Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer
File:                     16891515D0732DB1B361B42718F50E035993171B.cer (raw, json)
Hash identifier:          4VaJUUYtvjrVXPFg0FpBGv991NfXczfocb83Wgca5BM=
Subject key identifier:   16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       097FAE155880168D455BBB34387DA2E62E678B7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 06:07:36 +0000
Certificate not after:    Sat 16 Nov 2024 06:12:36 +0000
Subordinate resources:    AS: 267163
                          IP: 45.230.144.0/22
                          IP: 2804:4914::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:ae:15:58:80:16:8d:45:5b:bb:34:38:7d:a2:e6:2e:67:8b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 06:07:36 2023 GMT
            Not After : Nov 16 06:12:36 2024 GMT
        Subject: CN=16891515D0732DB1B361B42718F50E035993171B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:84:25:b8:b9:55:30:14:2c:c8:c9:85:fd:c4:
                    d5:a0:bb:fc:d7:b8:52:2a:33:8c:5e:14:dd:dd:ce:
                    07:53:16:7a:94:c2:08:13:fe:5e:d2:e5:2e:b8:07:
                    a1:1a:2b:ef:51:52:55:2f:73:6c:a0:2e:69:7d:14:
                    76:89:4e:58:4c:c7:27:f6:28:01:3e:17:4d:46:83:
                    e8:ac:80:fe:90:7d:67:12:d9:f4:b0:f8:35:ae:ed:
                    bc:5d:47:13:7e:1d:e9:3a:54:90:dc:7c:d4:ca:18:
                    1d:a3:2a:eb:1e:cb:14:cb:fb:69:e9:28:02:55:8b:
                    b0:95:a1:24:ce:2e:03:f2:45:42:55:6a:47:63:9b:
                    cc:9c:a2:37:d0:ce:ba:14:d8:83:48:e9:ff:eb:90:
                    30:ad:80:47:fa:2e:43:6c:6c:4e:99:56:45:9a:22:
                    fe:e2:a2:f3:43:f4:65:23:96:b9:20:2b:ed:4a:16:
                    65:d9:42:b8:fd:39:62:08:06:8c:d0:14:03:52:4b:
                    74:8f:a8:ae:29:4f:bc:2e:82:23:a8:6b:61:f5:26:
                    02:db:57:42:b9:e6:16:89:56:9d:0e:b4:25:28:e8:
                    81:d2:cd:9b:7f:7e:52:9a:90:30:ca:b2:2d:a5:80:
                    85:72:45:80:95:b4:cf:72:53:7f:a7:83:f0:71:1d:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22
                IPv6:
                  2804:4914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267163

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:99:cd:48:51:28:21:0a:e1:2c:31:2d:72:aa:8f:b5:5e:
         c4:f7:20:36:e0:2b:31:0f:36:2e:89:37:9a:f7:5f:de:e1:8b:
         54:a5:fa:4b:e9:da:15:e7:09:ee:d7:d2:8d:ef:e9:14:a3:d0:
         af:8c:26:44:de:46:2b:ea:a7:b5:73:80:8b:4a:14:0f:36:f0:
         68:f0:a9:9b:2f:0a:0c:44:16:ef:eb:c2:17:e6:45:43:0d:18:
         46:e1:49:c9:8b:06:6f:46:f1:e9:4b:82:1c:1a:31:27:6d:b7:
         7b:eb:78:66:7a:bb:8a:dc:5a:aa:2d:6f:ef:c1:09:a3:44:5d:
         19:6e:00:e7:b9:45:92:bf:3e:3f:40:03:1b:c9:af:8a:93:16:
         a0:1d:53:29:ed:1f:cb:49:9b:87:37:6f:d1:43:d8:18:b5:f2:
         6d:64:c7:35:43:7b:05:3a:92:9d:d1:aa:4f:10:37:9a:7a:e9:
         d6:d7:75:b6:a8:80:2c:15:f7:e2:f8:11:8a:37:ff:b4:78:c3:
         93:ba:1b:4f:d9:3c:28:1b:c3:e4:c1:f3:41:8b:16:ed:84:18:
         d6:49:07:e7:15:cb:87:0f:49:60:ff:8d:66:0a:85:25:6c:95:
         c1:3d:83:09:d5:33:89:fe:6d:b0:51:02:ee:80:cf:9a:74:43:
         fc:86:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org