Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer
File:                     46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer (raw, json)
Hash identifier:          F6Jtnagbc2tFO/MURnLKAzYTdFZ/IMQqY81C90rbRpI=
Subject key identifier:   46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       BD5D8D0DF4308F4C2BF4B648175C19153465DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 02:58:55 +0000
Certificate not after:    Sun 27 Oct 2024 03:03:55 +0000
Subordinate resources:    AS: 61599
                          IP: 200.71.76.0/22
                          IP: 2804:3ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bd:5d:8d:0d:f4:30:8f:4c:2b:f4:b6:48:17:5c:19:15:34:65:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 29 02:58:55 2023 GMT
            Not After : Oct 27 03:03:55 2024 GMT
        Subject: CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:ae:9d:fc:c7:0e:6d:06:b8:34:00:fd:a5:
                    ef:1a:2a:c4:dc:35:96:2a:93:7e:68:d3:a4:15:7d:
                    7c:20:1b:a2:78:12:e1:f8:1a:45:5f:f8:7a:aa:bc:
                    4a:c9:c4:68:75:3f:16:67:de:3d:01:55:03:89:1b:
                    08:cb:db:cd:f9:91:66:49:c6:32:c7:85:cf:3e:07:
                    10:37:e8:3c:54:d1:24:56:15:60:8d:9b:5a:6c:83:
                    f4:3f:10:49:02:48:0c:bf:71:eb:b6:08:67:b8:af:
                    cd:87:e6:a8:fe:84:47:eb:79:66:86:58:b8:63:45:
                    04:29:1b:82:3f:dd:f2:44:37:d6:20:26:41:c3:77:
                    6d:b5:02:08:e2:c7:bb:a5:15:7e:a0:4d:65:65:80:
                    2d:b1:de:88:a3:3a:35:cf:58:ae:a8:50:f0:aa:ce:
                    32:59:04:80:ef:ba:97:00:c0:44:ff:22:1d:e3:87:
                    c3:f8:a8:a6:28:01:37:b1:ce:7c:d1:a3:16:9a:00:
                    e5:5e:be:c8:81:b1:ce:56:7d:20:1f:f2:f1:d5:8a:
                    b2:14:c5:b8:d4:fe:30:d9:3a:b0:ff:a7:b8:5c:ab:
                    67:e2:3a:95:22:0f:be:9a:de:f0:d6:0f:dd:fd:c8:
                    50:8f:aa:47:59:25:b4:1f:a6:7b:8e:35:23:1d:55:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.76.0/22
                IPv6:
                  2804:3ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61599

    Signature Algorithm: sha256WithRSAEncryption
         14:91:5f:bd:58:d2:4b:13:71:ea:ee:f9:2b:af:58:e1:21:07:
         6f:66:97:79:ad:e5:84:71:6a:94:ad:93:6a:61:de:a2:72:50:
         1b:d9:e2:00:72:1b:d2:d6:18:af:ca:38:57:50:a8:63:ca:be:
         c2:a5:d9:9c:bf:c4:85:45:11:ff:0e:ad:24:51:32:78:ff:ed:
         78:35:81:3e:22:2f:22:94:31:50:ed:74:06:4e:28:92:38:15:
         b0:83:99:1b:e9:7b:a8:23:e1:93:6b:c6:fc:77:c6:ec:ee:95:
         e2:a7:93:54:e0:1d:1d:fe:54:9a:05:24:90:35:52:76:af:28:
         e3:cf:62:bf:73:b1:64:96:31:bd:a0:3b:bd:f5:12:e7:f4:fd:
         b1:b6:ae:50:33:05:6c:66:2a:2e:79:89:94:81:b1:cd:ba:0e:
         84:ef:14:3e:a7:a9:33:e5:d1:4a:9d:d5:dc:13:b3:69:49:90:
         ea:62:dd:c7:0b:09:ce:b2:49:b9:b9:61:9d:66:a9:b3:98:62:
         b1:79:69:7d:87:43:6a:d2:81:f1:85:bf:b8:b9:98:f0:af:4f:
         1d:11:79:10:f4:bc:a9:65:21:fa:0b:8d:df:eb:30:3c:75:28:
         8e:85:d4:1a:af:33:b3:8f:ed:3b:ff:3c:7e:e1:36:36:8e:70:
         7d:8e:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org