Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer
File:                     68B54B5C6E66A7A25A9432A41DAB12D98C133C26.cer (raw, json)
Hash identifier:          HSJ82jLK2rTPEPJkZgfy5gIXgElbHzkY5nA0PF4EaOE=
Subject key identifier:   68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77A68AF8600EFB6A2D3CE18A998AE6CC528BEB6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 14:43:08 +0000
Certificate not after:    Sat 20 Jul 2024 14:48:08 +0000
Subordinate resources:    AS: 262408
                          IP: 168.0.240.0/22
                          IP: 177.38.160.0/21
                          IP: 2804:2d0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a6:8a:f8:60:0e:fb:6a:2d:3c:e1:8a:99:8a:e6:cc:52:8b:eb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 14:43:08 2023 GMT
            Not After : Jul 20 14:48:08 2024 GMT
        Subject: CN=68B54B5C6E66A7A25A9432A41DAB12D98C133C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:bb:11:fd:63:30:8d:17:10:68:42:b9:d1:
                    68:83:7b:20:04:ed:84:0f:43:0f:22:dc:00:03:32:
                    3c:17:19:1e:96:f8:4f:65:ac:93:65:ec:19:3f:4c:
                    70:13:89:b8:ed:02:8d:d8:89:bb:67:e0:f1:6e:39:
                    38:41:7f:fa:24:b2:27:6f:26:44:0b:23:30:83:7d:
                    56:17:c5:49:9c:05:1c:c8:26:5f:2e:b4:fb:64:41:
                    52:dc:f2:0d:f4:38:3b:fd:02:ca:34:8e:09:06:11:
                    cc:42:92:c2:c8:fc:f8:55:43:3e:ef:90:5a:33:5d:
                    90:d3:da:3f:35:ce:28:61:f3:57:b3:be:6d:da:f6:
                    a7:78:67:68:53:dc:c9:4a:24:cb:a1:57:d7:c0:b6:
                    24:55:22:bd:94:0e:80:89:e5:0f:37:35:b4:b1:73:
                    ef:f0:aa:9f:bd:4a:64:20:a3:04:e8:f5:00:63:7f:
                    29:3a:a4:95:5c:57:ae:16:50:61:c0:36:4b:b4:17:
                    67:75:5a:51:e5:14:c2:4f:b4:08:c4:cc:5f:0c:ca:
                    cb:aa:14:d2:f2:c4:4a:b7:54:e8:4e:b8:6e:a7:c5:
                    f7:ac:97:db:3b:21:73:b6:7c:96:48:3d:7d:04:f8:
                    6d:77:52:f5:9e:a6:01:a3:90:b3:0c:c2:ca:81:df:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:B5:4B:5C:6E:66:A7:A2:5A:94:32:A4:1D:AB:12:D9:8C:13:3C:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/0/68B54B5C6E66A7A25A9432A41DAB12D98C133C26.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.240.0/22
                  177.38.160.0/21
                IPv6:
                  2804:2d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262408

    Signature Algorithm: sha256WithRSAEncryption
         71:45:3b:bf:19:0a:da:73:44:04:95:70:db:86:b2:3c:96:35:
         7b:03:ec:a1:6f:e0:56:4a:6d:5b:dc:8e:76:d0:eb:ec:56:ad:
         0b:be:56:3b:50:d9:51:63:b9:d5:92:a5:4c:51:d2:37:31:83:
         d4:ea:c9:3e:76:72:19:a5:61:b4:6a:c6:cd:8e:13:0c:29:c4:
         c3:f7:8c:ea:a1:7f:fe:4e:97:10:ed:d8:2e:b1:fc:39:94:02:
         64:a8:8a:3a:06:79:41:57:74:f4:57:86:89:8f:13:e3:4e:89:
         25:6c:b3:f3:29:2f:a9:54:dd:25:9d:39:5b:d2:19:2e:25:1c:
         2e:1d:45:f8:c9:13:23:71:14:09:90:b2:99:11:e5:a4:db:cb:
         42:23:a4:e4:3f:f2:ee:c7:e1:f4:7d:81:63:63:95:73:30:0d:
         ce:ed:60:29:1c:bb:f5:25:53:25:11:8a:83:df:6a:a7:fb:ae:
         b7:b9:ea:1c:ef:7f:20:0c:8a:bd:0b:89:87:42:94:19:a7:6a:
         f8:c7:dd:6d:26:a3:84:d5:7e:09:3e:3a:d5:b1:ae:90:80:c8:
         60:53:7e:e8:2c:ac:1c:da:da:59:d4:38:58:94:e0:5f:29:5d:
         75:3c:11:d1:48:35:e1:81:e2:fb:e2:14:83:b6:7e:63:df:46:
         7a:84:90:38
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUd6aK+GAO+2otPOGKmYrmzFKL628wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MjIxNDQzMDhaFw0yNDA3MjAxNDQ4MDhaMDMxMTAvBgNV
BAMTKDY4QjU0QjVDNkU2NkE3QTI1QTk0MzJBNDFEQUIxMkQ5OEMxMzNDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGx7sR/WMwjRcQaEK50WiDeyAE
7YQPQw8i3AADMjwXGR6W+E9lrJNl7Bk/THATibjtAo3Yibtn4PFuOThBf/oksidv
JkQLIzCDfVYXxUmcBRzIJl8utPtkQVLc8g30ODv9Aso0jgkGEcxCksLI/PhVQz7v
kFozXZDT2j81zihh81ezvm3a9qd4Z2hT3MlKJMuhV9fAtiRVIr2UDoCJ5Q83NbSx
c+/wqp+9SmQgowTo9QBjfyk6pJVcV64WUGHANku0F2d1WlHlFMJPtAjEzF8Mysuq
FNLyxEq3VOhOuG6nxfesl9s7IXO2fJZIPX0E+G13UvWepgGjkLMMwsqB3zFdAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRotUtcbmanolqU
MqQdqxLZjBM8JjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CZDNTWnlxeGVzakxNRDVBN3lHd1hmUDRYcGI0OHRCalFw
RnBrY2JFZDFzQy8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpR
cEZwa2NiRWQxc0MvMC82OEI1NEI1QzZFNjZBN0EyNUE5NDMyQTQxREFCMTJEOThD
MTMzQzI2Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKoAPADBAOxJqAwDQQC
AAIwBwMFACgELQwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAEIMA0GCSqGSIb3
DQEBCwUAA4IBAQBxRTu/GQrac0QElXDbhrI8ljV7A+yhb+BWSm1b3I520OvsVq0L
vlY7UNlRY7nVkqVMUdI3MYPU6sk+dnIZpWG0asbNjhMMKcTD94zqoX/+TpcQ7dgu
sfw5lAJkqIo6BnlBV3T0V4aJjxPjToklbLPzKS+pVN0lnTlb0hkuJRwuHUX4yRMj
cRQJkLKZEeWk28tCI6TkP/Lux+H0fYFjY5VzMA3O7WApHLv1JVMlEYqD32qn+663
ueoc738gDIq9C4mHQpQZp2r4x91tJqOE1X4JPjrVsa6QgMhgU37oLKwc2tpZ1DhY
lOBfKV11PBHRSDXhgeL74hSDtn5j30Z6hJA4
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org