Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer
File:                     16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.cer (raw, json)
Hash identifier:          pwh2/mpMdwbYXPq+VaeMTMU3J8SExStcQC9oksqIQTA=
Subject key identifier:   16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D10497EC3AFB29BFD703451BB4566BAB2D2B73C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Mar 2023 01:07:31 +0000
Certificate not after:    Sat 02 Mar 2024 01:12:31 +0000
Subordinate resources:    AS: 52674
                          IP: 131.161.40.0/22
                          IP: 168.227.236.0/22
                          IP: 177.67.88.0/22
                          IP: 2804:1d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:10:49:7e:c3:af:b2:9b:fd:70:34:51:bb:45:66:ba:b2:d2:b7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 01:07:31 2023 GMT
            Not After : Mar  2 01:12:31 2024 GMT
        Subject: CN=16C13A9D4AC04E63F87F30936C08AEAE60ABF22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:88:c6:a3:31:98:dc:97:c7:62:56:58:82:
                    60:a2:0c:4c:c1:ec:09:30:e5:61:ba:6f:02:f9:13:
                    b8:ec:cc:b8:eb:9d:8d:71:31:89:cc:e9:70:58:b5:
                    24:df:74:fa:b0:84:d7:2e:f3:02:91:04:b7:f7:a4:
                    ed:98:2e:29:6b:ae:72:16:34:e3:6b:e0:3b:63:36:
                    b6:09:7e:7d:04:81:76:f6:de:9f:95:01:e4:7b:17:
                    f7:bf:7a:6b:1c:e1:a6:c6:87:89:68:49:5b:1e:a6:
                    b1:8d:80:c7:8f:c2:2b:4f:8c:ff:21:4e:89:f4:cf:
                    bf:7d:c6:97:20:5f:6c:17:9a:56:79:e2:57:f4:2e:
                    48:c5:dc:5e:0d:0a:eb:13:70:93:fb:82:38:4f:dd:
                    f4:fe:8c:a7:1e:6a:c7:b9:1d:b0:f9:62:79:17:a6:
                    a5:f5:36:81:1b:7b:39:cc:85:b2:8e:2f:33:e3:a6:
                    20:43:ca:7a:48:a3:ae:0f:d3:8e:b1:51:7f:af:b8:
                    fb:98:e7:b3:3c:19:f2:bd:0f:5b:30:8a:41:ca:09:
                    31:75:f7:22:39:af:cf:86:4b:27:3d:43:c3:dd:91:
                    75:06:8a:14:49:71:30:21:db:4d:e8:21:b2:45:aa:
                    cf:50:cf:cc:e0:ad:cc:b6:7a:e4:85:81:20:11:bc:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:C1:3A:9D:4A:C0:4E:63:F8:7F:30:93:6C:08:AE:AE:60:AB:F2:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5Yv8yoyS1nWZ1Cjbo8vEQ6w1k6SGYg9oPyacGR3XWsH/0/16C13A9D4AC04E63F87F30936C08AEAE60ABF22F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52674

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:05:08:5a:e1:af:ba:37:46:5c:c5:9d:1d:53:fa:bc:ab:
         ff:67:b8:c7:a2:cf:9b:f8:bb:a8:1a:ef:d6:6b:24:22:16:02:
         4d:79:5a:a2:20:8c:28:2a:47:96:87:d2:9d:e9:83:c3:3e:0a:
         7a:92:c8:e0:88:98:61:96:8f:0d:94:06:17:65:fa:e7:ce:7d:
         06:ca:b0:7c:c6:bd:11:4f:da:b8:e5:33:25:6e:b3:a9:30:f7:
         f8:e3:f3:02:6a:44:69:19:3d:7b:03:d8:70:85:d3:b9:7e:4c:
         97:7d:09:dc:b4:db:0a:41:69:dc:01:29:2a:f4:6b:e1:57:56:
         c9:57:ab:d9:b9:6d:11:b0:61:40:4b:7d:56:0d:b7:d5:39:d2:
         eb:4d:69:c8:11:8b:40:8e:8a:ad:c3:4d:c4:11:a6:20:f5:e4:
         b0:23:e3:b2:92:85:78:2a:97:32:70:03:f1:52:6a:16:94:83:
         d0:01:09:c7:9a:89:e9:3c:76:86:d4:a5:11:5d:2a:e3:61:0d:
         3e:95:25:bb:35:e9:eb:6c:b1:6d:ea:1e:02:4b:ed:b9:bf:81:
         31:6d:d1:c8:43:cc:72:68:7e:14:cf:91:57:d7:1e:86:ee:61:
         98:25:ea:35:96:4a:59:60:48:ba:d3:a3:06:49:53:23:b1:52:
         f3:45:97:2b
-----BEGIN CERTIFICATE-----
MIIGHDCCBQSgAwIBAgIUXRBJfsOvspv9cDRRu0VmurLStzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMDQwMTA3MzFaFw0yNDAzMDIwMTEyMzFaMDMxMTAvBgNV
BAMTKDE2QzEzQTlENEFDMDRFNjNGODdGMzA5MzZDMDhBRUFFNjBBQkYyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkojGozGY3JfHYlZYgmCiDEzB
7Akw5WG6bwL5E7jszLjrnY1xMYnM6XBYtSTfdPqwhNcu8wKRBLf3pO2YLilrrnIW
NONr4DtjNrYJfn0EgXb23p+VAeR7F/e/emsc4abGh4loSVseprGNgMePwitPjP8h
Ton0z799xpcgX2wXmlZ54lf0LkjF3F4NCusTcJP7gjhP3fT+jKcease5HbD5YnkX
pqX1NoEbeznMhbKOLzPjpiBDynpIo64P046xUX+vuPuY57M8GfK9D1swikHKCTF1
9yI5r8+GSyc9Q8PdkXUGihRJcTAh203oIbJFqs9Qz8zgrcy2euSFgSARvMffAgMB
AAGjggMmMIIDIjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWwTqdSsBOY/h/
MJNsCK6uYKvyLzAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INVl2OHlveVMxbldaMUNqYm84dkVRNncxazZTR1lnOW9Q
eWFjR1IzWFdzSC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9INVl2OHlveVMxbldaMUNqYm84dkVRNncxazZTR1lnOW9Q
eWFjR1IzWFdzSC8wLzE2QzEzQTlENEFDMDRFNjNGODdGMzA5MzZDMDhBRUFFNjBB
QkYyMkYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAoOhKAMEAqjj7AMEArFD
WDANBAIAAjAHAwUAKAQdQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzcIwDQYJ
KoZIhvcNAQELBQADggEBAJC7BQha4a+6N0ZcxZ0dU/q8q/9nuMeiz5v4u6ga79Zr
JCIWAk15WqIgjCgqR5aH0p3pg8M+CnqSyOCImGGWjw2UBhdl+ufOfQbKsHzGvRFP
2rjlMyVus6kw9/jj8wJqRGkZPXsD2HCF07l+TJd9Cdy02wpBadwBKSr0a+FXVslX
q9m5bRGwYUBLfVYNt9U50utNacgRi0COiq3DTcQRpiD15LAj47KShXgqlzJwA/FS
ahaUg9ABCceaiek8dobUpRFdKuNhDT6VJbs16etssW3qHgJL7bm/gTFt0chDzHJo
fhTPkVfXHobuYZgl6jWWSllgSLrTowZJUyOxUvNFlys=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org