Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.cer
File:                     0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.cer (raw, json)
Hash identifier:          E8P6OfqCiuaDU296tCWpox/VSjkysiG0Rybt576dXAg=
Subject key identifier:   0C:16:DE:D3:9E:2C:3C:56:CC:D9:FB:D8:35:F8:33:2A:5B:E2:DE:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C6CDC1CB80D12BFD082A471CE793D1500593AE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 20:42:10 +0000
Certificate not after:    Mon 02 Sep 2024 20:47:10 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6c:dc:1c:b8:0d:12:bf:d0:82:a4:71:ce:79:3d:15:00:59:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 20:42:10 2023 GMT
            Not After : Sep  2 20:47:10 2024 GMT
        Subject: CN=0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:63:c2:63:3f:00:a9:0e:2a:aa:e3:36:f9:
                    30:37:99:6c:41:c7:db:71:11:4f:fb:b5:e6:f0:94:
                    24:e5:1a:99:dd:a4:72:f0:ec:92:07:de:72:e8:05:
                    76:90:b8:d6:1e:0b:bd:59:dd:17:4b:c9:8c:26:74:
                    5d:ce:3b:71:b7:ed:1e:aa:9f:43:c9:18:de:02:da:
                    12:e0:ef:ac:52:3c:ef:4e:e5:54:fc:bd:c7:ce:23:
                    7f:d9:e0:8a:f1:16:1b:0a:ff:11:f5:f7:c8:20:59:
                    1e:15:91:c6:b9:04:eb:83:2e:2a:1f:c1:66:b9:7c:
                    55:3a:78:59:0e:03:52:6f:cc:f5:02:35:d0:86:95:
                    b8:37:9d:37:b0:f0:e4:5a:e6:09:be:1f:72:8b:28:
                    59:f8:c1:46:53:5f:a9:a2:a3:b8:28:aa:8c:1d:1c:
                    11:64:4a:69:95:de:a8:cf:a9:79:27:43:12:5f:e4:
                    79:d5:fa:e0:74:f3:12:5d:63:18:ff:ad:9e:55:df:
                    d0:44:80:23:73:06:52:88:f0:32:d0:9c:42:c8:27:
                    ea:15:e8:18:c9:5b:b8:6c:1e:33:33:ee:e1:e8:d9:
                    63:15:06:9f:4d:2c:22:30:e8:6a:5a:50:28:9f:99:
                    93:ec:56:fb:b8:42:83:16:1f:d2:eb:1b:48:bc:8d:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:16:DE:D3:9E:2C:3C:56:CC:D9:FB:D8:35:F8:33:2A:5B:E2:DE:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/0C16DED39E2C3C56CCD9FBD835F8332A5BE2DE99.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:a3:52:34:2d:52:97:d7:8a:1c:fd:4a:01:37:46:73:60:
         b0:30:e6:37:25:69:66:13:95:b0:49:e2:1f:85:fc:ae:a8:be:
         76:af:75:4f:b3:ff:f0:3b:4b:b6:69:14:52:28:ac:50:8d:f5:
         34:ae:75:52:46:38:fe:60:ef:e9:f8:62:94:92:58:04:01:15:
         3f:b3:23:5f:03:4d:c4:17:f7:0e:24:c5:0f:7c:ae:1f:27:95:
         a4:ee:b8:74:49:b4:99:25:b2:9e:e7:08:b9:34:0a:be:97:b2:
         10:98:f1:f3:c0:89:d3:da:4f:b8:e0:93:6b:59:6d:b5:b4:92:
         c1:e9:81:b4:ac:82:d7:85:eb:27:bf:f9:63:72:92:73:ce:72:
         4d:5e:1a:2e:1d:76:96:36:05:d4:80:e9:39:1a:50:9b:9c:5e:
         f8:7f:67:81:23:ab:37:ca:a2:e4:aa:45:aa:88:41:b7:b4:b4:
         e2:0d:b9:23:e5:e6:2a:5e:b1:d2:b7:7e:de:b6:77:64:9f:67:
         4f:1d:00:06:cd:58:69:ca:ab:ce:c1:00:92:e9:17:ab:04:fa:
         a1:e2:de:5a:72:74:d0:1d:1a:cd:33:b3:69:2e:af:08:49:99:
         d9:1c:3e:c7:87:53:1f:b5:f4:98:70:9e:ca:c2:e6:5a:ca:7e:
         98:ad:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:15 2025 by rpki-client