Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68770DD8DB908120874A5AF20884A75E4E124513.cer
File:                     68770DD8DB908120874A5AF20884A75E4E124513.cer (raw, json)
Hash identifier:          pDkphVIIGknb8+7za6V7gkDRVr17FuxpILPc5cGYQaU=
Subject key identifier:   68:77:0D:D8:DB:90:81:20:87:4A:5A:F2:08:84:A7:5E:4E:12:45:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E05F7A324F0EC00B037D512D0AE2D1F4C205693
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/68770DD8DB908120874A5AF20884A75E4E124513.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 14:28:18 +0000
Certificate not after:    Tue 02 Apr 2024 14:33:18 +0000
Subordinate resources:    AS: 28352
                          IP: 187.0.48.0/20
                          IP: 189.51.192.0/20
                          IP: 2804:ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:05:f7:a3:24:f0:ec:00:b0:37:d5:12:d0:ae:2d:1f:4c:20:56:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 14:28:18 2023 GMT
            Not After : Apr  2 14:33:18 2024 GMT
        Subject: CN=68770DD8DB908120874A5AF20884A75E4E124513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:ae:17:94:7e:40:f7:7a:8e:b8:08:23:cc:
                    9e:e9:c1:68:94:3f:38:ea:78:41:60:76:0d:50:62:
                    56:cc:83:bb:5e:d3:27:18:ee:de:a1:8c:c0:55:f7:
                    d8:19:19:96:7a:74:22:62:a3:03:40:5c:b8:db:8e:
                    c9:af:fd:9b:58:b8:34:71:e3:6f:42:ae:99:51:fc:
                    e4:72:0e:3d:9f:7a:d7:d5:b5:c0:71:6d:78:1c:f5:
                    95:d3:d3:02:18:eb:b1:89:25:35:2e:07:5f:be:76:
                    d4:20:b2:38:45:9a:b0:4b:48:42:60:52:f5:ca:29:
                    4d:8c:21:6d:25:f2:d1:a2:0a:22:ad:d2:8d:59:1f:
                    e3:d2:b4:2c:b5:7e:d5:b5:99:2a:a5:21:f4:ca:80:
                    94:4d:4c:24:a3:8e:97:f8:de:c9:68:b9:4c:83:86:
                    09:5d:ce:6c:9a:3c:2a:7d:40:f2:fa:76:3c:9c:3f:
                    b5:f4:4a:1b:71:df:91:62:2d:43:ad:16:99:86:69:
                    2e:06:57:db:3f:12:46:a4:e3:9b:a7:8c:26:c8:b9:
                    83:43:01:57:3f:88:36:5d:e5:c7:b1:6f:6a:e8:8f:
                    72:89:23:04:54:db:54:08:02:0e:1c:1d:4e:86:12:
                    9e:bb:57:f4:68:6a:e1:42:28:bf:b8:40:2d:eb:ec:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:77:0D:D8:DB:90:81:20:87:4A:5A:F2:08:84:A7:5E:4E:12:45:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/68770DD8DB908120874A5AF20884A75E4E124513.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20
                  189.51.192.0/20
                IPv6:
                  2804:ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28352

    Signature Algorithm: sha256WithRSAEncryption
         29:17:07:e7:0d:ab:c7:f8:10:a6:ef:30:12:e2:00:42:16:69:
         5d:cc:ae:43:39:82:41:ea:30:3f:61:0a:f0:7e:d1:14:c9:e8:
         e6:34:19:73:4a:6e:93:29:dd:0f:3e:4e:be:94:49:62:3f:5e:
         8b:94:6e:ec:2f:10:48:54:a8:d6:e6:a1:e2:33:fe:13:da:12:
         88:c2:bc:f9:10:b3:05:4c:6f:f5:77:91:9d:5d:a5:bb:ea:13:
         95:55:68:5e:07:a5:fb:66:b1:88:bd:0d:ac:cb:6b:05:8d:e8:
         37:8d:14:72:5b:d4:19:52:80:6b:85:4e:6f:9c:1a:26:94:d3:
         06:79:02:86:96:7c:ed:f4:3f:37:d8:75:4c:0e:91:ba:4e:f6:
         1c:98:14:be:d5:64:94:38:4b:f3:de:e8:6b:47:76:fb:fe:7c:
         31:78:76:cc:e3:11:f8:a5:5a:d9:36:25:59:6d:e4:c1:0c:30:
         e3:bc:61:28:61:b8:83:f6:01:0f:b8:66:ef:1e:25:78:19:13:
         3a:b7:7a:fd:72:32:29:7b:cb:d7:fd:d1:01:60:04:6d:25:72:
         57:57:7d:93:b6:1c:11:6c:9f:e6:1c:1f:78:65:7d:83:4d:1d:
         e2:2c:42:a5:e7:ae:29:55:74:ec:aa:bf:21:8d:38:c5:0b:93:
         9b:b5:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org