Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BD16F2B847E0139CFAFC4BEE47000DB403600343.cer
File:                     BD16F2B847E0139CFAFC4BEE47000DB403600343.cer (raw, json)
Hash identifier:          h5JHJv/7lHLyr+YzW/X36bHLBmKQIWsf8mzKm3J7N38=
Subject key identifier:   BD:16:F2:B8:47:E0:13:9C:FA:FC:4B:EE:47:00:0D:B4:03:60:03:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18D6864D86B45340820C0ADC5B1E7909F54B88D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/BD16F2B847E0139CFAFC4BEE47000DB403600343.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 12:56:04 +0000
Certificate not after:    Wed 22 May 2024 13:01:04 +0000
Subordinate resources:    AS: 271267
                          IP: 168.197.180.0/22
                          IP: 2804:78d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d6:86:4d:86:b4:53:40:82:0c:0a:dc:5b:1e:79:09:f5:4b:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 12:56:04 2023 GMT
            Not After : May 22 13:01:04 2024 GMT
        Subject: CN=BD16F2B847E0139CFAFC4BEE47000DB403600343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:a3:0d:d8:14:56:d1:53:08:c8:08:76:f7:
                    01:a5:28:0e:69:ba:fb:bf:c3:fd:33:56:70:9b:f9:
                    f7:3d:57:8b:fd:70:23:8c:74:2f:65:cb:60:58:7d:
                    8a:74:3c:d3:5d:83:3b:76:22:bf:7a:e0:e6:ab:e4:
                    e1:11:52:66:11:f3:84:73:14:34:c0:f6:77:71:6b:
                    ba:f8:d2:fa:49:9f:bc:a4:e5:ed:1f:f2:26:e5:dc:
                    46:64:88:49:bb:5c:4a:88:33:ee:ab:54:de:7a:44:
                    f9:6f:11:88:87:8c:65:d4:f0:cf:90:1e:82:9c:7e:
                    9d:33:22:35:74:da:eb:6a:53:e4:2b:be:30:53:c2:
                    c0:1e:ac:7c:db:c3:d0:6c:aa:51:38:c5:c7:69:94:
                    8a:f3:11:f5:23:17:95:c2:c0:c9:91:3d:c9:02:89:
                    6b:0d:3d:dc:85:08:59:8c:d6:d4:80:2e:ea:e9:e6:
                    02:6a:ac:4a:69:9e:95:2b:3b:97:a8:fc:de:76:51:
                    60:aa:53:24:a8:5e:19:1c:b6:80:55:a0:20:99:4f:
                    1f:5b:42:55:48:b7:09:42:d3:69:4e:d1:2a:ba:1a:
                    28:a5:58:13:8a:ea:f7:f8:b6:d5:1d:2b:bf:29:ff:
                    10:d2:f8:b4:65:07:c3:37:59:25:f8:47:5d:78:dd:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:16:F2:B8:47:E0:13:9C:FA:FC:4B:EE:47:00:0D:B4:03:60:03:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/BD16F2B847E0139CFAFC4BEE47000DB403600343.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/22
                IPv6:
                  2804:78d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271267

    Signature Algorithm: sha256WithRSAEncryption
         74:db:54:8c:6b:5a:23:fa:92:ba:c0:30:48:f7:e6:ac:fb:16:
         7f:da:36:3e:eb:3b:cd:2e:fb:be:22:85:5d:d0:49:c9:c2:f2:
         1b:77:21:9f:be:e2:d0:b6:aa:76:a7:ff:e7:33:89:68:0e:9e:
         5a:5f:12:5b:b5:43:3a:86:90:1e:37:ae:f7:6a:1d:e2:cb:c8:
         84:8a:f8:cd:24:53:dc:00:4c:22:9c:d8:76:8e:00:ff:18:aa:
         85:33:d4:22:59:a3:ad:44:a9:54:74:a9:a1:1d:81:c6:81:1d:
         04:94:71:da:7c:fe:7d:4b:d6:16:d9:a4:c9:e4:8d:6b:99:16:
         fe:be:fc:77:e4:8f:2e:89:1f:75:6a:20:00:04:b2:21:f1:0d:
         23:a7:ee:1a:65:c0:e4:56:fe:2a:06:af:e2:72:83:f1:b9:6e:
         bc:f8:78:4f:38:3f:9d:47:74:0f:d8:ee:4d:9f:fb:23:72:bc:
         1a:20:21:72:f1:8d:95:e1:1c:b8:61:d5:52:9b:47:a2:0f:03:
         fc:7c:a1:4f:dd:61:5d:8c:4b:83:f5:3a:ab:b3:d9:12:bd:40:
         ef:4c:63:52:f4:89:a9:98:61:c4:c8:30:08:24:d5:24:21:df:
         ba:db:38:db:b3:33:df:fb:12:b6:21:10:22:c9:71:66:83:ca:
         dc:ad:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org