Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
File:                     16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer (raw, json)
Hash identifier:          6jA4jSonlfAkW7ewkK35ZLg9CN0jttLY1oCoFxxVuHk=
Subject key identifier:   16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C5525E1E9544B9710710517085C07EAD56605DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 19:30:59 +0000
Certificate not after:    Wed 12 Feb 2025 19:35:59 +0000
Subordinate resources:    AS: 268678
                          IP: 45.165.148.0/22
                          IP: 2804:54ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:55:25:e1:e9:54:4b:97:10:71:05:17:08:5c:07:ea:d5:66:05:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 19:30:59 2024 GMT
            Not After : Feb 12 19:35:59 2025 GMT
        Subject: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:45:0c:75:ae:58:ca:7b:ef:4f:49:63:98:
                    89:37:f1:d4:45:85:66:f5:6c:53:d3:33:f5:45:89:
                    15:e2:c0:1f:1f:e3:1f:a1:5e:82:7d:8d:23:40:b9:
                    99:40:cc:3e:78:5d:15:f8:30:a4:00:20:a1:66:ab:
                    d7:2d:d2:8e:c8:1f:df:da:99:93:26:a3:6d:05:92:
                    ff:a6:7c:de:c1:cb:ac:57:a5:20:8a:75:77:34:50:
                    ba:87:6a:e9:9a:97:b8:b6:a7:aa:46:c4:8c:6e:cb:
                    da:ac:d9:cf:53:49:a2:a3:11:3b:18:f3:53:52:82:
                    cf:dd:79:0a:d3:83:8a:5e:6d:7a:d4:c8:78:f4:33:
                    54:88:4c:6e:3b:51:e1:ad:11:57:c5:8f:29:7b:f0:
                    a3:47:3f:9c:15:ff:29:dd:09:46:94:c7:5f:0d:46:
                    93:3a:cb:25:e0:45:ad:35:d1:54:d7:3e:a2:98:75:
                    19:00:f5:d2:92:37:ac:23:b3:e0:6d:0d:69:e8:73:
                    14:16:37:34:cb:75:9b:14:a6:69:86:c0:ef:f9:10:
                    a5:ba:d3:90:61:64:ee:69:18:d1:01:08:3e:08:68:
                    f1:5b:88:2d:74:20:5d:e6:3f:d1:50:a3:2d:a1:17:
                    0d:27:21:4a:74:18:12:5d:71:04:30:0c:04:4b:9b:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22
                IPv6:
                  2804:54ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268678

    Signature Algorithm: sha256WithRSAEncryption
         75:41:e2:14:e1:ec:1f:e2:13:a7:16:0b:d9:0f:9e:91:4e:9f:
         88:97:d3:26:a4:b4:ea:3b:00:06:ff:7e:d5:6e:fc:5e:08:07:
         d7:9e:22:7d:cc:95:64:02:54:f4:9e:35:ea:7e:48:fa:8c:e5:
         af:41:8d:ac:2e:b2:6b:5d:96:20:c2:42:9b:6a:3c:ea:75:7b:
         6b:28:bd:47:5d:e5:81:38:fd:8e:a1:5a:8c:4c:f7:6f:94:07:
         86:a3:69:5b:88:55:42:a5:33:cf:12:77:e4:3b:f4:f3:db:ac:
         fb:2a:81:33:aa:64:f8:11:e5:3e:4f:8f:76:d0:7d:d1:79:a2:
         bd:47:33:12:ef:d4:db:8e:80:a4:6a:4b:ef:b7:74:ec:66:c7:
         f5:9c:b5:84:f6:cf:64:61:71:2a:fc:71:ec:92:22:e1:1d:8a:
         bd:99:43:b3:ae:dc:fc:16:71:1f:ba:57:a4:a3:2e:cb:27:77:
         f6:5d:0e:f6:12:45:2e:5a:c7:0f:6f:af:ba:d6:ab:da:a9:e0:
         a1:04:98:41:89:72:f6:b4:f0:f8:82:a9:8d:ba:54:a8:36:12:
         dc:4d:52:b7:3a:8e:da:76:1c:cb:3a:9e:f3:52:be:a4:0b:47:
         96:2d:56:fb:c7:62:19:a0:e9:8f:fb:46:07:7b:d9:ad:15:ae:
         f6:de:09:e9
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUHFUl4elUS5cQcQUXCFwH6tVmBd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAyMTQxOTMwNTlaFw0yNTAyMTIxOTM1NTlaMDMxMTAvBgNV
BAMTKDE2RTM5NEI3QUQ4OTA0MkYxRjU0QjgxM0VDMERBNkRFMTEyRUMwRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4EUMda5YynvvT0ljmIk38dRF
hWb1bFPTM/VFiRXiwB8f4x+hXoJ9jSNAuZlAzD54XRX4MKQAIKFmq9ct0o7IH9/a
mZMmo20Fkv+mfN7By6xXpSCKdXc0ULqHaumal7i2p6pGxIxuy9qs2c9TSaKjETsY
81NSgs/deQrTg4pebXrUyHj0M1SITG47UeGtEVfFjyl78KNHP5wV/yndCUaUx18N
RpM6yyXgRa010VTXPqKYdRkA9dKSN6wjs+BtDWnocxQWNzTLdZsUpmmGwO/5EKW6
05BhZO5pGNEBCD4IaPFbiC10IF3mP9FQoy2hFw0nIUp0GBJdcQQwDARLm+TfAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQW45S3rYkELx9U
uBPsDabeES7A0TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81R3JnaktEV05KaDJnbmRWMWl4ZFJ6UFViZkN3TDF1TVgz
NkFLaXdTdjJUei8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1Y
MzZBS2l3U3YyVHovMC8xNkUzOTRCN0FEODkwNDJGMUY1NEI4MTNFQzBEQTZERTEx
MkVDMEQxLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItpZQwDQQCAAIwBwMF
ACgEVOwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBmGMA0GCSqGSIb3DQEBCwUA
A4IBAQB1QeIU4ewf4hOnFgvZD56RTp+Il9MmpLTqOwAG/37VbvxeCAfXniJ9zJVk
AlT0njXqfkj6jOWvQY2sLrJrXZYgwkKbajzqdXtrKL1HXeWBOP2OoVqMTPdvlAeG
o2lbiFVCpTPPEnfkO/Tz26z7KoEzqmT4EeU+T4920H3ReaK9RzMS79TbjoCkakvv
t3TsZsf1nLWE9s9kYXEq/HHskiLhHYq9mUOzrtz8FnEfulekoy7LJ3f2XQ72EkUu
WscPb6+61qvaqeChBJhBiXL2tPD4gqmNulSoNhLcTVK3Oo7adhzLOp7zUr6kC0eW
LVb7x2IZoOmP+0YHe9mtFa723gnp
-----END CERTIFICATE-----