Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer
File:                     16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer (raw, json)
Hash identifier:          ulmfQWhx6SekDTdC3jP/8jVQufFUEvoGggJFrl2F7Ec=
Subject key identifier:   16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1630B0BDE38C642789162E4604685A031CB19EF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Oct 2022 12:15:14 +0000
Certificate not after:    Tue 24 Oct 2023 12:20:14 +0000
Subordinate resources:    AS: 262638
                          IP: 138.118.132.0/22
                          IP: 177.104.208.0/20
                          IP: 2804:760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:30:b0:bd:e3:8c:64:27:89:16:2e:46:04:68:5a:03:1c:b1:9e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 12:15:14 2022 GMT
            Not After : Oct 24 12:20:14 2023 GMT
        Subject: CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:ee:40:dd:ed:b0:f9:40:ef:89:5d:bf:ca:
                    6c:f7:ac:02:34:de:f7:ca:09:dc:16:d3:e8:0d:91:
                    69:ea:ee:42:fd:c8:3a:11:d7:0d:fc:74:72:20:0b:
                    57:3e:db:5d:91:6b:ce:29:72:3b:45:3e:c7:8b:89:
                    87:1a:76:d7:15:5e:80:51:1f:48:62:ce:da:eb:21:
                    ee:e0:64:a7:0d:34:88:df:7a:0a:1e:09:3e:ab:3a:
                    91:c9:7e:61:ef:60:67:db:89:f8:1c:3c:54:fc:fe:
                    aa:48:c6:25:3f:74:54:b8:8d:03:ee:dd:ba:e8:1a:
                    a2:60:fa:04:40:d6:61:f0:51:08:47:38:49:60:ae:
                    5c:5a:e6:16:2b:c0:f7:4f:48:07:41:58:d5:65:e1:
                    22:cd:73:fa:8d:48:6c:ec:3c:5c:e9:d9:eb:88:14:
                    70:29:9d:36:8f:7f:24:8f:dc:40:9a:52:55:cf:36:
                    26:fe:d7:03:d2:bc:4a:a8:16:ba:08:6d:7a:b6:bd:
                    f4:eb:77:3c:83:24:e9:3a:ae:22:b3:9b:30:11:1a:
                    02:95:57:8d:9d:b3:14:c6:d1:d2:7c:b0:5a:25:58:
                    7c:41:3c:db:b5:2f:e4:73:db:78:69:c4:e7:79:92:
                    b4:6e:ad:e3:b8:3f:75:84:2b:e5:b3:08:fa:1e:c2:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.132.0/22
                  177.104.208.0/20
                IPv6:
                  2804:760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262638

    Signature Algorithm: sha256WithRSAEncryption
         84:98:2d:d4:72:24:12:b5:61:ac:86:ec:f9:f3:0a:dc:75:a0:
         87:21:8d:54:5e:27:76:42:14:d9:2f:f2:b1:b9:1e:9a:2c:06:
         b4:44:a0:65:8a:68:c2:02:31:ea:c9:0e:d5:44:7e:2a:bf:ec:
         27:d9:a8:c1:d2:42:b3:88:e4:8e:51:1a:cd:f3:ed:cf:15:8d:
         83:b2:53:db:cf:a5:f9:05:c4:6a:75:b2:b4:5c:3b:71:9b:01:
         fb:07:a1:e2:e6:13:1d:b8:b6:e2:f3:8e:64:5f:30:75:75:d6:
         96:b9:37:d1:63:c5:92:b6:58:1c:58:ad:4a:ab:56:f9:19:86:
         13:65:0d:33:c1:53:58:4e:97:3e:87:6f:82:6b:50:3a:e7:0c:
         82:45:1c:91:ce:c9:62:7d:82:1c:c5:03:0c:26:f0:85:d0:a2:
         6e:87:6c:f0:c0:1c:da:af:ab:92:ad:7f:bc:e7:2c:dd:0c:21:
         f2:3b:42:aa:cb:55:ad:2c:6f:0f:38:2d:b8:76:be:7b:88:00:
         9b:36:1a:ee:08:9a:17:3f:e6:e0:ea:f3:b2:90:b3:8b:cf:35:
         b1:a7:7d:8e:6d:62:06:41:b6:3a:3b:31:b6:56:72:5a:f0:81:
         24:42:ba:7c:4f:0e:30:f0:77:5b:6f:95:1d:d8:6c:b3:bd:a8:
         6c:eb:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org