Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.cer
File:                     CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.cer (raw, json)
Hash identifier:          u1NSyM5o8XtvyByGm2jLMvJjNDEinmW0CY0Qj/U/c+M=
Subject key identifier:   CA:16:6B:FF:C8:8F:E3:9C:DB:C0:37:FB:B0:A3:8C:02:5D:B2:E7:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2CB29F48C419770C2058CA09DF15FB15996A9C95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 11:16:43 +0000
Certificate not after:    Thu 16 Jan 2025 11:21:43 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b2:9f:48:c4:19:77:0c:20:58:ca:09:df:15:fb:15:99:6a:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 11:16:43 2024 GMT
            Not After : Jan 16 11:21:43 2025 GMT
        Subject: CN=CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:65:2a:ee:6e:30:94:77:4e:16:b0:33:2b:
                    53:c6:b8:88:5e:8a:88:59:3f:3d:d2:8f:2f:28:5c:
                    2d:f7:8f:31:3d:ba:f0:5f:32:5f:ee:cd:2a:65:14:
                    3d:63:35:39:0f:76:ee:35:e9:62:32:68:91:65:ac:
                    67:78:d5:cf:96:de:b8:a7:d9:71:4b:e1:85:53:e5:
                    ef:ff:2a:4e:e4:c0:ea:0d:69:82:de:53:5e:ba:4a:
                    a1:04:79:40:a2:12:d5:ae:d1:10:c5:af:6e:9d:f5:
                    82:36:2e:5a:aa:56:22:db:61:a8:8b:7d:79:15:a0:
                    d8:c8:8c:23:ec:66:c3:f1:e0:94:f6:e6:33:85:f4:
                    e0:59:03:49:0e:09:72:14:30:22:a0:a7:27:d7:aa:
                    c4:ad:48:d0:51:4c:68:69:f7:d4:bc:b7:89:42:26:
                    2b:15:ba:ac:3f:62:98:8f:58:2a:54:d6:cd:d2:d3:
                    fd:3f:5c:34:c0:7d:b3:dd:d4:21:8d:87:1b:fe:a5:
                    7e:b7:ed:db:67:7f:3c:a4:91:d7:5b:f5:3e:dc:86:
                    7b:20:89:d8:61:79:47:a1:75:92:3d:6e:f2:98:bf:
                    0f:f0:3a:29:54:83:43:f7:4f:c2:d5:d1:e1:fe:c6:
                    81:a5:c7:5b:e1:bb:55:ef:0b:ce:9c:f9:50:b4:42:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:16:6B:FF:C8:8F:E3:9C:DB:C0:37:FB:B0:A3:8C:02:5D:B2:E7:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/CA166BFFC88FE39CDBC037FBB0A38C025DB2E7CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:05:d0:c6:81:83:d6:0e:9f:4e:73:85:4a:94:e2:e6:51:
         fb:05:26:d4:0b:d9:71:e2:6c:ae:31:f1:a8:6c:20:8d:9d:d5:
         f6:55:3e:8c:4b:39:39:ff:57:d0:aa:ff:ae:fd:e5:d0:45:6b:
         59:5b:df:36:e1:a3:70:27:0c:39:82:ee:34:b3:28:7a:4f:05:
         0d:ea:28:71:b5:08:f8:c4:7a:68:f1:17:20:5c:0a:c6:92:c9:
         27:d1:ce:0b:ce:2c:60:51:dd:92:bf:df:2a:be:c4:bc:79:57:
         a2:98:0f:9c:7b:c0:d9:e9:a9:b6:d1:1c:49:6a:f4:94:6f:e5:
         e9:71:71:f7:ba:f9:15:1e:18:4d:a8:3a:1b:3b:00:bd:c4:1b:
         eb:c8:e1:f7:d2:ed:25:c1:fc:a6:a3:55:40:16:26:5a:9f:77:
         aa:dc:ef:99:9e:0c:f2:1f:c7:3e:19:5e:02:f1:93:2e:30:78:
         63:b8:a4:7a:4b:21:88:c6:61:13:87:00:16:72:f1:a8:22:55:
         e5:fc:c1:b2:12:03:84:31:2d:ad:a7:0c:e8:bc:e9:7b:1c:5c:
         bb:90:3c:66:58:0d:0b:fc:89:20:94:cd:fd:57:05:8e:1c:a8:
         ad:1b:46:ae:86:8d:0e:cb:e2:7b:2f:64:81:fc:c9:80:1d:de:
         00:fe:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org