Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.cer
File:                     46D57E2DC31E7B52E79E7BA4ADA325A30109961A.cer (raw, json)
Hash identifier:          XwaIPYnoD8KzjHxnafPDVCmGEWuxAlJzf/oWCd1cyJQ=
Subject key identifier:   46:D5:7E:2D:C3:1E:7B:52:E7:9E:7B:A4:AD:A3:25:A3:01:09:96:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E4FEFB96CA3AD188D553F7566066FB50F2112EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 18:48:51 +0000
Certificate not after:    Tue 21 May 2024 18:53:51 +0000
Subordinate resources:    AS: 264297
                          IP: 138.121.136.0/22
                          IP: 168.197.220.0/22
                          IP: 2804:25b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4f:ef:b9:6c:a3:ad:18:8d:55:3f:75:66:06:6f:b5:0f:21:12:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 18:48:51 2023 GMT
            Not After : May 21 18:53:51 2024 GMT
        Subject: CN=46D57E2DC31E7B52E79E7BA4ADA325A30109961A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:41:6e:5b:3f:ff:6c:2a:7b:55:b7:47:b3:
                    39:c9:fd:37:22:d8:53:22:41:d2:1d:d6:98:e4:83:
                    cc:e0:e5:4f:ca:40:55:af:db:69:c9:a3:f6:e8:3a:
                    82:af:6b:c3:d2:e8:b1:de:cc:cf:da:ec:fa:b6:6a:
                    9f:92:12:d9:f0:22:57:98:57:b0:90:81:50:fa:08:
                    14:14:4c:57:62:63:c5:fc:43:7a:a4:13:12:fb:2a:
                    34:e6:11:09:5b:55:1d:65:88:91:77:e5:52:03:5e:
                    60:a0:55:4f:c0:f2:64:3c:87:b7:8d:8a:2e:57:0f:
                    e9:b3:7b:92:23:42:b9:ac:69:d4:76:59:b3:d8:f2:
                    2e:49:b3:44:15:34:57:92:50:ec:2c:bd:df:d3:06:
                    16:48:cd:42:c6:64:b6:5f:0e:5e:f6:26:91:02:3c:
                    e9:f1:61:6f:00:cf:e3:cd:42:3b:c8:4b:0e:25:49:
                    d8:f0:81:e4:5e:97:61:0c:b4:be:ba:b8:54:ad:ce:
                    3b:03:21:e8:66:ea:11:2d:a8:d3:4a:9b:2e:ce:67:
                    13:2c:6f:d2:65:c5:53:ab:5b:f7:3f:96:11:de:00:
                    5c:a6:42:f2:5f:e2:1a:77:81:19:e2:80:41:3b:f1:
                    56:91:c1:02:de:1f:ce:87:04:5c:f6:b8:77:64:30:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:D5:7E:2D:C3:1E:7B:52:E7:9E:7B:A4:AD:A3:25:A3:01:09:96:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/46D57E2DC31E7B52E79E7BA4ADA325A30109961A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.136.0/22
                  168.197.220.0/22
                IPv6:
                  2804:25b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264297

    Signature Algorithm: sha256WithRSAEncryption
         a3:bb:dc:a2:aa:98:35:cc:5b:ab:9f:4a:3c:f8:de:74:95:3b:
         dc:d8:98:33:a9:0f:1e:c7:ff:51:58:df:c1:5d:ac:d1:8a:0a:
         79:c8:55:d0:88:e6:2c:15:10:03:6b:7e:e6:37:63:2c:20:21:
         af:c2:61:da:97:34:62:ab:64:a4:d8:a4:37:20:e7:df:38:1d:
         9f:e2:59:c4:dd:67:f9:73:a3:92:db:bf:e2:1c:68:be:61:53:
         74:d3:55:ce:89:8f:3f:c5:a3:5d:38:ba:dd:82:9c:d5:61:fe:
         ea:75:e1:81:36:2e:1e:40:82:33:a7:15:07:28:18:a8:59:1d:
         7e:e8:99:68:50:46:32:10:48:db:7e:6c:83:f1:76:92:2b:fd:
         41:6c:46:2e:ea:51:c0:70:8c:77:34:49:a6:5a:e4:b4:5e:14:
         ce:34:ff:88:5b:d4:48:d6:f5:b6:02:4d:e1:a8:a7:25:25:f1:
         70:15:4b:bb:b3:6d:52:d9:d7:45:99:b0:25:b7:8f:16:88:cc:
         9a:88:ac:4b:4c:20:dc:17:32:9c:45:ec:89:f5:13:f1:34:f1:
         b7:24:de:a4:db:e6:e7:e2:e0:0b:5f:86:0a:95:80:70:f6:94:
         49:b3:44:d2:72:cb:cb:b4:72:7f:c7:5d:8b:26:1a:d0:38:6e:
         f0:86:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:51 2025 by rpki-client