Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/768AAA9700517D128A63CE1F9298A0EA43579CF9.cer
File:                     768AAA9700517D128A63CE1F9298A0EA43579CF9.cer (raw, json)
Hash identifier:          FPNnP3E+NIdYPpBnRpm2BCUJUTjLibybfMA/gpO2lX4=
Subject key identifier:   76:8A:AA:97:00:51:7D:12:8A:63:CE:1F:92:98:A0:EA:43:57:9C:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       205932CFDB9BD71092E6C8FB7CF501388FF5557E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/1/768AAA9700517D128A63CE1F9298A0EA43579CF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 21:10:33 +0000
Certificate not after:    Mon 09 Sep 2024 21:15:33 +0000
Subordinate resources:    AS: 272674
                          IP: 179.63.48.0/22
                          IP: 2804:86e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:59:32:cf:db:9b:d7:10:92:e6:c8:fb:7c:f5:01:38:8f:f5:55:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 21:10:33 2023 GMT
            Not After : Sep  9 21:15:33 2024 GMT
        Subject: CN=768AAA9700517D128A63CE1F9298A0EA43579CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:de:65:fc:05:92:f8:ff:83:8a:0f:a3:c4:
                    09:c6:22:9b:f0:90:8e:6a:51:73:0d:38:13:51:4b:
                    46:be:05:2b:55:fd:7f:3a:5c:ef:a0:a4:9a:a6:0e:
                    90:82:ef:b3:98:ff:4a:18:d7:66:56:08:55:06:a2:
                    87:2a:97:db:23:a3:e0:37:ca:a2:65:87:9c:3e:14:
                    79:de:1f:0d:d6:96:ce:26:c4:8b:0b:77:c9:f8:46:
                    71:59:f1:84:4f:1e:ae:cf:51:59:f6:1e:c7:46:a2:
                    a9:fb:ac:b6:05:a7:91:60:09:c8:5f:b2:e8:91:67:
                    c0:dd:a1:fe:f3:85:07:e8:cf:77:cf:57:37:25:08:
                    41:ec:1e:f5:7f:5e:82:1f:0b:30:70:b6:34:2d:9a:
                    b7:bf:ba:52:b0:b6:ed:78:c1:66:2a:6d:10:e9:a5:
                    43:d2:e3:f0:3d:fb:74:d1:33:61:dc:42:c6:59:72:
                    c1:69:e7:1f:51:17:3e:d6:d6:9e:15:5b:86:9a:e4:
                    38:81:e9:b4:31:54:ed:42:56:c3:d5:9c:a6:3b:d4:
                    21:09:5d:13:da:78:18:a3:06:85:1a:fb:d6:95:4e:
                    03:8e:fb:8b:29:a7:0b:b6:79:8e:41:76:27:d1:ef:
                    62:34:0b:fe:c5:ab:24:fd:01:6c:ea:1a:7f:a8:55:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:8A:AA:97:00:51:7D:12:8A:63:CE:1F:92:98:A0:EA:43:57:9C:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5i86wV5qFb7NJkDUnQqFq6PPn47Y97iipcF1hvG4mPdG/1/768AAA9700517D128A63CE1F9298A0EA43579CF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.48.0/22
                IPv6:
                  2804:86e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272674

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:00:2d:f1:06:37:c6:d2:84:36:89:47:ad:f0:a3:e4:5c:
         ef:ec:82:7a:c8:6a:35:e5:e3:db:3d:4c:88:03:29:8d:b3:46:
         f8:2f:b6:f5:65:43:42:4f:ce:f7:26:a9:56:e4:8a:c4:aa:bc:
         39:03:7d:65:57:b9:41:e0:d5:f4:b9:af:60:1b:0c:a1:d6:5b:
         2d:35:3e:4c:12:8b:ec:0f:10:09:bf:ba:11:21:f4:ad:b2:29:
         a7:2a:2e:c1:5c:54:4f:97:69:9c:27:a7:b0:b2:72:97:d0:4d:
         51:4c:87:73:f1:ea:78:69:61:66:e8:ca:d9:13:f8:b3:3d:40:
         ee:7b:6c:3d:3b:1a:da:07:c7:99:9e:60:dd:db:8b:06:c8:2d:
         d4:50:d0:b1:ce:5b:2d:24:cb:71:18:e6:dc:f0:3e:25:f6:3f:
         ad:d6:e3:69:b3:06:cc:f8:4a:a8:01:da:0a:5a:cc:46:ff:c6:
         a7:9c:34:d9:19:07:5b:37:4a:6c:e9:79:ee:6c:5b:02:18:77:
         30:e0:65:76:9e:b2:ac:87:96:b2:f5:fd:cc:2e:c8:89:eb:9e:
         b3:02:ff:06:77:67:1f:9e:cc:4e:a8:00:95:13:1c:f2:c9:87:
         65:75:d3:12:0a:cb:c4:bc:88:68:f0:79:00:8f:78:a7:8f:b6:
         da:1f:75:5a
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUIFkyz9ub1xCS5sj7fPUBOI/1VX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA5MTEyMTEwMzNaFw0yNDA5MDkyMTE1MzNaMDMxMTAvBgNV
BAMTKDc2OEFBQTk3MDA1MTdEMTI4QTYzQ0UxRjkyOThBMEVBNDM1NzlDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8s95l/AWS+P+Dig+jxAnGIpvw
kI5qUXMNOBNRS0a+BStV/X86XO+gpJqmDpCC77OY/0oY12ZWCFUGoocql9sjo+A3
yqJlh5w+FHneHw3Wls4mxIsLd8n4RnFZ8YRPHq7PUVn2HsdGoqn7rLYFp5FgCchf
suiRZ8Ddof7zhQfoz3fPVzclCEHsHvV/XoIfCzBwtjQtmre/ulKwtu14wWYqbRDp
pUPS4/A9+3TRM2HcQsZZcsFp5x9RFz7W1p4VW4aa5DiB6bQxVO1CVsPVnKY71CEJ
XRPaeBijBoUa+9aVTgOO+4sppwu2eY5BdifR72I0C/7FqyT9AWzqGn+oVZ4DAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2iqqXAFF9Eopj
zh+SmKDqQ1ec+TAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81aTg2d1Y1cUZiN05Ka0RVblFxRnE2UFBuNDdZOTdpaXBj
RjFodkc0bVBkRy8xLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNWk4NndWNXFGYjdOSmtEVW5RcUZxNlBQbjQ3WTk3aWlw
Y0YxaHZHNG1QZEcvMS83NjhBQUE5NzAwNTE3RDEyOEE2M0NFMUY5Mjk4QTBFQTQz
NTc5Q0Y5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAKzPzAwDQQCAAIwBwMF
ACgEhugwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCkiMA0GCSqGSIb3DQEBCwUA
A4IBAQB7+wAt8QY3xtKENolHrfCj5Fzv7IJ6yGo15ePbPUyIAymNs0b4L7b1ZUNC
T873JqlW5IrEqrw5A31lV7lB4NX0ua9gGwyh1lstNT5MEovsDxAJv7oRIfStsimn
Ki7BXFRPl2mcJ6ewsnKX0E1RTIdz8ep4aWFm6MrZE/izPUDue2w9OxraB8eZnmDd
24sGyC3UUNCxzlstJMtxGObc8D4l9j+t1uNpswbM+EqoAdoKWsxG/8annDTZGQdb
N0ps6XnubFsCGHcw4GV2nrKsh5ay9f3MLsiJ656zAv8Gd2cfnsxOqACVExzyyYdl
ddMSCsvEvIho8HkAj3inj7baH3Va
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org