Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00163538EC66E277F93E54FBE592E30664E16F63.cer
File:                     00163538EC66E277F93E54FBE592E30664E16F63.cer (raw, json)
Hash identifier:          bCKCg0k4xElwSnfHOMgdzzLJtZUYe7KkijNYiBLSShE=
Subject key identifier:   00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AD9246AE371EBC4FFF5D8E543C36827789C647E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 24 Jun 2023 04:31:38 +0000
Certificate not after:    Sat 22 Jun 2024 04:36:38 +0000
Subordinate resources:    AS: 266514
                          IP: 170.244.232.0/22
                          IP: 2804:38f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d9:24:6a:e3:71:eb:c4:ff:f5:d8:e5:43:c3:68:27:78:9c:64:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 24 04:31:38 2023 GMT
            Not After : Jun 22 04:36:38 2024 GMT
        Subject: CN=00163538EC66E277F93E54FBE592E30664E16F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:0a:78:c6:3c:6f:5d:c3:7f:08:41:23:a4:
                    7a:2f:ef:cb:aa:c8:dd:82:2b:b9:e7:34:93:3d:08:
                    db:2b:66:f4:f2:16:c7:ad:59:0f:a4:8d:68:ff:ae:
                    e4:49:b5:c1:87:45:3c:d8:c3:d3:4c:6b:c6:89:4e:
                    03:f2:be:fb:8c:e3:f4:a0:7a:dc:48:6a:a2:56:11:
                    3b:e3:20:76:eb:45:4d:ee:d8:aa:3d:1d:f3:23:3a:
                    d3:53:70:56:0c:18:47:b7:ed:14:e5:36:a7:c2:f3:
                    39:21:8b:23:22:2e:f7:9a:e3:c6:62:45:90:47:bc:
                    bd:79:b6:c9:6e:15:fa:67:2c:8b:fd:9b:b0:f3:4c:
                    39:0c:69:55:0c:db:2d:67:52:7d:44:e3:03:97:cb:
                    c1:f2:bb:1b:d8:0b:e6:36:1a:9a:11:84:fa:22:b7:
                    39:4a:ae:3d:0f:2b:8e:01:47:a1:9b:db:0f:36:96:
                    95:b4:ac:2c:98:e6:3d:d0:1c:61:0b:5f:80:2d:ec:
                    e6:33:a1:37:a3:aa:fd:20:8d:1d:bc:d3:6b:96:8b:
                    ea:d3:aa:66:0a:56:11:20:35:ef:36:37:9b:28:66:
                    46:e5:85:a5:9f:d8:40:d7:66:78:f9:3a:0e:35:73:
                    c9:8f:66:ad:2c:87:ca:41:07:3e:8c:5e:ac:b2:a2:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:16:35:38:EC:66:E2:77:F9:3E:54:FB:E5:92:E3:06:64:E1:6F:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/0/00163538EC66E277F93E54FBE592E30664E16F63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.232.0/22
                IPv6:
                  2804:38f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266514

    Signature Algorithm: sha256WithRSAEncryption
         18:01:b4:7a:64:4a:9c:e0:aa:9d:15:1c:12:5f:57:3a:fc:7e:
         ab:fc:76:6e:57:f0:5d:78:ce:21:0f:b2:82:3e:ec:22:ac:9e:
         7d:d9:47:41:e0:e8:72:aa:87:42:e1:5a:5c:45:cd:d9:b0:2c:
         85:9a:7f:35:29:46:60:ba:d9:3e:7e:f5:4f:67:dc:da:60:e9:
         60:9f:cd:3b:f3:65:23:a7:d9:aa:96:4d:52:a4:7c:66:54:7e:
         ec:af:c8:88:da:76:eb:a7:9f:04:b2:8d:57:c5:d0:26:a0:73:
         e5:89:17:14:57:4d:64:58:1d:29:1a:a1:92:83:31:ef:34:a2:
         a4:8f:2a:d6:cc:12:bf:c9:b9:ba:6b:03:51:6a:9a:d9:56:a0:
         a8:fb:e8:f7:15:9e:96:a1:00:e6:35:f8:85:83:14:c1:4a:3d:
         43:4c:8f:eb:a2:a7:ec:58:e6:64:38:eb:38:cc:a1:b5:dc:d5:
         e7:4f:7b:8a:53:7c:1d:f5:cc:4b:3e:f7:4d:2f:cc:4c:0a:57:
         09:e5:44:1e:41:a1:8c:2c:11:b8:e5:4b:94:6c:b0:b8:fe:c9:
         bb:8d:96:7e:c3:c1:5b:eb:af:1d:d0:81:25:2f:df:b4:a9:62:
         02:22:2d:59:07:40:d4:43:37:8c:fb:66:03:f5:a8:11:0b:7d:
         b1:d7:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org