74:5b:2a:f9:fd:d4:2e:c9:c8:d1:7d:af:87:
         05:5e:d5:ec:7d:46:c2:79:36:ea:76:53:b1:4e:c4:0d:30:78:
         82:1c:db:0b:34:6d:c4:cf:d0:01:28:6c:b9:81:36:70:8e:22:
         d9:9b:09:7a:9b:24:70:4e:1d:b1:31:fa:15:e3:59:b1:0d:ae:
         dd:6b:4e:f8:25:ec:50:72:5b:b0:b2:83:05:0f:9c:ae:e6:47:
         2c:25:c9:cb:eb:ff:ed:19:c0:a8:f8:2b:42:98:fe:64:3a:30:
         55:8c:87:0e:15:ca:6e:fc:80:d8:b0:af:06:0a:51:b3:63:31:
         a1:08:08:55:ad:f4:91:b8:94:a6:9d:c2:17:c0:60:c1:75:06:
         ca:37:27:00:4a:4e:f8:05:06:2f:2a:1c:2f:1b:41:d4:86:87:
         ed:46:5d:87:4f:52:cf:36:48:35:5e:93:cf:80:48:05:bb:3d:
         db:5e:d9:28:0a:62:30:73:9b:6d:b2:f1:2b:31:f5:1f:63:08:
         80:d4:6d:1a:bd:a9:88:a3:28:55:19:43:49:d8:0e:30:4f:a1:
         b6:20:9b:2f:86:bd:8a:66:a4:01:4e:1c:3d:6f:e3:3d:16:e5:
         2a:b9:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org