Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer
File:                     DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.cer (raw, json)
Hash identifier:          C71GQPPr+Rr88gcGS41Gd/tmx9nE+gvFnzhfVWUWVfM=
Subject key identifier:   DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D5ADCF4DC8240736B866509BB7FDCBBFA12EEDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 20:28:50 +0000
Certificate not after:    Mon 24 Mar 2025 20:33:50 +0000
Subordinate resources:    AS: 269139
                          IP: 45.180.84.0/22
                          IP: 2804:6000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:dc:f4:dc:82:40:73:6b:86:65:09:bb:7f:dc:bb:fa:12:ee:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 20:28:50 2024 GMT
            Not After : Mar 24 20:33:50 2025 GMT
        Subject: CN=DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:3a:69:50:26:24:41:ec:fe:cb:10:e9:d9:
                    c5:71:bd:54:ca:d8:92:68:3a:90:60:bd:89:56:5e:
                    e2:06:53:b9:12:49:92:1d:67:ca:f6:94:1a:92:40:
                    62:05:9b:94:40:ad:f2:87:0b:46:d1:e0:bc:c6:6e:
                    9c:17:bf:93:cb:d7:46:13:b1:45:1c:59:ed:78:33:
                    e6:af:63:e5:30:bd:51:8a:d6:44:95:7a:b0:f0:40:
                    f0:56:19:03:cf:d4:a4:52:03:2f:c4:76:77:67:da:
                    15:6b:01:be:58:ae:3a:76:c4:c7:58:d2:e8:e8:83:
                    d3:11:5d:44:7d:af:28:2f:37:02:d0:41:94:c9:10:
                    a1:d2:28:e3:40:02:1b:3e:00:cd:0b:91:5d:a3:81:
                    86:d0:b2:5c:8b:69:ad:94:96:51:c5:38:e8:11:71:
                    9a:f2:c0:d9:35:4d:07:7a:03:51:7e:40:0a:3e:de:
                    8c:dd:6a:b8:5b:1a:00:db:6f:51:cb:61:ff:8a:82:
                    b1:53:8f:23:19:9a:1b:07:5e:2a:b1:cf:e9:fc:1e:
                    8b:af:01:d3:12:8b:76:6b:f3:94:d1:db:96:c0:db:
                    c2:22:50:d2:a9:39:3e:1d:75:9a:06:e6:b5:6c:4e:
                    1d:01:55:20:0a:98:42:22:30:06:ed:40:d1:99:57:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:A4:6C:6D:CA:6F:3B:35:A1:0B:8A:9B:45:6D:1F:7E:13:75:07:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/0/DEA46C6DCA6F3B35A10B8A9B456D1F7E137507A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.84.0/22
                IPv6:
                  2804:6000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269139

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:b9:e5:8b:40:66:69:2d:14:61:a3:de:6c:5e:7a:26:01:
         1e:59:27:48:3b:4c:e9:11:62:d3:86:59:f0:f9:31:ff:9b:42:
         50:a2:57:45:37:b8:af:ca:6b:f9:ac:cd:82:c9:52:c9:e2:99:
         6d:67:85:48:1c:a8:dc:19:c7:56:71:bf:57:42:9b:b6:52:30:
         24:52:0e:58:ad:36:f3:77:2a:6d:c9:ed:2e:50:0e:d9:c8:e7:
         bc:0e:6b:4e:fb:f0:c8:f7:2b:64:d1:2a:d8:aa:82:b0:a5:ca:
         97:b4:aa:d5:bd:00:65:d7:7c:b9:76:a0:41:79:3d:38:2d:b9:
         5c:43:08:1c:db:97:ec:82:70:98:2a:ac:ac:73:25:72:d3:12:
         d6:c3:2e:60:48:c6:3d:2e:bb:69:b5:71:2b:e6:de:1a:46:3c:
         c7:09:b7:14:31:00:c3:d7:3e:bd:4e:8e:71:94:94:c2:bf:bb:
         4a:45:d0:b5:c8:ef:dc:92:ed:be:75:88:11:be:cf:e1:2d:f8:
         d4:4b:57:91:b3:33:4d:ef:5e:d6:f9:e2:c8:2b:87:15:84:28:
         41:d1:26:dc:8e:be:93:37:49:a8:36:fd:62:83:80:88:3e:42:
         a1:f8:c9:98:ac:f7:e3:bd:c0:f6:9a:c0:19:05:86:b1:b9:d4:
         ec:0d:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org