Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer
File:                     68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.cer (raw, json)
Hash identifier:          /wVt0NXXr7+FWhwIMRWLV+PoMJk3ElH7I2bisUPTeJs=
Subject key identifier:   68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       062776848DD25602894A6ABEEF64039C29B12F8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 26 Jun 2022 11:45:15 +0000
Certificate not after:    Sun 25 Jun 2023 11:50:15 +0000
Subordinate resources:    AS: 264084
                          IP: 143.202.248.0/22
                          IP: 170.81.184.0/22
                          IP: 2804:2a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:27:76:84:8d:d2:56:02:89:4a:6a:be:ef:64:03:9c:29:b1:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 11:45:15 2022 GMT
            Not After : Jun 25 11:50:15 2023 GMT
        Subject: CN=68C2A8E4AF89B810B3206D1281707CC7DB4A54F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:a0:b6:e8:71:c7:a2:df:c4:8c:ad:ed:e3:
                    07:f4:a8:19:61:e6:24:d0:70:64:ec:cc:7f:70:8d:
                    9f:ae:56:e6:39:4d:e6:c1:f6:22:f0:f3:2d:e1:2a:
                    ab:b5:9b:db:db:12:3d:17:a0:09:63:f7:f5:b9:f9:
                    f2:11:2b:57:31:6f:b2:72:8b:96:e9:aa:0c:13:86:
                    88:6c:f7:33:6f:1c:7a:bc:1f:bf:f4:58:99:83:8e:
                    a4:c6:9b:a5:af:aa:f6:df:ed:c2:b4:c1:e5:34:cc:
                    b2:7f:9d:f2:cd:35:6e:55:6e:33:91:b0:3e:75:b8:
                    b4:f8:e0:78:d6:e1:d1:41:ec:29:8b:8c:6f:2c:a1:
                    91:f7:c5:26:ff:67:09:fb:dd:8a:b8:e0:71:f7:6a:
                    af:d4:cf:e8:f5:5b:a8:28:9a:aa:02:30:3e:a9:bc:
                    f2:56:3f:02:ac:50:68:8b:72:99:7a:ca:ec:8d:d4:
                    5a:21:e6:b7:8b:02:d0:f2:38:3a:89:0d:81:09:c8:
                    da:e5:58:78:3f:8c:df:0d:9a:37:28:e6:f0:a8:16:
                    6d:fd:c2:f6:ce:06:40:19:ca:2c:d5:de:aa:3e:1e:
                    42:79:e1:a6:53:75:43:e5:ed:95:f1:80:4a:f8:34:
                    b4:8f:63:93:05:a9:98:1b:f0:a6:08:16:86:c5:46:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:C2:A8:E4:AF:89:B8:10:B3:20:6D:12:81:70:7C:C7:DB:4A:54:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BG1rmsPavY9RLET87QATP8LhzAb3rbaHSDfpkCdXP34F/0/68C2A8E4AF89B810B3206D1281707CC7DB4A54F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.248.0/22
                  170.81.184.0/22
                IPv6:
                  2804:2a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264084

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:57:36:62:97:a5:db:77:61:eb:9d:f3:05:3a:ec:32:72:
         82:74:bb:de:95:5a:b6:11:9f:ae:88:2e:36:66:96:00:e6:3b:
         bc:ef:26:65:9a:77:dd:76:75:76:be:8c:9f:a2:40:68:b8:c8:
         5a:3f:d8:76:b9:7c:47:cb:ae:05:ae:2e:6e:74:e2:a8:d1:75:
         d4:1f:aa:55:e2:7d:53:d4:4f:12:26:8c:39:fd:90:92:47:61:
         2f:a7:60:95:43:f1:d9:95:cc:94:76:43:b0:e8:d9:a5:7a:fc:
         db:98:90:0b:ab:d4:b5:c2:a9:2c:05:e8:8b:d4:5e:7c:39:53:
         e4:76:fb:ff:2c:b0:0a:5b:6a:31:2e:2d:89:2e:7f:2c:dc:0b:
         2d:a6:61:1a:40:b7:b0:95:d7:d9:a1:2b:c2:b4:96:0b:e6:39:
         98:58:66:15:3f:8e:46:ef:4e:95:1d:ce:f6:25:3b:4d:0c:5a:
         fc:74:dc:54:c3:8a:22:59:3a:86:d6:44:99:11:91:ad:d2:34:
         79:58:b2:56:24:2a:e5:cf:ec:0d:b1:61:80:12:8b:13:a9:75:
         80:76:a1:c5:02:0d:66:45:fd:92:83:c3:00:e6:8d:ca:a0:00:
         9f:58:d2:4f:69:e7:cf:6e:54:4f:61:88:88:f6:be:17:84:5f:
         ac:28:84:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org