Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.cer
File:                     16DC1AE354984C3C9B94EB05280F158DBFDD92B6.cer (raw, json)
Hash identifier:          rP/KcEctZDAZ1GNfhD7nhcFkgfx0ynm1mqENvPDnRFQ=
Subject key identifier:   16:DC:1A:E3:54:98:4C:3C:9B:94:EB:05:28:0F:15:8D:BF:DD:92:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       567687A0E37EBC59F605D48B3949C74DA37DB3E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 06:15:09 +0000
Certificate not after:    Thu 29 Aug 2024 06:20:09 +0000
Subordinate resources:    AS: 263584
                          IP: 177.129.136.0/21
                          IP: 2804:f68::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:76:87:a0:e3:7e:bc:59:f6:05:d4:8b:39:49:c7:4d:a3:7d:b3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 06:15:09 2023 GMT
            Not After : Aug 29 06:20:09 2024 GMT
        Subject: CN=16DC1AE354984C3C9B94EB05280F158DBFDD92B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:02:01:ba:ef:fc:71:58:57:6e:79:e2:2f:
                    5d:38:0b:eb:65:63:77:1e:6a:43:42:e8:72:62:13:
                    cf:ac:0e:d1:f1:88:a1:2b:b1:45:60:6d:7c:6e:6b:
                    41:1a:be:be:9e:01:8c:fc:d7:ef:ec:59:fb:a6:57:
                    81:86:8f:92:45:fb:28:c1:63:e2:f3:08:9d:37:26:
                    11:f9:6d:22:9f:91:0e:de:ae:a8:57:18:df:f0:31:
                    c3:6c:d4:17:bd:02:2c:3d:82:5d:4a:be:b0:88:6e:
                    12:64:12:72:d1:a2:c2:d1:d1:f4:4d:47:12:3a:c8:
                    a0:fc:40:6d:a4:71:86:04:31:cf:ae:69:34:4f:76:
                    cb:9c:46:10:7b:dc:60:91:a0:0b:e7:8c:22:8e:5e:
                    a0:c0:fd:01:08:fb:68:77:5f:da:2d:bf:a8:81:0e:
                    b1:37:99:83:1b:93:f7:bb:d8:2a:a1:d7:8a:2b:2c:
                    41:0a:9d:1b:3d:6e:6a:9b:8c:de:f9:52:2c:dd:f6:
                    c3:ea:e3:f9:f7:2a:20:99:a1:9a:4c:e4:ff:05:94:
                    f5:56:36:a5:6d:e7:af:82:ef:55:7f:89:d5:e9:e5:
                    0e:34:bd:1e:05:47:70:18:cb:2e:bc:29:04:d2:1c:
                    92:0a:8b:3c:93:98:ff:78:cf:6d:9d:c1:8f:0f:c9:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:DC:1A:E3:54:98:4C:3C:9B:94:EB:05:28:0F:15:8D:BF:DD:92:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/16DC1AE354984C3C9B94EB05280F158DBFDD92B6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21
                IPv6:
                  2804:f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263584

    Signature Algorithm: sha256WithRSAEncryption
         a7:43:9d:8d:90:f9:d8:81:3b:6b:f2:ad:8c:4d:0d:48:dc:c6:
         c6:67:76:9b:5b:61:8b:ab:db:4a:62:03:46:f4:9c:47:67:62:
         43:14:f6:cd:1d:87:9c:42:ac:0d:42:d6:6b:b1:91:52:ec:23:
         6a:f3:23:3d:e1:c7:64:68:62:6a:2d:68:86:91:25:1b:c8:86:
         c5:2c:e3:4f:d3:f9:c2:43:a2:ce:6b:75:65:01:fc:33:fc:5f:
         a9:41:19:a1:32:71:a9:34:57:07:ee:bd:c2:06:27:fe:f4:58:
         10:c3:e1:03:8d:e5:7b:9f:8e:26:8c:3e:35:49:9c:5a:f6:3e:
         cc:4b:b1:9d:ac:27:2d:93:e0:52:07:d7:95:f8:12:b4:4b:f2:
         8a:4e:99:e6:f0:ce:50:01:58:2c:79:ef:66:50:0b:f1:0e:a3:
         1a:68:e1:58:5f:cf:84:84:42:03:e9:50:dc:b8:66:a8:36:e5:
         fc:fa:84:c9:e0:28:9b:b9:28:fb:41:88:9f:af:4c:e3:9a:4a:
         63:50:b2:ee:51:3a:09:3c:74:13:ea:9b:9c:6a:cf:9e:b2:d7:
         38:ce:ce:55:9e:20:b3:6c:41:8d:c6:d5:b4:a2:0f:84:e8:cb:
         89:81:0f:47:29:7e:63:0c:61:be:33:7e:34:11:a7:4e:2a:a1:
         4f:79:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:34 2025 by rpki-client