Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/16E38F8C2EC3023E81BF2F6B7DE38099F80EBFE5.cer
File:                     16E38F8C2EC3023E81BF2F6B7DE38099F80EBFE5.cer (raw, json)
Hash identifier:          VCYSJFQZHyeSb10vUT+S0A+VGkd/SdA8Hh0IGh0VnAU=
Subject key identifier:   16:E3:8F:8C:2E:C3:02:3E:81:BF:2F:6B:7D:E3:80:99:F8:0E:BF:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D0E1B39094CF9BEF0B80BC08B3854C7F70BF650
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/16E38F8C2EC3023E81BF2F6B7DE38099F80EBFE5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 15:02:53 +0000
Certificate not after:    Tue 23 Jan 2024 15:07:53 +0000
Subordinate resources:    AS: 271175
                          IP: 179.51.176.0/22
                          IP: 2804:7764::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:1b:39:09:4c:f9:be:f0:b8:0b:c0:8b:38:54:c7:f7:0b:f6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 15:02:53 2023 GMT
            Not After : Jan 23 15:07:53 2024 GMT
        Subject: CN=16E38F8C2EC3023E81BF2F6B7DE38099F80EBFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:e0:55:e2:c2:1b:c5:a1:bc:0e:51:bd:3a:
                    38:f4:94:51:8b:1c:9d:7c:e7:a5:6a:6d:99:82:ed:
                    cd:05:b3:ee:20:b7:fc:bd:82:03:86:e6:55:9b:8a:
                    39:8f:2a:4d:b2:e7:24:a4:68:38:84:9a:47:e1:af:
                    63:97:d3:b8:e5:2a:96:06:2a:cc:71:ab:1d:e0:ad:
                    f7:78:54:13:e3:b1:b7:3c:70:62:77:79:73:7f:3c:
                    35:df:e5:9f:ce:ec:30:44:25:a9:b9:1c:ae:6e:9e:
                    c5:da:1a:e0:7f:a1:f2:f1:79:68:e6:d0:75:72:dc:
                    79:84:32:54:95:2e:28:db:b5:8c:e0:95:c5:fe:03:
                    18:19:97:ca:a5:7a:ec:48:c7:fa:11:cb:12:8f:8b:
                    93:30:5b:4e:9d:d2:9a:fc:7c:8b:69:09:c6:cf:7c:
                    22:d7:cf:cc:5b:99:f9:66:5a:b0:f9:ba:91:fb:84:
                    58:bc:23:a2:b0:09:a5:fb:e0:27:a8:3a:ba:a6:a8:
                    23:8d:5f:39:a2:d5:43:2c:5f:98:e9:28:97:25:1e:
                    36:3c:0b:12:78:e6:e4:13:40:ca:59:9c:4f:49:70:
                    d3:4f:fc:2a:b8:f9:4c:ad:ce:f4:b4:52:0c:03:81:
                    61:fc:88:68:c7:8b:a1:97:a6:6a:23:5b:91:4f:9b:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:E3:8F:8C:2E:C3:02:3E:81:BF:2F:6B:7D:E3:80:99:F8:0E:BF:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/0/16E38F8C2EC3023E81BF2F6B7DE38099F80EBFE5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.176.0/22
                IPv6:
                  2804:7764::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271175

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:2d:f5:ac:de:47:ef:66:75:dd:48:6d:61:6b:38:bc:b3:
         b8:68:40:5f:b5:d8:a8:c5:c2:48:7d:11:5f:3a:96:00:66:11:
         a9:71:48:0e:99:8e:8d:4b:b5:91:6f:0f:5b:a7:b7:8a:4f:26:
         45:27:5e:81:15:c1:60:17:9d:03:8a:6c:23:8d:27:cd:67:9b:
         3d:b0:e9:76:a2:fa:09:4f:f0:75:37:63:65:59:1b:37:1f:83:
         2f:31:fc:74:b9:b6:38:a6:3e:71:46:92:2d:0c:98:c3:a9:33:
         1a:35:41:6f:6e:23:c2:46:d3:e6:74:69:d5:ea:ea:96:70:82:
         d2:e7:fb:4d:c8:a6:a0:81:08:6e:02:01:ac:09:a3:37:ec:ea:
         79:ba:d9:b1:3f:d1:fa:cf:d5:bc:1d:1f:30:1d:d1:07:d7:e5:
         bf:20:76:18:a8:d3:f8:06:cc:dc:36:a0:09:a2:dc:53:22:87:
         7e:2d:02:08:6d:f8:bc:bb:ab:e3:0c:17:16:33:ec:75:c3:24:
         a5:09:78:2f:2c:ec:d8:28:9e:89:c7:a8:b8:5a:2c:ac:d4:db:
         02:53:ce:07:cc:e8:a1:32:20:75:ce:2b:1d:18:e6:1e:61:29:
         67:5e:5f:56:30:91:47:cf:13:4a:a4:4a:dd:ad:a6:c0:60:ca:
         ab:04:41:a1
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUTQ4bOQlM+b7wuAvAizhUx/cL9lAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMjQxNTAyNTNaFw0yNDAxMjMxNTA3NTNaMDMxMTAvBgNV
BAMTKDE2RTM4RjhDMkVDMzAyM0U4MUJGMkY2QjdERTM4MDk5RjgwRUJGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ+BV4sIbxaG8DlG9Ojj0lFGL
HJ1856VqbZmC7c0Fs+4gt/y9ggOG5lWbijmPKk2y5ySkaDiEmkfhr2OX07jlKpYG
Ksxxqx3grfd4VBPjsbc8cGJ3eXN/PDXf5Z/O7DBEJam5HK5unsXaGuB/ofLxeWjm
0HVy3HmEMlSVLijbtYzglcX+AxgZl8qleuxIx/oRyxKPi5MwW06d0pr8fItpCcbP
fCLXz8xbmflmWrD5upH7hFi8I6KwCaX74CeoOrqmqCONXzmi1UMsX5jpKJclHjY8
CxJ45uQTQMpZnE9JcNNP/Cq4+UytzvS0UgwDgWH8iGjHi6GXpmojW5FPmzuDAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQW44+MLsMCPoG/
L2t944CZ+A6/5TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FRnpweEZtVGhhTDdRbm5VajlwaFdGdm5DcnVoR0ZoeUZv
VUxRblU3V2JrbS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FRnpweEZtVGhhTDdRbm5VajlwaFdGdm5DcnVoR0ZoeUZv
VUxRblU3V2JrbS8wLzE2RTM4RjhDMkVDMzAyM0U4MUJGMkY2QjdERTM4MDk5Rjgw
RUJGRTUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArMzsDANBAIAAjAHAwUA
KAR3ZDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEI0cwDQYJKoZIhvcNAQELBQAD
ggEBAA3HLfWs3kfvZnXdSG1hazi8s7hoQF+12KjFwkh9EV86lgBmEalxSA6Zjo1L
tZFvD1unt4pPJkUnXoEVwWAXnQOKbCONJ81nmz2w6Xai+glP8HU3Y2VZGzcfgy8x
/HS5tjimPnFGki0MmMOpMxo1QW9uI8JG0+Z0adXq6pZwgtLn+03IpqCBCG4CAawJ
ozfs6nm62bE/0frP1bwdHzAd0QfX5b8gdhio0/gGzNw2oAmi3FMih34tAght+Ly7
q+MMFxYz7HXDJKUJeC8s7NgononHqLhaLKzU2wJTzgfM6KEyIHXOKx0Y5h5hKWde
X1YwkUfPE0qkSt2tpsBgyqsEQaE=
-----END CERTIFICATE-----