Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
File:                     C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer (raw, json)
Hash identifier:          4Y/qeePOW+DPy+gC36MZgZQRChlRWPhkdnsGb/QjNIc=
Subject key identifier:   C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3246D6C0E7E5064869E38A79EC204CE15B77A0D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:03:26 +0000
Certificate not after:    Mon 07 Apr 2025 20:08:26 +0000
Subordinate resources:    AS: 53054
                          IP: 187.73.192.0/19
                          IP: 2804:a3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:46:d6:c0:e7:e5:06:48:69:e3:8a:79:ec:20:4c:e1:5b:77:a0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  8 20:03:26 2024 GMT
            Not After : Apr  7 20:08:26 2025 GMT
        Subject: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:c7:2e:48:a4:6a:72:75:dc:c2:4c:9b:1e:
                    6b:e2:b7:00:12:33:4e:4a:d1:80:d6:01:dd:7c:06:
                    7d:f8:4d:76:ec:c8:ef:3d:4a:c3:ff:69:a2:64:50:
                    bd:6e:1b:9a:73:72:26:e6:0c:be:0d:58:7c:3a:38:
                    e4:7c:79:09:be:54:4b:6e:4f:f9:19:78:af:ca:b1:
                    9d:f7:e7:17:fa:87:c1:31:c5:4d:d8:1b:ab:aa:a1:
                    d5:d3:06:5a:04:ef:68:0f:38:80:80:f5:ca:09:74:
                    38:5c:d7:51:f2:8d:e3:9e:dc:7f:80:24:86:c9:b2:
                    08:6a:85:46:cc:cb:20:fa:09:25:45:3d:27:5c:d2:
                    e5:67:f6:c6:49:72:16:e3:02:d1:fd:23:9f:3b:3a:
                    c8:d9:66:3b:c2:c5:f9:1f:30:fc:85:1c:9d:d0:bb:
                    f9:61:5e:d0:4c:b1:15:bf:24:9d:81:13:34:43:bf:
                    46:ad:6f:e4:a0:11:79:2b:39:f7:27:f5:73:e9:56:
                    18:bb:9c:b5:3f:8b:22:85:8e:9c:4e:4f:98:ff:97:
                    11:d0:b0:ec:1b:f0:a8:70:e3:4b:4a:5d:fc:b5:36:
                    af:96:49:ab:db:ed:5b:9e:fc:cb:dc:d5:da:0f:42:
                    ba:8e:aa:d4:37:87:01:41:da:dd:14:49:3f:82:ee:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53054

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:27:84:79:2a:f4:9e:9a:82:cd:6b:6c:de:1f:2f:33:5b:
         ee:66:19:c6:7f:6f:02:de:70:71:f6:5c:b6:b4:bc:e2:b8:47:
         c9:24:ee:7a:cf:da:23:cf:d7:23:be:55:b4:e1:b1:11:8d:56:
         2e:7e:a0:15:37:5f:05:95:ad:8a:bd:54:1e:04:af:24:9c:e6:
         6f:58:d2:fe:cb:9c:87:52:1b:87:78:fd:15:19:db:02:d3:bb:
         1f:62:09:0d:a5:66:5d:82:bf:fb:b5:a4:34:8e:bb:59:a7:db:
         a7:e0:ef:aa:8e:b9:e9:3b:97:0a:a0:f3:13:34:ee:e6:45:8b:
         3d:01:ab:14:e2:89:68:0d:e4:b8:e2:d5:8b:cb:02:e3:e8:b5:
         eb:06:3d:12:f1:07:9f:2d:38:42:85:64:a8:81:6a:2b:da:d0:
         5a:6c:8f:91:41:44:47:79:8e:72:f4:a5:94:60:18:a4:d0:10:
         ff:d1:25:ae:18:50:7f:0f:80:61:8d:49:e4:6a:e4:99:67:92:
         11:05:79:ee:a2:ec:fd:2e:0f:1f:af:51:78:68:f6:44:7f:d1:
         62:d0:a3:92:13:45:5a:99:81:06:6f:e0:f6:59:92:03:9c:44:
         cc:5a:93:08:19:9e:f1:39:52:e7:60:53:4c:ad:39:7e:1c:26:
         7c:ab:c3:2a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUMkbWwOflBkhp44p57CBM4Vt3oNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDA0MDgyMDAzMjZaFw0yNTA0MDcyMDA4MjZaMDMxMTAvBgNV
BAMTKEMxNDZBQjY2MkNCN0FBMDc0QzNDRkJDMkY2NkNDNUU1MTI4QTdGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7scuSKRqcnXcwkybHmvitwAS
M05K0YDWAd18Bn34TXbsyO89SsP/aaJkUL1uG5pzcibmDL4NWHw6OOR8eQm+VEtu
T/kZeK/KsZ335xf6h8ExxU3YG6uqodXTBloE72gPOICA9coJdDhc11HyjeOe3H+A
JIbJsghqhUbMyyD6CSVFPSdc0uVn9sZJchbjAtH9I587OsjZZjvCxfkfMPyFHJ3Q
u/lhXtBMsRW/JJ2BEzRDv0atb+SgEXkrOfcn9XPpVhi7nLU/iyKFjpxOT5j/lxHQ
sOwb8Khw40tKXfy1Nq+WSavb7Vue/Mvc1doPQrqOqtQ3hwFB2t0UST+C7g0RAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBRqtmLLeqB0w8
+8L2bMXlEop/8jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81QzNDaTJEdUNDOUtDcWtkejE3cXFjV29oRGViWlBwaUFh
MTVFMU1BZG5Qdi8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlB
YTE1RTFNQWRuUHYvMS9DMTQ2QUI2NjJDQjdBQTA3NEMzQ0ZCQzJGNjZDQzVFNTEy
OEE3RkYyLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAW7ScAwDQQCAAIwBwMF
ACgECjwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM8+MA0GCSqGSIb3DQEBCwUA
A4IBAQCI/ieEeSr0npqCzWts3h8vM1vuZhnGf28C3nBx9ly2tLziuEfJJO56z9oj
z9cjvlW04bERjVYufqAVN18Fla2KvVQeBK8knOZvWNL+y5yHUhuHeP0VGdsC07sf
YgkNpWZdgr/7taQ0jrtZp9un4O+qjrnpO5cKoPMTNO7mRYs9AasU4oloDeS44tWL
ywLj6LXrBj0S8QefLThChWSogWor2tBabI+RQURHeY5y9KWUYBik0BD/0SWuGFB/
D4BhjUnkauSZZ5IRBXnuouz9Lg8fr1F4aPZEf9Fi0KOSE0VamYEGb+D2WZIDnETM
WpMIGZ7xOVLnYFNMrTl+HCZ8q8Mq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org