Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.cer
File:                     164DB9886FABFAACFA1B8CEEC56D114EF023AF83.cer (raw, json)
Hash identifier:          9vqNUhYW4y+Syhtlr2AYMlz2kq8L1gm3YPFXnZj01+I=
Subject key identifier:   16:4D:B9:88:6F:AB:FA:AC:FA:1B:8C:EE:C5:6D:11:4E:F0:23:AF:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7765206C9BB79423FB51B9D4AE7F8ED1B4DCC2D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 22:22:50 +0000
Certificate not after:    Tue 27 Aug 2024 22:27:50 +0000
Subordinate resources:    AS: 268508
                          IP: 45.162.22.0/23
                          IP: 2804:5248::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:65:20:6c:9b:b7:94:23:fb:51:b9:d4:ae:7f:8e:d1:b4:dc:c2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 29 22:22:50 2023 GMT
            Not After : Aug 27 22:27:50 2024 GMT
        Subject: CN=164DB9886FABFAACFA1B8CEEC56D114EF023AF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:ad:9d:fc:c8:ea:eb:c2:0c:2b:de:6d:22:
                    e1:7e:d0:d2:5c:fe:9a:f7:d1:0f:dc:14:3d:4c:b5:
                    0e:48:e7:fe:c9:cb:f8:aa:80:3f:e1:99:11:df:78:
                    f4:db:dd:8c:3b:25:e3:c3:85:3a:b5:5d:69:2a:d8:
                    66:8a:2c:4e:c0:d1:b1:bd:67:35:77:49:ad:4f:b9:
                    7a:73:60:e3:73:96:56:91:1d:ac:07:f3:04:cd:44:
                    ec:b2:20:67:f7:b8:97:22:3e:52:b4:64:7c:89:8b:
                    98:b6:19:e7:31:ba:08:05:c0:fc:69:ca:c9:c3:8c:
                    74:ff:10:35:a4:50:53:ba:a8:4b:c4:28:82:93:27:
                    6f:10:06:6a:4e:ee:00:2c:c0:49:62:6e:65:20:70:
                    7b:9f:a1:32:5d:d5:78:a1:6d:55:1e:d5:d3:3a:b9:
                    a3:9d:f0:b3:f1:df:81:8d:47:aa:cf:79:89:af:6d:
                    c9:fc:19:8f:ca:bf:3d:94:8d:6f:50:ad:e0:ee:f0:
                    0d:5d:0c:0d:03:d1:74:0d:18:49:f7:cb:f4:97:a5:
                    e5:68:e5:bc:3b:c5:76:29:42:25:56:5b:76:8a:d2:
                    37:22:e9:9a:b5:49:ae:9b:1d:86:c5:f5:b8:7f:bf:
                    7f:47:4c:b7:25:1c:0e:2e:e9:a4:90:9d:b6:17:8d:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:4D:B9:88:6F:AB:FA:AC:FA:1B:8C:EE:C5:6D:11:4E:F0:23:AF:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/164DB9886FABFAACFA1B8CEEC56D114EF023AF83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.22.0/23
                IPv6:
                  2804:5248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268508

    Signature Algorithm: sha256WithRSAEncryption
         47:23:25:43:c8:e5:cf:ac:04:40:22:d6:b0:00:e3:5d:f4:7a:
         60:11:f8:43:00:21:75:19:c8:b5:c4:86:47:4b:c4:e4:05:63:
         63:2d:af:57:10:fb:ca:fe:3d:0e:de:40:ec:94:c1:19:5b:e2:
         ef:4b:85:e4:9f:5c:ba:e3:6c:c6:a9:53:74:8b:8a:b0:df:a9:
         7c:d6:04:39:bc:e7:fb:6b:6e:06:90:af:c3:a3:f4:e9:bd:b7:
         3b:3d:48:e2:18:aa:77:17:0f:fb:6d:ad:1f:81:94:1a:95:ae:
         08:4c:cd:be:97:31:30:f2:bc:16:9f:62:0e:f6:f2:6a:9e:49:
         aa:03:2f:e1:75:42:b9:d9:06:ec:b0:83:8a:18:08:87:e1:a0:
         34:27:69:f6:82:71:e3:13:79:47:31:54:92:0d:70:ff:ac:55:
         98:eb:40:2b:10:79:ed:9e:f1:35:f9:dd:fd:30:6a:3b:2b:a6:
         2d:8a:d4:7f:53:c6:e1:7a:00:4d:a3:73:00:41:cf:02:76:1e:
         0b:22:81:21:cb:d8:f0:07:02:e8:a9:79:65:c2:dc:9a:b0:cb:
         49:be:9e:70:89:cb:f3:ab:ce:10:7a:ae:f3:22:fa:3a:b6:6e:
         00:56:fa:46:b1:07:f3:70:ba:42:51:ee:7f:98:6d:2e:e0:f1:
         8a:a1:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org