Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.cer
File:                     068E5C281A77E80F647945C31F9FF3ADD836C6BF.cer (raw, json)
Hash identifier:          MHHCnVZA8bWCZJi3GT3MYVlQBUkMA800mCVsCnW8Dmg=
Subject key identifier:   06:8E:5C:28:1A:77:E8:0F:64:79:45:C3:1F:9F:F3:AD:D8:36:C6:BF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7832C4864A114CF2DF85CFA97A72E4C16B2EE941
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 17:13:31 +0000
Certificate not after:    Wed 16 Oct 2024 17:18:31 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:32:c4:86:4a:11:4c:f2:df:85:cf:a9:7a:72:e4:c1:6b:2e:e9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 17:13:31 2023 GMT
            Not After : Oct 16 17:18:31 2024 GMT
        Subject: CN=068E5C281A77E80F647945C31F9FF3ADD836C6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:85:9d:cb:ce:b2:4f:ba:06:1a:56:ef:43:
                    84:ed:e9:eb:c2:ae:d9:63:39:1b:94:7b:39:60:ee:
                    6c:a3:53:93:1b:cb:b8:8e:72:da:31:dc:ba:3a:eb:
                    53:6a:e1:70:69:d0:99:a3:2f:6a:d4:98:0b:d5:b1:
                    d3:01:83:89:30:f4:0e:af:c1:10:eb:34:6e:4f:43:
                    03:fc:14:e7:b8:8e:d8:38:ad:a6:b7:ee:c0:e9:83:
                    13:58:49:10:69:6f:76:cd:bf:4f:23:8a:b1:fb:8b:
                    75:b4:f7:d3:ca:a1:76:9c:12:30:13:ec:0a:f9:e7:
                    1d:b6:5a:c3:e4:f0:d1:0c:e5:3d:7b:1e:2a:78:0d:
                    d3:46:d6:43:ed:16:13:b4:af:bd:09:d2:4b:1f:f8:
                    9f:bd:32:5b:22:a2:ca:f7:61:9c:05:87:db:18:14:
                    aa:68:6c:c6:0f:78:24:e5:89:ee:9a:ad:80:ba:4b:
                    e5:05:c4:17:8d:c9:2e:f8:97:48:e0:f6:77:b0:97:
                    b0:7a:e6:2a:5e:41:a9:e7:75:dd:d3:99:1f:67:fd:
                    1c:e0:4a:ad:10:e8:84:e5:f0:85:98:75:b1:5a:87:
                    96:b3:f2:2f:f6:95:0e:90:a4:2d:31:39:a4:f9:da:
                    99:ce:6c:05:07:e6:f9:36:4e:2a:63:34:85:6c:39:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:8E:5C:28:1A:77:E8:0F:64:79:45:C3:1F:9F:F3:AD:D8:36:C6:BF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/068E5C281A77E80F647945C31F9FF3ADD836C6BF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         21:87:2e:07:3d:5e:8f:53:ce:94:19:4f:f8:db:bf:90:a1:0d:
         e0:db:18:51:15:28:aa:43:e9:52:72:95:62:10:6d:da:0e:de:
         37:82:92:fc:f8:d8:a9:5d:00:04:cf:30:7e:f2:23:15:0e:b7:
         df:0e:df:94:52:84:04:a0:1c:d6:94:f5:01:00:2b:f1:47:69:
         76:4e:c7:f1:76:a0:fc:b5:ab:2b:b0:ca:21:58:4b:5a:f2:f3:
         f2:b5:ce:ef:c0:b0:cc:8e:fd:29:c4:f2:c7:88:4e:cd:a6:47:
         b5:96:3b:a6:22:5c:00:28:6c:83:4c:a9:8c:74:cf:d5:92:8b:
         0f:1d:24:e7:a5:36:b6:48:ec:8e:4c:83:0d:95:23:62:70:8f:
         72:16:67:fe:89:04:47:10:8f:72:c5:3f:07:c4:c6:75:d8:45:
         d4:2a:db:1a:12:0c:21:5d:6a:56:41:c7:39:bc:7c:0f:b3:ca:
         b4:a3:94:1c:f2:38:b0:89:30:ba:ce:1d:03:eb:e6:e8:e9:c0:
         7f:e1:c3:6b:4d:4a:03:a1:9b:ad:44:7e:95:c6:16:2a:80:07:
         20:2c:91:e9:8c:8e:97:2d:d0:2a:cd:79:dd:05:63:c3:89:0f:
         bb:94:a4:ee:aa:b6:70:66:cc:6f:18:59:23:28:6f:22:11:b6:
         65:8a:0d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org