Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.cer
File:                     016DA10B53CE0933CBEB04B144DCEB711994ACE6.cer (raw, json)
Hash identifier:          G+7CTIvgjqwfsbIt9yNBHPPWBYReCfEnQeLMHesb30k=
Subject key identifier:   01:6D:A1:0B:53:CE:09:33:CB:EB:04:B1:44:DC:EB:71:19:94:AC:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       454105EA2059FB622D21925606554968C1F422A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 02:13:30 +0000
Certificate not after:    Tue 27 Feb 2024 02:18:30 +0000
Subordinate resources:    AS: 271383
                          IP: 200.36.212.0/22
                          IP: 2804:7aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:05:ea:20:59:fb:62:2d:21:92:56:06:55:49:68:c1:f4:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 02:13:30 2023 GMT
            Not After : Feb 27 02:18:30 2024 GMT
        Subject: CN=016DA10B53CE0933CBEB04B144DCEB711994ACE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:94:28:c4:db:cd:d3:99:89:be:b0:4c:a5:
                    1f:7c:a4:f9:40:db:e3:d9:99:8e:32:92:ef:32:f6:
                    b4:1d:03:08:e4:90:8a:bc:dc:2b:23:fe:7d:42:7d:
                    42:1e:75:e6:9a:e9:6f:43:fc:8b:b6:0e:b7:0e:d3:
                    c3:ab:69:53:fa:13:09:3d:7b:f7:d2:93:8f:47:f4:
                    dd:82:d5:74:25:7a:57:c5:31:f2:2a:af:ea:13:13:
                    b3:3a:09:de:ca:91:0a:1b:f4:a9:bb:31:f9:64:07:
                    06:7c:52:70:c5:70:ba:9f:d8:00:ed:e9:be:63:bd:
                    ba:d0:44:f8:e6:42:14:d9:54:f0:b8:37:8d:53:fd:
                    88:49:75:d3:9b:46:f0:39:bf:23:9f:e3:a7:0c:a5:
                    5c:2e:1a:db:6b:d7:8f:06:b6:e8:a4:a4:30:17:da:
                    78:02:fc:b4:4b:b5:33:94:86:df:02:c2:e8:52:f7:
                    3c:5c:14:da:12:41:9e:a0:94:c2:df:f6:5d:8f:0b:
                    6b:3e:64:2c:fa:b0:3d:96:0d:6a:ff:d8:01:ee:ba:
                    81:b5:f8:b8:25:e1:47:44:f1:77:50:2f:36:4c:f0:
                    0b:29:b2:b1:82:3f:a7:8a:d6:8b:8a:37:05:54:86:
                    6b:5f:18:ac:a2:bb:69:01:98:65:6e:c6:54:8f:f6:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:6D:A1:0B:53:CE:09:33:CB:EB:04:B1:44:DC:EB:71:19:94:AC:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/016DA10B53CE0933CBEB04B144DCEB711994ACE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.212.0/22
                IPv6:
                  2804:7aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271383

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:1e:e6:0a:a9:e7:84:6e:6a:fb:52:3d:7b:41:3d:64:fb:
         c5:5b:a5:f9:26:b7:1a:c5:fa:48:05:35:a2:b9:3f:c3:53:12:
         b7:1c:5b:c2:49:ff:cd:e6:26:6a:41:9e:19:a9:22:16:da:bb:
         fa:6c:d3:a7:b7:5a:01:93:d1:3b:e9:d4:44:37:c8:e7:e6:06:
         ab:58:46:6b:18:71:bc:3f:21:8c:54:0d:d0:a8:c1:2a:8f:68:
         e5:8c:26:53:6f:6e:f8:be:e5:59:d8:d8:d0:76:89:59:c5:29:
         29:be:16:fb:a8:8e:5a:29:cb:7e:c2:ab:69:5f:e9:35:1f:10:
         6f:38:07:d0:b0:ca:2b:73:70:b7:2a:9c:7f:bb:35:4c:fa:3e:
         40:c8:ac:d3:66:d4:88:5d:c7:13:0e:e9:4f:06:7a:61:86:fc:
         34:93:13:09:0d:05:65:a4:c8:bb:49:c5:b6:16:d5:c0:95:bc:
         b9:a3:1e:5c:1d:d1:dc:ac:bf:47:2b:bf:65:d2:83:91:bd:1b:
         9a:d8:1b:81:2f:99:5b:9c:17:53:1e:da:c2:9b:36:50:58:82:
         8f:aa:d0:37:6f:0c:e5:c9:15:5d:cb:4e:83:6e:ee:ad:d9:45:
         98:96:f1:c9:fb:3e:d2:61:50:21:57:56:de:b5:b3:09:ad:4a:
         ea:af:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org