Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer
File:                     6468A873ACEBE81402DD4AFEF8F2098C75E0383A.cer (raw, json)
Hash identifier:          F06kMKkAn+u0dYprzn/opurlFFhzc9cYcZ+WWgbfjSQ=
Subject key identifier:   64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BB693672A4F913461BB66575F1ADFAF34D59C75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 02:13:23 +0000
Certificate not after:    Mon 21 Oct 2024 02:18:23 +0000
Subordinate resources:    AS: 269018
                          IP: 45.178.116.0/22
                          IP: 2804:5e34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b6:93:67:2a:4f:91:34:61:bb:66:57:5f:1a:df:af:34:d5:9c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 02:13:23 2023 GMT
            Not After : Oct 21 02:18:23 2024 GMT
        Subject: CN=6468A873ACEBE81402DD4AFEF8F2098C75E0383A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:e1:23:a6:8d:dd:8f:d1:ef:37:29:8a:3d:
                    37:02:eb:4c:c2:c8:97:63:df:3d:20:2a:63:4d:cd:
                    bf:9b:a8:3a:ea:0d:f4:4c:af:81:48:ca:47:20:b4:
                    9d:a1:b7:df:ae:50:76:04:ec:1c:b4:85:a0:ed:d8:
                    15:c5:9c:4f:7a:da:c3:d0:ba:69:6b:99:ff:fd:2d:
                    83:03:d9:23:54:b9:e6:1c:c1:cb:06:ea:29:07:0c:
                    24:85:eb:89:dd:0e:c3:4b:b0:04:6a:d8:6a:61:cb:
                    54:41:52:ec:00:da:9c:2a:30:41:a9:d6:d2:a1:49:
                    b4:7e:92:1c:f6:40:e4:6c:0f:7d:db:eb:0f:f5:5c:
                    d3:26:34:2b:87:e4:64:8f:1b:d9:cb:d9:8f:cc:01:
                    bd:47:b9:c7:9b:3d:cd:38:f2:ab:1e:52:f9:79:c3:
                    e8:f4:b3:58:a0:c4:3c:7f:d2:6a:1d:be:7b:9b:0e:
                    95:f0:d3:33:40:10:62:95:e2:f7:a6:c5:5a:09:4a:
                    3c:60:e1:83:79:c6:38:03:37:7a:43:13:a9:ab:60:
                    53:39:40:cd:ea:98:ae:1f:69:17:44:e6:2c:6c:f2:
                    1f:0e:fa:ed:31:ca:fb:e0:74:2b:b4:fc:03:d1:9f:
                    a1:01:c8:68:2b:6a:3f:cc:ce:a9:35:9e:d4:84:97:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:68:A8:73:AC:EB:E8:14:02:DD:4A:FE:F8:F2:09:8C:75:E0:38:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/0/6468A873ACEBE81402DD4AFEF8F2098C75E0383A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.116.0/22
                IPv6:
                  2804:5e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269018

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:13:73:f1:93:3f:10:70:93:a9:f0:ee:48:09:fc:6c:4c:
         b9:76:4c:55:54:4a:2a:80:b1:18:cd:ee:47:1c:0f:67:87:cd:
         81:58:ed:c9:25:fc:f4:bb:be:67:56:e3:48:01:b7:96:22:60:
         02:05:fa:39:55:36:56:07:5f:fd:b8:f9:e9:9a:7e:4c:12:f1:
         58:0a:4f:41:59:25:8b:83:61:64:23:bb:6e:cb:17:d4:a4:c7:
         d6:6b:64:97:11:23:df:4a:ab:e3:aa:d2:60:18:d7:c5:d2:fe:
         8f:8c:12:6a:22:49:70:a7:b3:c4:b7:88:bb:78:be:23:e7:b3:
         4f:bb:2a:ad:32:f2:18:7c:8f:73:4c:e9:23:ee:25:07:37:0f:
         e3:dd:7c:cb:29:88:37:74:6d:a2:db:7d:0f:b0:b5:cf:a2:c9:
         23:c7:e8:cc:d1:88:b8:bb:96:d2:7f:ef:5f:ec:6e:67:ac:3f:
         e2:a8:2c:64:b6:eb:cb:bd:2c:27:4e:aa:d7:b1:cb:0f:61:9c:
         be:f5:b1:f2:ae:ce:08:48:62:15:40:69:97:80:cc:70:7b:f7:
         fa:14:03:5d:e1:75:25:5c:fe:ed:35:fc:61:a7:84:4e:86:3c:
         91:a9:d4:bf:9f:6d:c3:e8:b5:e2:36:4c:c6:76:1d:cc:b5:16:
         31:85:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org