Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer
File:                     1C6016755CC52A3177ED1F706975750B6CD6C7A9.cer (raw, json)
Hash identifier:          jFV6wiSqIFacaT1qio50ZX5b8pu51i1mW96jX3keXXg=
Subject key identifier:   1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7145FCC2D8801B6B29CBE10744A426AE835B3968
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 18:02:17 +0000
Certificate not after:    Mon 16 Dec 2024 18:07:17 +0000
Subordinate resources:    AS: 52525
                          IP: 179.106.64.0/21
                          IP: 2804:de8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:45:fc:c2:d8:80:1b:6b:29:cb:e1:07:44:a4:26:ae:83:5b:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 18:02:17 2023 GMT
            Not After : Dec 16 18:07:17 2024 GMT
        Subject: CN=1C6016755CC52A3177ED1F706975750B6CD6C7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:15:38:f5:7a:f4:1b:6e:80:a7:8f:aa:aa:
                    be:15:cc:7c:07:58:de:c5:2e:bc:e5:b9:17:e5:86:
                    57:f6:ae:f2:3d:b4:76:16:f1:76:2b:87:8c:cd:5d:
                    d4:10:83:48:da:56:06:9b:f1:29:95:af:61:de:0f:
                    3a:3a:5b:0d:af:18:76:07:72:0e:bb:4a:36:72:40:
                    10:b4:73:b3:09:58:7f:92:ef:95:3a:81:29:67:6c:
                    b4:24:09:d1:aa:6a:56:16:7a:aa:ad:98:19:6a:65:
                    e1:fa:f9:62:06:e3:c6:35:f4:41:63:eb:5e:10:bc:
                    62:bf:72:b7:59:d1:30:e9:db:af:32:47:cf:d9:b2:
                    c4:3e:a6:01:0b:39:96:2e:ce:34:03:3b:23:8d:4f:
                    e9:a6:a5:27:46:24:a1:25:09:77:c5:d3:4f:3e:05:
                    f3:ba:b0:a7:05:58:9e:8c:b0:82:63:42:ae:23:81:
                    4c:c2:79:3b:07:87:32:83:f2:08:8b:1d:da:9a:a6:
                    f1:57:0a:89:c1:f8:84:1a:13:7b:f3:7b:94:7f:76:
                    f3:f4:9f:23:29:03:ff:d7:78:91:9f:61:51:b5:29:
                    43:ef:6d:cc:8d:a0:84:9a:0c:93:cf:d7:50:e8:e3:
                    33:31:63:bf:65:a7:93:38:da:ac:76:25:3c:0d:de:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:60:16:75:5C:C5:2A:31:77:ED:1F:70:69:75:75:0B:6C:D6:C7:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/23XmFxKGVUuf16x1KV1kaNPcxFSP8CKfJwbakmk1szjj/0/1C6016755CC52A3177ED1F706975750B6CD6C7A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.64.0/21
                IPv6:
                  2804:de8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52525

    Signature Algorithm: sha256WithRSAEncryption
         91:63:71:d7:39:ac:d5:43:d4:de:4f:6d:a8:81:02:2a:f1:9c:
         a9:5e:d4:06:29:db:3a:b5:70:5f:7f:0c:e2:0c:6a:d7:44:ea:
         a6:b8:eb:05:c6:ce:e3:03:3b:f3:79:69:df:ac:05:22:ce:07:
         aa:57:8e:57:8a:b9:23:71:2f:b9:8f:e6:c9:c9:71:43:cc:5c:
         de:ed:de:19:f8:ef:a0:46:9e:e9:6d:19:31:58:cf:0f:38:13:
         17:d9:cb:ea:5d:75:40:15:14:2c:c6:b1:21:10:99:b0:db:94:
         cc:72:81:da:b9:97:e9:37:ac:6e:dc:5b:2e:3c:e4:62:4e:f8:
         44:9e:bb:e1:bd:fb:9f:0b:dd:6e:ba:26:59:96:80:6f:08:f5:
         cf:53:4a:3e:c9:a7:44:d4:cb:d9:47:b3:88:6e:02:50:10:aa:
         d3:ae:ef:07:24:1b:20:b3:3b:71:2c:f0:7a:72:b7:01:49:4b:
         53:76:95:83:3d:41:a1:f0:95:ba:c2:aa:16:09:85:5c:08:16:
         5c:28:15:17:4b:4f:15:15:69:10:b9:dc:6f:d3:c9:48:cd:98:
         5d:fe:3a:0c:75:92:bc:1a:cb:01:6f:28:a3:8f:20:74:eb:b8:
         70:94:69:83:da:a4:7e:fd:8c:7d:e7:37:e6:6e:17:fc:05:89:
         bf:06:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org