Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16C19738F1BA253599C9B270B174032C11470AC7.cer
File:                     16C19738F1BA253599C9B270B174032C11470AC7.cer (raw, json)
Hash identifier:          ZvMh0V59ZoUK9VQMfW8A03JwCTt4zZC9gVaBmSwK8h4=
Subject key identifier:   16:C1:97:38:F1:BA:25:35:99:C9:B2:70:B1:74:03:2C:11:47:0A:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B14E73BD0F7AE1C934E9E52FAC23D63D4B91F9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/16C19738F1BA253599C9B270B174032C11470AC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Oct 2022 12:27:21 +0000
Certificate not after:    Tue 17 Oct 2023 12:32:21 +0000
Subordinate resources:    AS: 268068
                          IP: 45.168.180.0/22
                          IP: 2804:577c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:e7:3b:d0:f7:ae:1c:93:4e:9e:52:fa:c2:3d:63:d4:b9:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 12:27:21 2022 GMT
            Not After : Oct 17 12:32:21 2023 GMT
        Subject: CN=16C19738F1BA253599C9B270B174032C11470AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:ff:87:a5:2e:77:da:e9:f9:0e:28:97:32:
                    61:45:fd:20:02:c8:08:18:09:38:27:31:07:ca:a2:
                    2e:c9:3a:58:ff:3f:7d:05:17:16:53:c3:59:75:15:
                    c0:68:99:55:8f:34:d5:4d:c1:4a:2b:fd:44:f2:28:
                    ca:43:14:eb:77:b2:cd:ca:76:ff:73:8f:fc:47:66:
                    97:98:8d:71:1c:c8:d3:73:18:97:89:e6:89:e2:10:
                    0b:56:18:60:6b:91:c5:31:27:a6:0d:1b:90:81:91:
                    37:7c:58:1c:ca:2a:d1:b0:84:2c:0d:41:e4:d1:38:
                    5e:ec:90:b9:14:99:98:7e:99:02:30:bc:4e:0b:85:
                    53:b3:b3:f3:4f:9a:29:95:02:dc:c7:03:a9:23:87:
                    c8:8f:7d:69:ab:48:fd:a6:ba:12:cf:2e:b6:4c:bc:
                    20:70:15:18:59:ed:f7:d2:5c:24:a4:99:ad:51:aa:
                    64:be:a5:50:54:36:42:56:f1:2b:b0:42:26:15:bf:
                    70:e1:e9:08:1a:12:20:f6:3f:ed:71:45:b9:53:84:
                    fb:07:a3:df:b7:78:e8:a2:53:5d:65:23:ed:15:5f:
                    db:c4:43:b1:91:df:8a:c0:ae:0b:a8:30:97:e8:e4:
                    b8:56:18:c3:34:2e:07:8e:fc:6a:a0:d2:39:75:24:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:C1:97:38:F1:BA:25:35:99:C9:B2:70:B1:74:03:2C:11:47:0A:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/16C19738F1BA253599C9B270B174032C11470AC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.180.0/22
                IPv6:
                  2804:577c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268068

    Signature Algorithm: sha256WithRSAEncryption
         b6:67:a3:a0:5e:e5:da:a3:ac:32:20:4b:6a:ec:a7:14:3e:5d:
         89:19:93:3f:3d:1f:62:7a:b9:83:ce:95:99:26:2a:0d:3a:b0:
         c0:f3:1a:19:29:b0:e0:11:fe:c3:b3:e2:f8:08:cb:d2:f5:bb:
         92:ad:91:eb:8a:d5:35:77:f0:3c:99:b4:91:53:23:44:db:ca:
         df:27:8f:d8:91:c8:89:5d:61:30:83:ed:f8:f3:23:e2:76:b0:
         9f:ea:64:86:8c:5c:64:1b:ed:dc:61:6b:7a:48:8b:69:c3:d4:
         ad:76:84:17:5f:5b:fc:d5:71:d5:30:e0:58:7c:6c:7b:e9:a9:
         2d:15:2e:52:73:2c:fb:b8:d6:07:67:c7:f0:1c:8e:94:48:94:
         5a:37:33:69:02:57:8f:d0:ba:09:5f:e7:ca:1c:5a:86:23:72:
         5a:89:25:94:4e:cf:86:a6:27:6b:0e:1a:7c:d8:c4:86:e9:85:
         c2:6d:70:8a:9d:25:45:fa:7b:f8:b1:39:df:e8:01:ef:bc:8c:
         a8:03:ab:51:4d:ff:f1:d7:46:76:6a:a9:37:da:0b:5e:87:ec:
         34:f4:41:f6:48:1a:47:a7:55:4c:6b:99:b0:46:86:2e:38:b0:
         bb:4a:f2:78:2b:c9:29:fa:bf:5e:b3:d4:45:55:52:b2:20:b4:
         49:0a:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org