Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.cer
File:                     16EF16307A5A4FC5F190F19B6D7583DB1462B96A.cer (raw, json)
Hash identifier:          ek9ptzkQz+Ga2WyvQncp7+hO8XFaSXNl7EHZlKVXGQM=
Subject key identifier:   16:EF:16:30:7A:5A:4F:C5:F1:90:F1:9B:6D:75:83:DB:14:62:B9:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BE0106361CF7554C3680208C217CD500C787413
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 13:45:32 +0000
Certificate not after:    Thu 03 Apr 2025 13:50:32 +0000
Subordinate resources:    AS: 268349
                          IP: 45.239.4.0/22
                          IP: 2804:4fc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:10:63:61:cf:75:54:c3:68:02:08:c2:17:cd:50:0c:78:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 13:45:32 2024 GMT
            Not After : Apr  3 13:50:32 2025 GMT
        Subject: CN=16EF16307A5A4FC5F190F19B6D7583DB1462B96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:07:4b:af:74:86:4d:8a:b6:b4:5d:ef:6a:
                    39:9b:15:f9:a2:51:6e:b5:65:56:59:22:bd:68:8c:
                    e8:a6:4b:b1:8f:83:37:ac:7c:ec:eb:58:70:98:84:
                    2e:81:45:06:d9:62:e2:10:a0:52:36:5e:19:64:69:
                    b4:23:5b:c5:88:d3:f0:f0:ff:6e:92:e5:c1:67:4e:
                    a9:16:d8:ec:c5:12:37:c3:db:2b:9f:28:24:66:a9:
                    62:9e:5d:90:05:05:67:2f:14:01:61:47:4f:66:6a:
                    33:ef:d1:6b:8c:21:f3:2f:f3:8c:5b:05:e8:f4:be:
                    1b:15:01:3a:a5:25:e4:64:b7:38:11:89:40:56:d2:
                    4e:ab:77:c3:47:da:b8:64:fd:99:0d:a1:67:38:ba:
                    d1:36:39:e1:0d:19:73:ab:93:90:3e:5c:d0:b3:90:
                    54:1a:50:a8:a5:7f:7f:f7:f8:a4:7a:3a:18:55:10:
                    f1:79:fd:b7:f7:ad:0c:4a:27:cb:3d:8b:2c:bd:31:
                    d0:55:20:f4:3e:bd:b9:9e:14:e3:13:90:38:b3:38:
                    f5:cf:ad:a4:db:c5:de:0e:a3:4e:2a:d8:d8:1f:91:
                    4f:9f:1a:8b:fd:08:c2:bb:b9:65:e5:12:3c:87:1b:
                    6b:36:43:3c:45:b9:34:51:6d:28:42:70:a5:a7:c5:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:EF:16:30:7A:5A:4F:C5:F1:90:F1:9B:6D:75:83:DB:14:62:B9:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/22
                IPv6:
                  2804:4fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268349

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:2d:f7:91:34:9c:1a:f9:94:89:34:77:e8:e1:07:f8:48:
         80:22:17:1d:18:3d:48:b2:8c:11:70:70:dc:6c:28:6a:1d:0f:
         5d:14:c6:c5:1d:74:48:a6:ee:da:bf:c7:8a:91:9d:41:98:54:
         02:96:d4:9c:07:8a:8c:2b:0b:65:dc:4c:b1:97:ad:a5:b9:33:
         37:44:92:d2:45:f1:b5:6d:f6:fc:67:9e:ec:0d:b9:f2:60:45:
         61:16:ef:bb:0c:13:11:54:5b:1d:52:90:e4:80:d5:b2:12:10:
         32:1e:40:22:21:64:05:34:0e:fa:6c:fa:60:ea:6a:34:52:be:
         94:91:8a:23:c6:a4:88:77:5e:f5:d7:e4:1b:ee:e1:94:61:25:
         32:8f:34:20:c6:7b:9b:f5:ab:fd:39:fa:0e:55:42:52:1f:13:
         dc:9e:4b:6b:00:94:75:5c:7b:f4:a8:05:dd:4b:17:b6:b0:21:
         f6:16:c2:11:48:6e:34:fd:07:9d:38:2b:82:a2:c5:52:ef:ac:
         1c:6d:92:2f:62:cb:74:43:50:9a:21:b5:4f:6f:80:9f:14:23:
         61:2f:80:9d:47:96:db:85:cd:f9:f5:a3:ba:93:b6:80:27:70:
         69:2d:82:af:00:74:4e:c4:c7:1b:77:cc:29:8c:ce:1d:3c:42:
         74:76:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:32 2025 by rpki-client