Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68550B01EB5995FA784FEF214BA00FD20E64FDC4.cer
File:                     68550B01EB5995FA784FEF214BA00FD20E64FDC4.cer (raw, json)
Hash identifier:          L7kJIMKSqAC4tu9HSRzykceb8k58SeNVephHndSlQFk=
Subject key identifier:   68:55:0B:01:EB:59:95:FA:78:4F:EF:21:4B:A0:0F:D2:0E:64:FD:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44B201CC2E72E806FAE5F12B946DCBD85BF2CFEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/68550B01EB5995FA784FEF214BA00FD20E64FDC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 Feb 2024 17:01:23 +0000
Certificate not after:    Mon 03 Feb 2025 17:06:23 +0000
Subordinate resources:    AS: 270317
                          IP: 190.2.64.0/22
                          IP: 2804:6a2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b2:01:cc:2e:72:e8:06:fa:e5:f1:2b:94:6d:cb:d8:5b:f2:cf:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  5 17:01:23 2024 GMT
            Not After : Feb  3 17:06:23 2025 GMT
        Subject: CN=68550B01EB5995FA784FEF214BA00FD20E64FDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:4e:90:ba:18:bf:29:95:71:96:fb:f6:67:
                    b4:19:c0:ed:f0:b8:8b:70:ee:fb:13:e0:e7:a9:2c:
                    a3:41:29:3c:a6:cb:ee:ee:2c:bc:ce:f5:5a:06:52:
                    cc:2f:76:55:35:9c:6b:1e:13:d1:2b:5d:0b:e2:89:
                    31:11:0c:cd:af:cb:74:83:45:3c:e3:c2:9c:f1:1c:
                    9e:91:1a:39:3c:fc:32:73:9a:b4:25:93:87:cb:0c:
                    5b:4c:d3:ee:6d:7e:da:bd:71:64:a7:9d:3a:79:4d:
                    60:48:ba:1f:dd:0c:cf:14:44:d9:37:65:73:fe:2f:
                    e3:fa:06:d7:06:69:5d:0e:53:9c:da:96:5d:ab:55:
                    42:d7:c6:f5:06:b6:88:fa:e7:79:f6:08:bd:07:24:
                    0d:3e:91:3d:58:e8:c1:52:dd:6f:3f:b6:d2:7c:d6:
                    cc:63:98:83:af:53:b1:2c:35:a4:04:d8:97:d7:7c:
                    19:bd:e2:3d:55:5b:06:00:d3:7c:b8:d8:80:48:e3:
                    9a:8b:cc:5f:94:43:ab:a8:59:bc:83:3a:30:6a:1f:
                    77:85:76:7d:fa:56:4f:6f:9d:45:bd:cf:88:81:43:
                    1c:0d:1f:e7:8f:99:93:9e:70:9a:87:57:9e:d9:43:
                    0a:08:17:51:6e:c6:c0:1d:a5:16:d5:8c:33:36:84:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:55:0B:01:EB:59:95:FA:78:4F:EF:21:4B:A0:0F:D2:0E:64:FD:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7JVB7iFkHQcX4EWL58qKjUzirggoJZXdbhecpTW2tVBz/0/68550B01EB5995FA784FEF214BA00FD20E64FDC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.64.0/22
                IPv6:
                  2804:6a2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270317

    Signature Algorithm: sha256WithRSAEncryption
         92:b2:7c:12:9f:d7:2e:f0:52:32:e3:67:5a:02:af:7c:e7:d7:
         fc:24:c3:69:27:7b:81:80:57:bb:99:1a:0d:3b:a2:51:c4:26:
         08:5f:f9:19:ee:07:59:ca:ba:0c:a1:f3:28:c3:6f:16:08:b8:
         cd:3b:74:28:49:9b:ae:39:1b:41:6d:6c:ad:18:99:28:d6:14:
         39:93:df:66:30:99:83:ea:a3:de:b3:1c:16:4a:bb:19:c6:63:
         bb:bd:6c:8a:3c:7a:38:75:35:3c:ca:b6:59:29:2f:fa:40:78:
         e0:db:fc:b4:0a:fc:95:79:c4:fe:45:86:04:42:c6:80:2f:4e:
         5a:c6:ab:05:d4:ac:b8:1d:77:6e:7e:b4:80:11:ff:c3:41:c2:
         bc:34:12:8e:2f:a6:2a:6a:d4:00:67:cc:29:70:a3:85:20:33:
         50:56:8f:93:ea:cf:cd:00:59:b5:0a:40:01:de:69:d2:46:d3:
         25:a3:04:fe:84:97:c8:cb:ea:d2:4f:7c:30:14:f4:62:d0:a4:
         42:ed:8f:b3:7f:f7:7d:46:ff:54:3e:49:45:d5:ad:ca:14:4d:
         6c:6f:90:1d:e4:4a:4d:d1:15:7d:ea:c6:e6:5b:2f:35:db:bb:
         4b:75:e7:f2:79:5b:b4:e2:81:a5:1f:2e:07:71:d7:45:d6:c9:
         fa:80:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:10 2025 by rpki-client