Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
File:                     167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer (raw, json)
Hash identifier:          3j9OEx5sNEanklwQtFPqRFVxJ4EnV6W3CtHHTleyYfQ=
Subject key identifier:   16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       203666ABF407BAF2A4A6ECF2E37137BCE38ABBEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 26 Aug 2023 13:26:39 +0000
Certificate not after:    Sat 24 Aug 2024 13:31:39 +0000
Subordinate resources:    AS: 269579
                          IP: 45.189.96.0/22
                          IP: 2804:66bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:36:66:ab:f4:07:ba:f2:a4:a6:ec:f2:e3:71:37:bc:e3:8a:bb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 26 13:26:39 2023 GMT
            Not After : Aug 24 13:31:39 2024 GMT
        Subject: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:5a:d3:0c:84:95:8e:c2:85:34:d0:04:80:
                    3f:4d:41:49:1b:ab:de:6e:af:7a:2a:eb:1d:fb:f4:
                    75:96:91:fe:ab:b3:07:09:1a:cb:b7:03:fe:ec:a9:
                    c6:f6:41:91:3f:f9:b0:ed:db:46:f7:48:8d:67:53:
                    53:c4:fb:1c:8f:9e:f3:03:72:01:fa:ad:b4:7e:0e:
                    17:9e:a9:99:05:c9:7a:c4:93:cd:bf:cd:9a:a1:49:
                    56:8e:fe:78:44:f3:0f:f4:9b:09:40:77:d9:73:f3:
                    d3:4a:04:fd:0a:b6:d2:da:a2:71:55:0e:ca:92:19:
                    64:1e:cb:ea:f5:d9:0c:33:91:0e:e4:39:c4:48:c6:
                    4a:f4:b1:c5:ab:af:b5:09:65:68:a9:72:76:c0:27:
                    c0:fb:38:55:26:0d:ea:5f:db:19:a6:5d:69:7b:80:
                    46:7e:f2:a9:58:e9:a4:30:0f:31:e9:f7:05:3b:9d:
                    92:f4:ad:5e:5d:a7:fa:22:4d:4b:fc:fc:23:80:85:
                    e8:b8:8f:30:4e:77:d5:3a:e2:75:1b:35:a4:39:9e:
                    19:4e:f7:1b:1e:ba:7e:37:c4:65:bf:89:fa:f0:bf:
                    d9:06:6e:4e:8a:b8:3f:66:ba:3d:e7:cd:e0:37:30:
                    d8:e3:19:83:1a:17:88:2c:07:75:05:19:58:6e:a0:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.96.0/22
                IPv6:
                  2804:66bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269579

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:8f:b3:4a:ad:65:c7:89:90:09:cb:5a:40:cf:38:63:33:
         2f:4d:95:de:d3:bb:ea:1a:66:0e:06:ba:ba:9d:3b:64:41:6c:
         0b:4d:5f:7e:8a:e2:c0:0b:01:b0:5d:12:11:cc:86:04:44:5a:
         a8:31:bb:e7:36:49:21:d9:2d:e7:76:0c:45:7e:2e:1d:03:71:
         f8:62:77:ed:26:72:13:df:12:9f:46:fd:ed:98:18:89:5c:8c:
         c1:cb:64:0e:4b:2c:60:98:c7:2f:f0:a1:c9:b9:13:ac:5c:d0:
         de:33:de:14:59:3f:a3:b8:c8:75:5f:82:e3:59:fb:e6:e9:b1:
         5e:76:2d:7f:62:e2:7d:58:bb:77:3f:09:41:4c:2a:09:05:aa:
         88:96:08:45:38:31:ea:ec:75:56:36:fb:1a:5c:b1:f6:6d:32:
         a6:fd:ce:f7:3b:a0:49:08:91:f2:9e:70:0e:c9:3d:6f:44:38:
         98:b2:02:4d:de:ef:6b:8c:26:aa:89:a9:b3:e9:bd:f1:5d:9e:
         25:06:94:c9:ad:42:b4:bb:58:2e:93:b9:c4:30:32:ad:19:8e:
         46:17:cb:c6:36:e8:f7:ca:76:2c:bc:ce:f4:0a:0b:f3:c4:0e:
         33:5d:b0:d3:1b:bd:66:59:01:1c:59:4f:ba:a3:98:5c:f6:d8:
         8f:81:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----