Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A16031A899116A051747B2AE24495B6B2BDBF616.cer
File:                     A16031A899116A051747B2AE24495B6B2BDBF616.cer (raw, json)
Hash identifier:          siedkqxabTfU5+vHwBDM8Z6Wu53zXMJdHrc6nJ3frAc=
Subject key identifier:   A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E2AD6397E616E9F834AEA81E60DB4FAAE954AC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/A16031A899116A051747B2AE24495B6B2BDBF616.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 05:54:13 +0000
Certificate not after:    Wed 25 Dec 2024 05:59:13 +0000
Subordinate resources:    AS: 269633
                          IP: 45.5.140.0/22
                          IP: 45.190.40.0/22
                          IP: 2804:6784::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2a:d6:39:7e:61:6e:9f:83:4a:ea:81:e6:0d:b4:fa:ae:95:4a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 05:54:13 2023 GMT
            Not After : Dec 25 05:59:13 2024 GMT
        Subject: CN=A16031A899116A051747B2AE24495B6B2BDBF616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:78:d4:a6:40:12:99:cd:be:d8:97:8f:d9:
                    61:d0:85:66:c2:a9:5d:8b:32:91:85:48:11:2a:86:
                    eb:96:e7:14:6d:50:ff:51:ce:fc:44:aa:7a:d8:24:
                    a0:17:ae:b2:6b:c8:44:cb:2f:4f:35:ec:c9:84:36:
                    ac:44:5c:44:c7:0e:75:55:bc:a6:0d:32:c0:aa:7e:
                    a8:65:2f:2a:93:59:4a:06:da:bd:9e:af:83:ca:8a:
                    e1:3a:93:cc:6e:f0:27:12:45:3f:47:19:4d:c4:40:
                    cb:d7:82:68:28:9a:56:87:50:16:19:b6:db:2a:61:
                    f1:8b:c4:93:ec:71:d3:e5:74:3d:95:45:33:55:39:
                    fe:af:a8:b4:a9:05:f8:c5:5c:b4:29:ea:d0:8a:4d:
                    67:a2:9d:5d:67:bf:7e:ac:2f:84:23:08:f6:3f:ea:
                    85:c1:5f:98:46:e3:0d:c5:93:44:ee:14:15:e5:ef:
                    e5:ef:91:55:e0:12:0b:17:fb:4c:50:9b:5f:a7:1e:
                    8a:0f:0d:3f:0b:e4:4f:5b:03:43:b0:aa:72:e0:93:
                    22:9e:f4:17:bb:00:e3:ba:42:b4:df:3d:d9:48:a8:
                    9c:f8:c8:44:7a:7e:b4:f2:17:1f:24:04:21:b7:40:
                    e8:01:aa:08:78:36:48:f5:29:e7:ec:58:e7:34:2c:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/A16031A899116A051747B2AE24495B6B2BDBF616.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.140.0/22
                  45.190.40.0/22
                IPv6:
                  2804:6784::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269633

    Signature Algorithm: sha256WithRSAEncryption
         22:2d:e7:35:c1:48:dc:f6:75:73:05:ca:91:ab:44:f5:c8:1f:
         cb:81:9f:74:37:d4:99:b7:01:3a:ac:82:b7:42:e3:ca:42:13:
         73:8f:c8:8a:39:b9:3e:c0:f9:cf:13:e7:02:60:79:ab:e2:6b:
         c2:d3:54:1d:86:6f:59:8e:d4:a7:60:96:50:12:de:c4:f7:96:
         fd:58:9a:80:81:03:8f:aa:03:fa:b9:5c:79:6a:ca:e6:a8:61:
         58:8d:24:21:b2:c9:c0:9c:98:bb:84:aa:a4:da:cc:b9:55:64:
         7b:c8:e2:82:61:0e:07:38:02:e3:e8:0e:b6:9e:07:8e:34:5e:
         ef:29:8a:d6:5d:17:53:fa:f3:9f:70:28:8f:4c:63:7c:26:33:
         b5:66:93:f5:68:5f:47:01:b5:f7:1e:28:00:ea:0d:ed:dc:a7:
         12:a7:33:97:43:92:69:82:88:d4:80:81:09:09:66:ef:a8:40:
         6b:b1:b2:5f:71:d3:e2:23:f4:66:d6:4d:0e:c5:9b:90:53:30:
         c9:b1:ae:4c:24:a7:38:7f:10:c3:95:05:f9:4f:33:54:a1:0a:
         27:67:dc:bd:65:55:78:01:3d:c8:99:5f:f3:7c:0c:09:06:a6:
         50:f3:5b:22:7a:c3:69:80:40:a9:74:9c:03:17:8d:ff:74:ff:
         83:15:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org