Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer
File:                     16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.cer (raw, json)
Hash identifier:          W7cHTJI5K8C70xE3BdsfZWwj4vuE+rSaTX63cSL2KRw=
Subject key identifier:   16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5060CAF77F89C10C6EF8ADAD1AE86BDBC7CE271A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Sep 2023 13:12:25 +0000
Certificate not after:    Sat 07 Sep 2024 13:17:25 +0000
Subordinate resources:    AS: 266502
                          IP: 170.244.172.0/22
                          IP: 2804:38cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:60:ca:f7:7f:89:c1:0c:6e:f8:ad:ad:1a:e8:6b:db:c7:ce:27:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 13:12:25 2023 GMT
            Not After : Sep  7 13:17:25 2024 GMT
        Subject: CN=16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d7:5d:ad:b7:30:ea:cd:07:bf:63:13:01:79:
                    45:0d:f4:1c:f6:c4:b7:37:eb:14:e8:bd:3a:2a:44:
                    1a:42:d8:e6:04:67:3f:08:c2:4b:f4:ce:9f:f5:45:
                    7e:2d:9d:0a:3d:4f:2c:7c:2e:89:10:f3:14:8c:21:
                    5d:c7:26:99:3a:91:1b:57:89:15:ba:18:13:a1:81:
                    2c:66:4d:4f:59:95:57:b9:0b:72:3b:e3:71:34:84:
                    b9:06:89:f8:43:7d:5f:57:de:c4:13:ec:fb:08:24:
                    8b:0e:e6:ea:f5:a6:71:b1:5b:09:4a:18:b9:6d:a0:
                    af:72:00:6f:d2:4b:f0:02:6b:1d:19:7a:70:95:52:
                    1a:2d:44:17:74:68:79:5e:34:ef:a7:a6:60:25:7d:
                    cb:26:67:55:16:95:41:71:52:45:1d:02:d4:4c:ab:
                    12:69:bd:e7:6c:1e:1d:27:41:b8:fd:c1:64:55:c4:
                    63:e7:96:a7:10:29:d0:21:e8:77:52:b3:b3:8f:31:
                    c6:20:de:99:fd:e7:15:83:e2:62:36:ae:d6:1e:88:
                    7a:ff:09:7f:1d:ce:66:50:09:56:1b:30:05:a4:15:
                    77:1e:8c:23:b9:ee:62:d4:57:70:c4:dd:30:32:7b:
                    9b:68:55:22:3b:cc:df:b7:27:c9:54:a4:7f:ba:dd:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:41:9E:C1:CF:D9:D7:F3:8E:C2:DE:F0:DB:32:F9:B6:65:B6:87:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/0/16419EC1CFD9D7F38EC2DEF0DB32F9B665B68733.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.172.0/22
                IPv6:
                  2804:38cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266502

    Signature Algorithm: sha256WithRSAEncryption
         26:75:26:d4:3e:9e:16:e2:24:73:9d:39:79:d3:a7:af:d8:96:
         a2:cf:21:de:9d:d2:64:d0:17:97:90:04:97:d8:72:58:3f:15:
         3a:7f:d9:f3:a2:37:5a:38:80:2e:ca:ce:67:fa:47:6b:50:f0:
         66:18:fd:8d:ec:07:2d:10:b3:33:5d:5f:53:ca:55:43:4a:a8:
         7a:eb:fb:9d:5e:fd:83:3e:51:1c:c7:7b:f8:4b:b3:00:7f:86:
         48:6f:19:96:01:94:84:ea:ac:ad:16:f4:82:ef:a6:94:a9:18:
         29:83:67:a6:e2:1c:1f:96:e7:75:41:e2:a3:38:9b:fe:19:65:
         51:d1:3a:53:d6:5d:f6:ff:fe:ca:a0:5b:5d:d9:a4:2d:62:5d:
         92:2f:7b:93:bc:46:e4:fa:a5:cd:ad:8e:2d:23:2d:88:71:ff:
         e2:9d:42:2b:34:00:96:cc:3d:4d:b8:a9:68:ea:af:c2:f8:57:
         af:51:c5:7d:a2:78:74:0a:41:c6:78:b3:8d:22:5c:80:ba:9b:
         c4:ec:ba:03:1f:16:86:50:08:4b:60:63:53:8e:9d:96:ac:49:
         b4:2f:11:3f:1a:fa:af:c0:c0:4e:f4:a2:08:42:20:2d:d0:81:
         c0:c1:5d:f2:09:92:67:d4:fa:69:6d:3b:ea:df:3e:15:a2:4b:
         de:54:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org