Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68E11CA51A49C7293330A057D51A83866DBC98E7.cer
File:                     68E11CA51A49C7293330A057D51A83866DBC98E7.cer (raw, json)
Hash identifier:          m6PJ0m22cuNmoXoHTZgAiJ5CfQtYFv5jKgWgZjMPY8A=
Subject key identifier:   68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18E61E07E620D7E55C4A1882DC5D64B127C032DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Oct 2023 14:47:13 +0000
Certificate not after:    Mon 30 Sep 2024 14:52:13 +0000
Subordinate resources:    AS: 271595
                          IP: 190.9.84.0/22
                          IP: 2804:7dfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e6:1e:07:e6:20:d7:e5:5c:4a:18:82:dc:5d:64:b1:27:c0:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  2 14:47:13 2023 GMT
            Not After : Sep 30 14:52:13 2024 GMT
        Subject: CN=68E11CA51A49C7293330A057D51A83866DBC98E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:b6:93:b2:5a:1b:c0:85:1c:f4:f6:50:49:
                    34:68:b8:b4:c0:e0:a0:c7:21:f5:d1:4e:45:e0:af:
                    97:71:94:2f:3e:f3:cc:24:ff:15:55:2b:d1:99:bc:
                    ce:0b:0e:6e:dd:db:65:b7:7c:f2:ae:a9:88:2c:5d:
                    de:a8:bf:96:46:d3:ff:b7:22:b6:ee:d0:ed:85:fd:
                    c8:12:19:11:f1:00:c2:a8:78:2e:d6:0b:dc:62:bc:
                    c8:ac:38:e6:cc:bb:df:89:df:0e:2c:e0:22:68:da:
                    f8:9d:a8:8d:e6:62:d5:f0:50:55:98:97:9e:4a:17:
                    91:ed:46:41:59:c3:74:ee:13:e5:38:95:c1:57:3e:
                    db:95:67:09:bd:11:8e:04:e2:70:fe:28:65:7d:4d:
                    d1:6f:e0:62:5c:ca:a5:99:e2:bf:87:27:87:d8:e5:
                    b3:ad:25:41:84:36:36:f7:92:4f:1a:21:79:64:ef:
                    ce:c5:f0:c0:d2:d2:07:bf:a2:54:d2:6b:b1:f5:c0:
                    4e:09:7b:35:31:02:66:68:20:85:31:8b:4e:7e:65:
                    33:f5:63:0c:72:8d:85:04:8a:10:04:f4:bd:4b:f0:
                    5c:5b:47:22:87:31:9a:cc:50:1d:ea:35:24:f3:83:
                    cd:b3:e9:9c:41:9b:13:c7:b3:3e:e5:aa:63:72:a0:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:E1:1C:A5:1A:49:C7:29:33:30:A0:57:D5:1A:83:86:6D:BC:98:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/68E11CA51A49C7293330A057D51A83866DBC98E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.84.0/22
                IPv6:
                  2804:7dfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271595

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:c1:ef:31:48:cc:71:f4:e0:c3:99:e3:1c:5f:6b:81:51:
         de:55:60:79:6e:b9:80:1a:1a:93:46:96:a2:88:00:b4:83:ec:
         fb:da:24:d0:61:70:19:5d:69:13:6d:3e:ac:6c:5d:d7:a5:c0:
         d1:f9:57:07:76:68:e7:04:5c:f2:6c:40:74:16:33:7e:2a:a8:
         ae:43:72:20:d5:8f:4e:02:ff:4e:11:61:45:4c:8b:43:56:46:
         c4:5f:b2:18:97:54:d9:49:57:35:ba:81:db:ec:3e:3e:79:39:
         c9:0c:22:d9:fc:b3:6c:d5:55:67:0f:5c:78:d5:e9:65:01:c9:
         6d:d8:ac:13:6b:90:2d:a2:6e:68:5f:1e:2c:82:63:26:e0:8d:
         8c:c3:b5:05:73:73:7a:37:83:30:b6:dd:ff:4e:b6:55:37:67:
         38:ab:70:b8:56:5f:6b:7c:7c:52:b2:2d:79:27:cd:cc:c4:5e:
         d8:4c:a0:9f:28:c6:10:3c:ab:39:88:95:09:21:9c:05:df:3e:
         b1:27:5c:ca:ef:6d:64:10:78:4b:4f:b9:7f:9d:0e:72:86:8c:
         f0:e2:20:3f:59:ae:1e:ea:8c:98:34:46:b5:aa:c3:59:9c:9c:
         0c:f2:cd:78:5f:84:68:cb:b5:8f:75:e1:4a:e1:4e:23:dd:c8:
         7e:fb:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org