Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68CE662D15AAF5135C77B867D79586761F235231.cer
File:                     68CE662D15AAF5135C77B867D79586761F235231.cer (raw, json)
Hash identifier:          ztXOAyz5uW7yaQKP9GTD9eYiGxlVBIuBiqVPwZNGhwY=
Subject key identifier:   68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AFF7C8B1EF5A79A7E42A21770AD9C397F9F684A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 20:05:04 +0000
Certificate not after:    Wed 05 Feb 2025 20:10:04 +0000
Subordinate resources:    AS: 263135
                          IP: 177.190.72.0/21
                          IP: 2804:174c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ff:7c:8b:1e:f5:a7:9a:7e:42:a2:17:70:ad:9c:39:7f:9f:68:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 20:05:04 2024 GMT
            Not After : Feb  5 20:10:04 2025 GMT
        Subject: CN=68CE662D15AAF5135C77B867D79586761F235231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:f6:ec:54:e3:70:3c:84:84:1e:31:53:d4:
                    a6:2b:68:50:b9:a0:96:df:7e:a3:2d:ce:f3:41:96:
                    a9:d9:7e:46:6a:f2:ec:0d:bc:eb:77:14:3a:e5:12:
                    3f:34:cb:9c:81:6d:58:cf:1d:35:9d:d1:aa:7a:47:
                    6c:64:a4:86:21:e3:2a:37:1a:8b:17:65:06:fa:af:
                    ac:31:d1:40:01:26:98:c6:a3:b4:99:ff:c8:69:81:
                    80:f9:c7:a9:95:c6:3e:85:0d:ae:e4:68:2d:a1:8c:
                    e7:f6:4a:ad:36:b2:e4:27:08:c8:db:f5:4f:88:15:
                    82:29:23:2f:d6:e2:05:cc:ab:12:8e:67:97:0f:1c:
                    16:14:9f:49:72:51:b1:0d:39:09:3d:aa:26:fb:05:
                    6e:37:13:57:ec:bc:c8:8b:d0:33:5d:d5:44:dc:32:
                    2a:45:c9:d3:57:85:af:36:c7:84:30:e2:93:83:1c:
                    fc:02:4a:59:dc:fa:88:9e:8b:74:39:0b:ad:08:31:
                    63:1d:d8:b1:81:c2:4e:bb:26:1a:cd:82:50:04:d9:
                    7b:11:6e:d9:10:aa:4d:3d:36:12:7a:6c:71:24:81:
                    3f:7e:34:1b:f0:61:c0:aa:ae:60:47:ff:c1:f1:b5:
                    a4:bf:2e:2c:86:a7:92:ac:63:78:6c:4b:41:87:11:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:CE:66:2D:15:AA:F5:13:5C:77:B8:67:D7:95:86:76:1F:23:52:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Y2mgWRvewWNWYANWSZhsARDshjsWva7PQqDsZYRvzuK/0/68CE662D15AAF5135C77B867D79586761F235231.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.72.0/21
                IPv6:
                  2804:174c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263135

    Signature Algorithm: sha256WithRSAEncryption
         54:70:64:0f:77:b6:e7:cb:f5:ed:46:37:50:e1:a7:c5:69:d1:
         e5:0c:c6:af:33:17:f2:5a:3c:7b:b1:76:da:b0:fb:14:31:66:
         3a:a3:a1:1c:ba:10:6a:86:00:51:d9:9a:19:a8:75:48:59:bc:
         68:1f:a7:ce:ab:33:2d:08:82:9d:83:fc:ff:b7:31:4a:59:d8:
         c3:7d:4d:b3:c4:2d:8f:99:5b:df:72:fd:e2:85:05:fd:0e:41:
         7f:8b:16:59:0f:d1:79:16:4e:a6:9c:2d:88:e7:0e:dc:eb:9b:
         ae:e9:5a:79:44:e3:16:c3:dc:70:60:92:6b:8d:46:89:cd:84:
         a0:79:05:a9:b4:98:02:3a:31:28:49:9d:f2:e3:ac:6d:d8:8b:
         53:98:dd:71:ae:4e:75:ec:88:06:dd:3d:61:60:8a:ad:4b:ca:
         80:63:9b:92:5d:0a:f5:a7:9b:91:78:d9:fd:63:30:43:9f:aa:
         15:67:48:f8:e2:64:db:df:a1:81:2f:58:65:34:b5:e2:03:a5:
         84:8a:4d:4a:e7:f3:e8:d9:06:35:e1:16:15:8e:37:f4:5f:6c:
         2d:86:ef:53:12:67:e9:a8:e7:e7:ee:cd:d4:0d:06:d2:30:5d:
         4d:fc:44:3b:a7:e9:23:cb:99:5f:48:9d:9d:a8:c9:93:45:8e:
         bb:79:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org