Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9161643D0D4585AFE98030165BC3339D8CF1BC6E.cer
File:                     9161643D0D4585AFE98030165BC3339D8CF1BC6E.cer (raw, json)
Hash identifier:          l7tAg88+5UiOlx99jEZJ6brYoVINJ9kFVTe+x/dpLy8=
Subject key identifier:   91:61:64:3D:0D:45:85:AF:E9:80:30:16:5B:C3:33:9D:8C:F1:BC:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A72FF88A813C5DD81CE44AFB0270218401BF5A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/9161643D0D4585AFE98030165BC3339D8CF1BC6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Feb 2023 19:01:44 +0000
Certificate not after:    Thu 01 Feb 2024 19:06:44 +0000
Subordinate resources:    AS: 262315
                          IP: 177.124.24.0/22
                          IP: 2804:7b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:72:ff:88:a8:13:c5:dd:81:ce:44:af:b0:27:02:18:40:1b:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 19:01:44 2023 GMT
            Not After : Feb  1 19:06:44 2024 GMT
        Subject: CN=9161643D0D4585AFE98030165BC3339D8CF1BC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:21:92:a9:6c:1d:d6:a4:82:5c:b9:7a:76:
                    26:1d:d9:67:6f:f5:53:d5:e0:f9:94:40:d3:d7:05:
                    09:86:6b:8c:6a:e8:25:39:43:6d:8e:dd:0f:7e:0f:
                    0e:39:58:5d:5a:1b:51:1e:67:d4:b9:ef:b9:36:3f:
                    94:19:91:6e:54:bf:3e:9a:46:0c:3e:2e:8f:9e:16:
                    52:af:c5:8f:c5:d4:95:a7:dd:03:51:af:ae:b5:75:
                    50:87:29:e9:a4:ae:a2:83:f5:13:b7:7c:df:40:71:
                    60:d1:f4:8d:af:6d:7c:c8:74:f5:b2:ff:06:04:f7:
                    a6:0f:83:9d:c1:da:d4:f7:2a:f7:7c:52:33:63:e8:
                    76:7e:25:75:3b:12:3c:57:48:f5:b9:da:28:9b:49:
                    10:8f:c7:56:83:2d:ab:fe:b4:3a:e1:ae:34:c5:c2:
                    47:4a:cb:9e:a6:48:27:56:4d:30:60:4c:57:f6:c9:
                    7f:3a:ce:6d:11:b6:67:9d:c4:ff:6b:e6:ab:e9:a4:
                    19:7a:83:46:6d:55:ff:50:17:b0:90:22:24:70:06:
                    df:13:31:ed:59:ca:ac:b7:5e:b4:37:90:66:40:48:
                    e1:5d:c4:68:8a:ec:7f:d9:c6:98:17:be:35:c3:28:
                    81:2b:76:f0:ab:75:85:59:45:d4:cb:ae:bd:e2:22:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:61:64:3D:0D:45:85:AF:E9:80:30:16:5B:C3:33:9D:8C:F1:BC:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/0/9161643D0D4585AFE98030165BC3339D8CF1BC6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22
                IPv6:
                  2804:7b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262315

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:1d:5b:64:b3:c1:43:54:72:b6:99:df:07:93:a3:2f:3f:
         6d:e6:8a:af:4d:cd:a4:2a:54:db:d1:13:da:9c:5d:95:96:9f:
         7e:39:3b:4d:ad:0e:5e:ce:93:f8:70:db:7d:10:40:54:03:a0:
         8f:1d:b0:18:13:9f:af:ca:db:4c:66:f0:13:01:37:86:23:3c:
         95:d3:69:99:e6:64:84:05:a1:d1:b2:45:4b:c4:3d:fd:39:5e:
         7a:5b:7d:39:57:e7:52:c3:9e:8e:77:37:8d:18:67:5e:98:75:
         92:9b:f8:54:01:54:04:c5:93:87:86:8f:41:a1:59:f8:57:22:
         2c:32:b2:45:47:ae:c9:29:81:4e:5d:87:61:c6:44:fa:67:17:
         e4:80:2c:70:42:a1:51:a1:c1:a0:cc:38:62:52:c3:36:ab:60:
         d1:91:02:47:c5:62:a8:6d:da:1a:ca:dc:50:66:02:9c:6f:34:
         06:42:0c:09:5f:fb:3a:76:a3:2b:41:a0:6d:36:eb:38:ca:a9:
         ad:87:eb:78:66:a2:2b:d6:97:e7:e9:bf:83:af:75:f0:9f:04:
         5d:42:6e:c1:de:63:c6:2c:78:a6:20:76:73:47:36:51:88:5a:
         98:81:03:b8:e8:5a:2d:32:d8:1f:80:98:c6:f0:38:41:9d:1b:
         11:b7:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org