Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.cer
File:                     68752CE82B908FDC8106216DC10CB548D5A5EA40.cer (raw, json)
Hash identifier:          oaTZRmJdwQn1oSRlLD09hvfs3D/W6dnccu5RJAAt3oQ=
Subject key identifier:   68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3932F262205BC9CDD0E0B1972AFB720B91190BC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 01:33:35 +0000
Certificate not after:    Thu 05 Dec 2024 01:38:35 +0000
Subordinate resources:    AS: 264230
                          IP: 190.109.88.0/22
                          IP: 2804:2490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:32:f2:62:20:5b:c9:cd:d0:e0:b1:97:2a:fb:72:0b:91:19:0b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 01:33:35 2023 GMT
            Not After : Dec  5 01:38:35 2024 GMT
        Subject: CN=68752CE82B908FDC8106216DC10CB548D5A5EA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:6a:20:0a:1a:97:8a:e1:6c:c6:e5:40:65:
                    24:ae:a2:45:9d:7a:1f:b0:92:65:2b:42:d9:a5:7b:
                    44:60:80:cc:fe:da:88:bf:13:01:52:95:6d:00:86:
                    58:5c:7c:b5:7d:87:18:34:a2:2e:e2:06:2f:0d:5d:
                    a2:d2:54:bc:8d:8c:1c:c0:22:c6:c4:fe:8f:26:b3:
                    91:45:23:b1:12:73:19:bd:89:26:1a:c4:e3:cb:3d:
                    5b:1a:29:7e:93:ef:3c:15:de:fb:7c:bd:4f:33:5b:
                    25:d6:ad:60:ba:d4:30:fe:77:bd:3d:fe:c5:64:7b:
                    c9:33:16:87:3c:f1:db:d4:d9:a3:f0:e7:61:14:30:
                    6c:c0:20:3b:7c:4d:88:27:3b:a8:ac:48:ea:36:b8:
                    2e:d1:97:73:34:93:c0:79:bd:f0:41:d6:ad:a0:81:
                    7d:b2:7e:cd:d8:64:e2:7c:77:4f:6d:3d:af:0f:e5:
                    8a:90:25:eb:13:97:3d:23:0f:ff:d3:3b:f9:c8:36:
                    f7:9a:c9:c2:c3:47:b3:42:94:8a:e8:87:82:e0:e3:
                    79:34:40:c0:c8:43:7c:12:30:94:ed:d3:ae:7e:3a:
                    05:0f:e7:6b:c7:fd:00:77:14:63:05:e9:dd:4b:4e:
                    65:a0:cf:e5:f9:87:01:f3:01:6b:65:03:f1:f6:3f:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:75:2C:E8:2B:90:8F:DC:81:06:21:6D:C1:0C:B5:48:D5:A5:EA:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/68752CE82B908FDC8106216DC10CB548D5A5EA40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/22
                IPv6:
                  2804:2490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264230

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:12:ad:b3:30:92:50:69:56:84:80:3e:12:c4:49:4b:3a:
         5e:e5:4a:09:27:c5:dd:87:5c:97:2f:cd:1d:cb:db:b1:c3:4e:
         61:3b:22:8e:26:30:e2:9d:05:09:13:62:33:c2:6e:55:a1:e3:
         d1:82:b0:06:10:99:46:20:68:f4:6d:c6:4e:3d:35:d1:92:76:
         3f:a3:5b:2a:ce:63:8d:5c:e4:0a:8f:03:97:61:66:22:68:29:
         89:fe:dc:fb:e8:19:11:f1:10:67:5a:89:d7:93:53:5a:f1:5d:
         05:53:33:cc:46:c8:6f:65:3d:70:11:b1:3d:67:a4:a9:f7:66:
         38:fe:ad:ca:eb:d5:7e:d7:53:0e:ed:17:a6:92:8e:70:9b:74:
         ad:df:51:23:a6:d4:d1:9e:94:8b:38:d5:e6:83:08:91:d7:92:
         05:5d:cf:7f:da:f3:23:35:9d:bd:1f:26:4f:d2:6c:aa:59:2b:
         a0:c4:be:51:54:e0:8a:51:d6:d3:08:ca:41:11:95:1f:5c:a9:
         b0:b3:19:37:7c:7e:af:a8:4d:38:28:0c:dd:e3:a9:8f:26:d3:
         13:50:8a:d1:2e:b7:db:be:89:47:14:68:fe:6b:03:c6:8b:d0:
         ab:f4:02:6d:bb:61:24:7f:86:77:8c:2b:de:e7:66:50:b4:83:
         9e:56:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org