Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.cer
File:                     16B9491586C88CA8ADA40A7116E4AA83978B76D0.cer (raw, json)
Hash identifier:          Nngjn6weylDvP+6z7BZ9Yi9X0lLx0sgpb1qQPrb/oqM=
Subject key identifier:   16:B9:49:15:86:C8:8C:A8:AD:A4:0A:71:16:E4:AA:83:97:8B:76:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AC4B82E2E70F6D1FBBF9B9B33E066286E832932
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 18:15:10 +0000
Certificate not after:    Thu 25 Jul 2024 18:20:10 +0000
Subordinate resources:    AS: 27693
                          IP: 131.255.24.0/22
                          IP: 179.109.16.0/20
                          IP: 186.236.64.0/19
                          IP: 189.127.0.0/20
                          IP: 200.220.128.0/20
                          IP: 2804:64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c4:b8:2e:2e:70:f6:d1:fb:bf:9b:9b:33:e0:66:28:6e:83:29:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 18:15:10 2023 GMT
            Not After : Jul 25 18:20:10 2024 GMT
        Subject: CN=16B9491586C88CA8ADA40A7116E4AA83978B76D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:49:41:9a:72:24:c9:9f:cc:ec:c4:d9:f0:
                    d1:69:90:4c:50:83:4b:1a:2f:b2:07:03:62:4b:c9:
                    2a:b0:b1:9a:71:c4:a8:13:ca:17:b2:16:da:f4:b0:
                    bc:ea:ce:7d:36:87:6e:3b:43:cb:d9:5c:8a:63:da:
                    91:7f:ad:53:64:04:5a:e4:cd:2e:72:db:13:fe:80:
                    57:87:60:0c:88:40:df:67:7f:3a:5d:0b:c3:f4:17:
                    a5:1e:74:79:69:a7:23:cb:a0:cd:6a:09:46:49:cc:
                    d8:1b:1e:52:1a:d6:f9:08:ee:1d:47:6a:b1:11:5c:
                    16:1f:b4:33:fd:7e:36:a7:36:73:cb:06:36:02:6d:
                    81:af:7b:e2:2d:aa:1a:3e:5c:41:61:f9:53:24:0a:
                    a4:a5:5a:e9:1a:30:e7:ed:f2:b1:c4:07:bb:52:82:
                    ca:98:61:22:d5:f5:d4:ae:c9:3e:19:4f:38:f7:88:
                    59:f5:65:07:dc:04:c1:20:af:55:08:70:96:d0:ef:
                    c3:9d:f6:cc:12:61:6f:e8:67:d7:57:a4:01:46:bb:
                    e3:e5:5a:1a:05:96:67:d3:d9:a2:0e:7d:c2:04:72:
                    9a:2f:aa:a8:4c:c4:e9:37:81:17:ab:49:40:c7:23:
                    bd:db:3e:74:b0:99:cc:4c:b4:71:54:86:6b:96:30:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:B9:49:15:86:C8:8C:A8:AD:A4:0A:71:16:E4:AA:83:97:8B:76:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/16B9491586C88CA8ADA40A7116E4AA83978B76D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.24.0/22
                  179.109.16.0/20
                  186.236.64.0/19
                  189.127.0.0/20
                  200.220.128.0/20
                IPv6:
                  2804:64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27693

    Signature Algorithm: sha256WithRSAEncryption
         51:09:16:2b:79:8d:44:ab:3f:e5:e8:ed:0a:be:38:e3:4a:38:
         af:2e:24:b3:d5:7d:44:c4:c2:af:9a:2d:18:9a:27:db:af:29:
         4b:49:4f:a8:cd:96:12:ef:1b:46:c2:37:12:20:82:3c:aa:39:
         6b:b3:50:90:49:86:08:96:9f:e6:c8:de:04:68:32:6a:4f:fb:
         f0:8a:19:9c:ff:00:df:71:71:b7:b5:c4:86:bb:a4:84:7b:9e:
         5b:5f:18:4a:e6:86:bd:0d:7f:73:0f:3a:91:bc:5f:ce:52:b5:
         78:82:e1:07:73:68:d0:fd:26:f5:89:96:0c:23:37:92:50:c2:
         4d:52:01:c8:d7:4b:53:e7:77:b5:20:49:bd:18:1c:62:0e:93:
         fe:52:2a:e3:ea:b9:12:53:53:b7:08:73:8c:f7:a9:a3:16:bc:
         15:2b:5b:67:bb:b1:1a:75:71:93:43:55:89:09:a6:ac:59:93:
         c4:9f:1f:b4:41:6e:1d:4f:6c:07:5b:b9:6a:bc:b5:c4:fe:73:
         2c:d8:64:fe:6c:1d:e2:4d:e0:22:c0:4f:42:3f:6d:b6:9c:fa:
         30:94:01:a5:f4:65:5a:ab:56:fb:9e:c0:39:74:b6:50:0e:3e:
         2e:0c:1f:47:bf:2b:9e:ea:55:37:75:98:c9:ab:c2:0b:53:88:
         99:1f:5a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org