Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A16E0431B5852B90267A5C0AED1B17A5EC60A541.cer
File:                     A16E0431B5852B90267A5C0AED1B17A5EC60A541.cer (raw, json)
Hash identifier:          0wHofb38hMMT35ycRpabUe5bWf+t73T0ZeKDeQBzess=
Subject key identifier:   A1:6E:04:31:B5:85:2B:90:26:7A:5C:0A:ED:1B:17:A5:EC:60:A5:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       742A2F3939BBB60618AEF4E0D48C8B8040806ADF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/A16E0431B5852B90267A5C0AED1B17A5EC60A541.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 21:45:10 +0000
Certificate not after:    Tue 03 Dec 2024 21:50:10 +0000
Subordinate resources:    AS: 263911
                          IP: 138.204.172.0/22
                          IP: 2804:2794::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:2f:39:39:bb:b6:06:18:ae:f4:e0:d4:8c:8b:80:40:80:6a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 21:45:10 2023 GMT
            Not After : Dec  3 21:50:10 2024 GMT
        Subject: CN=A16E0431B5852B90267A5C0AED1B17A5EC60A541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:76:97:4c:07:7e:b7:89:e2:12:eb:3d:cb:
                    a3:fe:93:60:9b:88:a2:b7:05:db:fa:d2:5a:2b:34:
                    c1:3b:e9:b8:a6:de:ca:d9:69:9d:5f:6a:5c:a1:32:
                    3a:c6:fd:2f:00:cd:9f:7a:db:9f:f0:67:92:3e:f3:
                    53:b0:dc:75:7f:a8:a1:34:26:1c:44:89:7b:9d:53:
                    ee:cf:8a:cb:82:58:27:2f:57:09:e0:ef:38:ef:61:
                    aa:1a:1b:7b:3b:d8:15:c8:46:bd:f3:db:1f:c2:87:
                    4e:48:58:f9:d3:6a:cb:8d:f7:e3:94:f4:32:cb:68:
                    67:83:21:19:f6:42:c7:55:72:06:f8:6a:04:b1:ef:
                    91:16:f3:69:1d:c0:eb:db:1f:ed:81:75:8f:be:34:
                    6a:fd:5f:d0:3b:2e:92:1c:eb:8d:03:58:9a:3a:7a:
                    a0:7e:9d:cd:47:0c:c0:a6:70:ea:7d:f9:0e:37:6f:
                    fa:c9:da:2c:cc:72:f1:ff:74:52:d3:e3:7a:0b:7b:
                    0c:54:69:6e:1d:c0:a3:10:95:19:da:f3:a0:de:83:
                    9d:af:53:2d:98:b3:85:16:b2:36:ed:a3:70:28:7a:
                    f6:2c:48:16:9f:20:bd:2b:bb:77:24:23:2a:26:ce:
                    6a:ae:e6:00:8c:f5:d4:53:cd:ca:8e:2d:17:14:cf:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:6E:04:31:B5:85:2B:90:26:7A:5C:0A:ED:1B:17:A5:EC:60:A5:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/A16E0431B5852B90267A5C0AED1B17A5EC60A541.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/22
                IPv6:
                  2804:2794::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263911

    Signature Algorithm: sha256WithRSAEncryption
         95:96:90:4d:55:b4:b4:71:e4:d6:8a:b9:44:5d:3f:72:b0:4c:
         15:b5:e6:e3:2d:60:43:1d:80:71:32:cf:29:9d:f7:4d:4e:4d:
         91:70:22:1e:67:88:4b:04:30:9b:9c:b7:38:2d:e2:b2:2a:bf:
         e7:99:21:34:01:da:5d:96:b5:c9:63:ae:6c:bf:35:52:78:d6:
         6b:15:fa:1b:84:34:62:1f:9f:a3:34:7c:11:a2:81:15:7c:5c:
         b6:6f:90:ec:34:5f:6b:4f:ec:47:67:82:ef:03:0b:ad:76:79:
         55:53:50:79:78:1b:30:53:38:96:bb:58:17:67:91:82:82:f8:
         b2:87:db:01:9b:01:58:d9:9c:d3:81:d2:86:95:b3:60:14:c5:
         27:e2:c0:98:a7:c4:d2:5f:f9:06:0d:54:6f:a9:ed:22:93:54:
         62:74:68:74:b4:22:ad:f0:48:38:50:89:be:3f:10:d0:12:92:
         6e:07:2f:da:7b:46:d8:e8:fa:05:56:c8:2e:fd:a1:a7:48:c1:
         8b:9c:b9:4c:ba:05:52:8f:04:19:1a:bb:2d:28:58:65:ba:14:
         98:11:9c:f0:b5:09:a6:fd:07:8b:45:1f:f9:f2:6e:c2:e9:e3:
         fc:d4:f0:43:32:b2:7d:a5:ef:47:ff:25:3b:83:fd:bc:fe:61:
         6e:6f:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org