Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/916BE728A98601CFDC30218312CF8618E6323C0B.cer
File:                     916BE728A98601CFDC30218312CF8618E6323C0B.cer (raw, json)
Hash identifier:          0YKAJp7uI12uFBMjmHNMHe3GoRiO9gY9uJLN/SR1mTw=
Subject key identifier:   91:6B:E7:28:A9:86:01:CF:DC:30:21:83:12:CF:86:18:E6:32:3C:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D0894A9C9E940BDD562A1FB73E86AD8572BA92F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/916BE728A98601CFDC30218312CF8618E6323C0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 17:12:11 +0000
Certificate not after:    Mon 19 Aug 2024 17:17:11 +0000
Subordinate resources:    AS: 262789
                          IP: 177.221.120.0/21
                          IP: 186.233.128.0/21
                          IP: 2804:208::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:08:94:a9:c9:e9:40:bd:d5:62:a1:fb:73:e8:6a:d8:57:2b:a9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 17:12:11 2023 GMT
            Not After : Aug 19 17:17:11 2024 GMT
        Subject: CN=916BE728A98601CFDC30218312CF8618E6323C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:2f:03:50:70:52:ba:c4:bb:9f:9e:dc:f5:
                    dd:41:e0:2a:8d:11:ae:c1:0a:f0:b6:d7:da:5d:b5:
                    95:8d:c4:ec:10:d6:eb:15:13:ec:e6:eb:64:b5:89:
                    72:fb:e9:10:8d:62:48:21:a8:f2:9d:9d:bb:8b:d4:
                    59:7b:4d:a9:92:16:f1:22:1c:cc:c8:6f:49:80:16:
                    05:3f:ca:db:be:f6:a9:15:6e:6b:8a:f2:ee:df:73:
                    13:e4:8a:56:f5:e5:f0:ae:39:62:a2:09:25:f0:6f:
                    4b:6a:bd:a8:76:cd:bd:ae:0d:24:75:15:ab:d7:08:
                    bb:e8:7a:94:2b:b8:6e:22:27:e6:ab:a1:7c:fc:32:
                    30:13:07:f0:63:45:e4:db:7e:58:3d:00:89:91:78:
                    d4:69:fc:88:cb:94:21:aa:69:4f:68:67:64:3f:c1:
                    38:e4:0b:63:ff:0e:43:79:7b:5e:bc:7f:2d:7b:a8:
                    d4:fa:d2:e9:a1:70:16:35:54:9a:23:7e:7e:86:de:
                    c9:57:fc:db:23:61:5f:7d:75:98:2e:d1:1c:1a:cc:
                    d1:b0:b3:ee:5f:a1:1e:fe:fe:9f:95:f0:82:f2:71:
                    9b:f8:81:a1:1b:1c:19:2a:70:7a:52:1c:7d:1c:70:
                    4e:26:4a:85:36:46:07:1b:bc:b3:42:06:21:ce:90:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:6B:E7:28:A9:86:01:CF:DC:30:21:83:12:CF:86:18:E6:32:3C:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/916BE728A98601CFDC30218312CF8618E6323C0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21
                  186.233.128.0/21
                IPv6:
                  2804:208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262789

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:de:a6:c7:30:df:6f:54:f8:c7:5f:51:3b:d2:a6:ec:ad:
         1a:bf:e9:c3:bc:2d:20:35:58:2b:96:02:b9:02:5c:05:d0:64:
         d1:6d:75:2c:1b:31:91:67:f0:b4:8c:82:8d:37:25:5f:69:ec:
         43:31:35:ae:ac:00:99:51:f8:97:a6:58:3c:23:c5:83:9d:22:
         6f:83:24:6d:8d:bf:28:85:47:1f:31:ad:a7:b7:54:90:94:e8:
         11:d6:07:7a:11:fb:27:06:ec:54:db:69:ff:02:81:97:46:de:
         9c:2b:23:4d:c0:d2:e8:96:f5:0a:df:21:1a:52:2f:0b:4b:d3:
         16:04:53:8b:e1:c3:4c:ea:e3:0b:f0:43:d0:11:47:8d:93:fe:
         d1:bd:9d:bd:6b:87:21:69:2e:1c:7c:9e:88:dd:71:72:63:9f:
         11:73:c0:08:f6:a4:bf:97:90:5d:9f:e3:05:2b:82:cb:86:52:
         38:76:a0:1c:4d:27:be:52:23:70:41:18:33:f1:9c:86:5f:1e:
         be:b4:79:f1:74:77:b7:1b:1f:0a:d5:e0:ae:ce:73:d7:2b:ac:
         cb:d4:9a:61:cf:32:5c:56:96:e9:cd:d5:0f:dc:90:0e:82:1f:
         fe:ba:e2:51:35:bb:8f:ba:4a:cb:fb:f0:03:ab:ee:08:e7:41:
         5f:8a:6b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org