Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/068D66B7337D24F9C661DF44896AE6F9199F7F12.cer
File:                     068D66B7337D24F9C661DF44896AE6F9199F7F12.cer (raw, json)
Hash identifier:          brsm2q/K1W36KGRp1lVHXpiFN/OALTEu9uYw0avlZYw=
Subject key identifier:   06:8D:66:B7:33:7D:24:F9:C6:61:DF:44:89:6A:E6:F9:19:9F:7F:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3386C195DA74223868910FBBC32803B9F46D1E03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/068D66B7337D24F9C661DF44896AE6F9199F7F12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 19:49:50 +0000
Certificate not after:    Tue 12 Nov 2024 19:54:50 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:86:c1:95:da:74:22:38:68:91:0f:bb:c3:28:03:b9:f4:6d:1e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 19:49:50 2023 GMT
            Not After : Nov 12 19:54:50 2024 GMT
        Subject: CN=068D66B7337D24F9C661DF44896AE6F9199F7F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:92:da:85:70:5e:db:9a:46:2b:32:dc:fd:
                    4f:25:49:cd:0b:01:87:f3:29:54:f8:22:bc:7d:36:
                    25:a1:2a:35:fa:ac:ae:d7:59:f7:10:6d:f5:1a:97:
                    de:6c:64:22:9b:07:37:fe:82:52:d1:fa:36:16:e8:
                    3d:c1:77:bc:89:5f:05:a1:99:1e:93:a6:17:a7:1c:
                    66:65:80:0e:14:75:a8:97:cc:ba:dc:6d:79:78:81:
                    25:6b:8f:33:43:0e:99:01:e6:04:0a:c5:21:de:de:
                    03:e2:2e:0d:a4:0c:26:d6:ef:cd:88:12:7e:bf:7c:
                    5e:7d:d9:ec:96:b9:13:e1:8b:19:53:37:20:ad:0d:
                    23:4d:42:a8:08:00:db:d4:42:84:f6:2b:c2:3a:1c:
                    d9:0b:5e:13:4a:1c:6d:9e:ad:fb:64:49:7a:d1:7b:
                    11:80:48:77:0f:68:d4:62:e8:a8:09:68:c5:4b:45:
                    ee:55:3a:5f:ec:ff:49:96:42:e7:37:81:05:7d:ae:
                    6f:21:72:96:b1:af:e0:0c:d6:8e:77:9c:26:46:6f:
                    d0:ab:d7:3a:a9:89:8d:30:8d:06:f8:d5:5f:8b:58:
                    94:23:d4:f5:1e:76:35:e4:e5:6b:a1:40:8a:4e:da:
                    b0:49:23:c0:bd:32:f7:45:68:fc:76:b8:9a:8e:e0:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:8D:66:B7:33:7D:24:F9:C6:61:DF:44:89:6A:E6:F9:19:9F:7F:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/068D66B7337D24F9C661DF44896AE6F9199F7F12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:cd:97:c0:f3:be:00:94:68:39:8c:e3:6b:60:48:3a:a3:
         ed:6b:8a:76:86:7d:39:df:45:6c:95:70:4b:8a:20:1f:71:37:
         da:a7:86:47:b2:3a:74:52:99:4c:49:d7:c0:63:51:81:29:4e:
         7f:d2:95:e3:c5:bd:3b:77:5f:09:1e:bf:4c:cf:f2:7e:a0:5a:
         bb:4b:6a:1b:cb:57:5a:9b:e0:f6:7b:91:35:96:21:70:27:e5:
         e7:51:c4:b3:cb:84:66:b7:91:ae:d1:98:f1:05:e2:01:27:80:
         3f:c2:17:e8:c9:5c:8f:ee:a3:bb:c9:ea:e7:9e:1a:13:3a:78:
         5b:ef:36:ab:59:0a:29:e4:49:af:e7:4e:08:d0:11:b4:7a:c2:
         0f:40:89:df:58:01:55:b0:ed:fe:5a:59:50:11:43:b0:12:67:
         ec:eb:7a:d6:96:5c:29:7e:dd:95:63:ba:81:15:b7:69:3a:0a:
         1d:f6:8a:97:52:4e:fa:9f:e6:9b:8e:db:e0:4e:9f:6f:c4:b8:
         78:bf:32:6f:bb:f9:ce:38:9d:4a:27:8b:bf:b8:79:a0:f8:97:
         bc:a5:a9:0f:73:cc:89:2b:10:71:0f:99:bd:40:ce:89:1c:47:
         c0:1b:db:f4:4b:7d:ed:a5:78:3b:f1:a0:c2:09:ff:20:12:0e:
         d1:1c:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:30 2025 by rpki-client