Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.cer
File:                     16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.cer (raw, json)
Hash identifier:          a7uRzrASuB2x7eYDM7iKnlQ652T+Eoss0sI8HK0gRBk=
Subject key identifier:   16:AE:7B:77:8C:8F:C3:1D:D6:8B:15:A2:C5:FD:51:23:76:BF:CF:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7362142A5C99C1C496984723AFCE41FEF99EA441
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 13:41:55 +0000
Certificate not after:    Fri 01 Nov 2024 13:46:55 +0000
Subordinate resources:    AS: 22706
                          IP: 200.152.80.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:62:14:2a:5c:99:c1:c4:96:98:47:23:af:ce:41:fe:f9:9e:a4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 13:41:55 2023 GMT
            Not After : Nov  1 13:46:55 2024 GMT
        Subject: CN=16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:8a:95:74:a2:89:3a:bc:a5:4c:1b:c4:2e:
                    45:b6:c7:e6:a2:46:62:c8:f3:31:5d:43:1f:e7:2e:
                    48:4f:9e:c6:54:4b:11:93:d2:ea:0d:62:83:20:c6:
                    fb:78:14:6f:48:3f:1c:60:02:f9:eb:b0:5d:16:cd:
                    82:f7:b5:a9:88:27:7a:5e:67:1e:6d:dc:27:ad:2c:
                    1c:cf:e5:4b:44:6d:bf:3d:dd:b9:1e:b9:a1:df:3d:
                    99:bc:3f:10:17:b8:20:33:94:f3:45:65:9f:d7:6f:
                    72:d4:44:05:b4:1e:3b:c7:9b:6d:47:6d:5d:0b:a7:
                    73:b3:2d:46:a8:62:4a:7b:8c:fd:ea:41:64:07:c8:
                    95:d1:72:9e:2e:07:5e:9f:bc:c6:93:5d:71:a4:73:
                    2f:fe:5e:0c:1b:fb:ae:df:e6:b3:24:73:fe:15:a0:
                    c5:10:87:8e:ca:42:08:41:86:35:a8:ec:a1:0b:c0:
                    0d:05:c2:eb:ce:1d:37:09:a7:26:5c:c7:f6:47:4d:
                    48:bf:80:c9:23:88:f8:16:c4:e7:97:15:20:1a:7e:
                    3f:60:ef:0a:89:db:30:9a:c8:9e:8a:4d:6c:60:c3:
                    99:db:f0:98:c6:5f:9c:e3:a1:c7:3f:cf:17:34:e8:
                    56:d3:e4:22:a5:1c:94:54:f9:7c:05:dc:f7:30:24:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:AE:7B:77:8C:8F:C3:1D:D6:8B:15:A2:C5:FD:51:23:76:BF:CF:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/16AE7B778C8FC31DD68B15A2C5FD512376BFCFC2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22706

    Signature Algorithm: sha256WithRSAEncryption
         19:41:8f:78:de:fe:33:16:0c:b5:e2:d6:7f:eb:01:96:ec:5a:
         7e:fb:ce:ce:a7:a5:12:aa:51:21:06:3f:78:cd:bc:4b:4f:70:
         28:a5:47:d5:9a:a8:59:95:30:49:53:1b:85:af:82:00:a7:47:
         ad:69:2c:eb:b6:b0:a9:cf:01:47:24:f1:d1:69:c7:11:1e:d1:
         65:ae:8b:be:3d:58:11:2e:01:4a:70:84:08:10:30:2d:21:be:
         fd:33:34:b4:b2:af:3b:8a:bb:07:85:85:82:98:1f:23:f8:3a:
         51:d1:0a:6b:8b:96:8d:ae:e4:c9:4c:ce:fb:b3:59:f4:46:23:
         aa:a4:dd:6c:80:d2:04:72:63:b0:97:5f:10:52:87:37:88:4c:
         4b:0e:92:63:77:45:0c:3b:5a:8f:a3:70:a3:92:2c:f6:07:29:
         41:9a:d3:5a:1d:3f:ec:78:61:a0:98:54:82:cd:0b:49:32:a1:
         e3:b2:82:89:c9:f8:0d:7a:84:30:7c:40:38:c5:73:48:6f:d2:
         47:f4:db:d6:d9:a3:c8:03:54:c1:7e:3b:0f:5c:7b:f1:e4:d7:
         b3:3f:76:be:b9:77:7a:fa:ee:0a:11:e6:2b:48:b0:8c:52:59:
         57:50:17:e7:ea:6a:07:7c:58:f5:6e:41:42:aa:14:57:76:f2:
         ea:d3:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org