Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer
File:                     B016900AD234CF99B5077C525DF4FFE7A750EAB2.cer (raw, json)
Hash identifier:          6YBHzI8nFlavnviSsftQezdiRLetUN2KFy+kUL5l7/U=
Subject key identifier:   B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       134579E5934FA0954FE77011AB1C16AE0ACDFB01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Jan 2024 02:54:27 +0000
Certificate not after:    Sat 04 Jan 2025 02:59:27 +0000
Subordinate resources:    AS: 52869
                          IP: 177.93.184.0/22
                          IP: 177.128.64.0/21
                          IP: 2804:1734::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:45:79:e5:93:4f:a0:95:4f:e7:70:11:ab:1c:16:ae:0a:cd:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  6 02:54:27 2024 GMT
            Not After : Jan  4 02:59:27 2025 GMT
        Subject: CN=B016900AD234CF99B5077C525DF4FFE7A750EAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:db:b3:0c:40:f2:3c:3a:7b:08:46:0b:59:f3:
                    33:35:84:0a:f4:15:a9:3d:03:39:5c:fc:23:8f:e6:
                    86:62:d9:d9:4e:73:bd:21:75:de:8e:ca:cb:6f:95:
                    45:de:23:62:0d:0b:a7:da:23:f8:71:95:f7:7d:e9:
                    86:27:ce:60:0e:3e:84:36:84:e3:11:f8:77:65:ce:
                    a5:57:07:55:9b:48:00:e0:b7:3d:5b:ab:f5:0f:49:
                    04:ec:ca:09:7a:20:67:58:98:ef:e2:6b:63:02:b2:
                    ff:1d:90:90:63:2f:61:f4:1e:58:e0:b0:72:60:44:
                    94:ea:3e:5d:5b:87:d3:da:a6:06:67:14:5f:0c:84:
                    b2:cd:66:c1:52:ae:9c:34:cd:19:1c:a8:19:c2:82:
                    f7:0d:93:25:85:69:d0:69:77:2b:e0:7f:60:e9:67:
                    3f:38:57:29:ec:03:b3:0e:fe:9a:98:45:83:72:73:
                    c0:e4:b5:fc:6d:c0:88:bf:2e:99:c3:8d:da:d8:14:
                    45:4f:db:c5:25:c8:76:a1:7a:ab:c1:b1:43:18:cd:
                    b5:07:31:6f:8d:a2:57:72:af:f1:e5:b6:13:42:8c:
                    1f:a2:3b:e4:6b:c0:f9:a1:3d:5d:3d:49:50:05:8e:
                    4d:5c:28:28:ea:cb:f4:99:db:a4:81:51:ab:6f:80:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:16:90:0A:D2:34:CF:99:B5:07:7C:52:5D:F4:FF:E7:A7:50:EA:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/0/B016900AD234CF99B5077C525DF4FFE7A750EAB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.184.0/22
                  177.128.64.0/21
                IPv6:
                  2804:1734::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52869

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:e1:95:d8:5c:0b:72:f4:f8:f1:c6:96:d0:48:43:d3:27:
         92:5e:0d:7e:90:0d:e1:f6:28:5e:ba:22:e6:08:e6:b8:74:aa:
         6f:0b:fa:b0:76:51:10:6e:2b:ba:f2:d6:03:26:37:03:12:ee:
         88:6f:19:08:5d:9a:54:d5:7e:08:9e:09:83:60:52:4d:26:b2:
         d0:6b:ab:52:8b:1b:3e:c1:53:63:e5:99:4b:86:ff:79:f9:5e:
         e5:e9:a7:38:a4:7b:7e:da:ec:2b:c7:fc:cf:fd:0e:a8:cf:3d:
         eb:23:d7:36:e3:86:64:23:cd:b7:78:52:5f:31:3e:62:40:65:
         57:bd:c3:9d:08:e7:35:51:7e:60:a8:c4:f9:39:e3:80:93:a5:
         bb:a0:d5:f1:5f:70:8e:63:de:a2:7f:30:91:f6:3e:ef:68:e0:
         4b:08:34:61:d8:69:d3:9d:72:71:bd:d0:2a:50:16:f4:4f:ea:
         47:c1:a6:e9:7c:ad:e1:86:a1:36:49:2b:87:2b:11:80:68:5a:
         d4:0c:4b:39:2f:9d:79:59:a8:4d:9b:50:91:da:63:6c:a3:0c:
         3b:fd:92:5e:12:ed:71:e0:77:f1:7e:7a:c3:e0:f6:08:d5:95:
         62:5d:f3:d7:34:8b:c2:4c:c3:2c:a5:bb:1f:93:ef:a9:e5:44:
         6c:4d:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org