Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
File:                     167B7DC84B098DDC2B9CE4E175A003955D57A017.cer (raw, json)
Hash identifier:          x8iMxLb709lpaHxhoW3zKZforvCE9ypbo0prwJoE1BE=
Subject key identifier:   16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F69C376C3E9107E399866888BCFFF6264A01535
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 13:18:41 +0000
Certificate not after:    Tue 10 Dec 2024 13:23:41 +0000
Subordinate resources:    AS: 28360
                          IP: 138.94.8.0/22
                          IP: 177.8.0.0/19
                          IP: 179.124.224.0/20
                          IP: 189.76.208.0 -- 189.76.239.255
                          IP: 2804:14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:69:c3:76:c3:e9:10:7e:39:98:66:88:8b:cf:ff:62:64:a0:15:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 13:18:41 2023 GMT
            Not After : Dec 10 13:23:41 2024 GMT
        Subject: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:7a:78:1f:2d:bf:d1:3a:ef:1a:d5:5b:08:
                    99:6f:d9:d0:ee:c9:ca:96:b2:1a:8c:5b:19:e3:bc:
                    0a:8e:18:fd:3b:e6:20:c5:fc:14:87:70:5b:bc:24:
                    6e:3e:14:ad:3c:65:72:a0:cd:65:27:af:f7:0e:8b:
                    35:d7:32:9e:58:20:60:50:eb:5c:80:86:cc:ee:e1:
                    30:43:5b:9c:6d:88:f5:81:b5:fa:de:a1:60:4b:c8:
                    5d:20:82:e6:e0:84:dc:71:1d:2d:f0:35:89:26:4c:
                    c3:ac:ec:cd:b8:fe:26:40:41:f4:d7:c1:3c:4a:4f:
                    43:fb:27:27:9e:a4:4f:78:89:d5:36:57:31:e2:7b:
                    06:de:0d:33:1e:00:b5:cd:f7:d9:58:ab:54:f8:90:
                    93:d6:2c:9f:aa:3b:03:fd:2b:da:6b:40:c6:34:a7:
                    5b:f5:c8:c3:d2:a8:d7:94:b5:cd:9b:59:30:1d:3c:
                    ad:95:96:63:0f:c9:ef:72:4e:21:00:e1:12:a8:dd:
                    5e:51:33:5f:5e:58:6a:f6:f8:3f:68:3d:1d:d7:ab:
                    31:e1:9c:fb:72:c7:01:c6:63:e8:25:9d:8c:1e:6c:
                    66:9c:26:fa:a0:34:65:62:c1:17:31:fb:84:a8:05:
                    6d:a9:cd:fe:43:f6:f6:f5:ee:b9:2d:30:11:ba:2e:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22
                  177.8.0.0/19
                  179.124.224.0/20
                  189.76.208.0-189.76.239.255
                IPv6:
                  2804:14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28360

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:5f:43:af:ca:63:23:0d:c3:de:f0:dc:0d:d8:37:44:85:
         5c:25:83:5f:12:f5:1c:09:c2:11:45:1f:2a:cb:84:23:08:5c:
         43:7b:5a:5a:54:83:bd:3c:55:84:63:cb:60:48:7f:fb:b8:62:
         43:e0:53:ab:31:6c:af:b6:27:39:24:f0:27:59:ef:a9:ad:f2:
         1f:2c:72:20:e9:74:f2:a8:b4:14:5b:2e:44:81:f8:ec:46:39:
         99:66:8d:0c:b3:05:b7:59:15:aa:ed:38:74:48:65:5d:13:bf:
         e9:d7:ee:ce:0b:75:20:12:05:c5:b3:cf:8e:43:9d:02:dc:e9:
         dd:20:c9:b2:2c:a2:53:b4:30:5e:78:a1:82:63:2b:c2:32:dd:
         f7:92:ca:39:58:ab:81:25:68:bb:71:ef:97:31:93:04:d9:70:
         90:f9:a8:6a:08:47:f3:cb:ea:a1:c9:78:f9:4e:e6:81:ba:65:
         4b:5c:25:2f:23:1a:e8:00:dc:a9:52:b7:cb:54:71:e4:9d:21:
         86:55:03:f6:4e:be:87:3b:ec:a0:7a:85:ff:73:e4:61:54:7a:
         2f:bf:fa:05:22:1e:10:fe:4d:33:d4:e4:4c:54:ff:af:a7:b3:
         e9:f6:44:a1:30:ca:ca:f3:67:2b:f8:26:72:6b:a9:5b:3c:43:
         1e:f0:c9:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org