Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer
File:                     68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.cer (raw, json)
Hash identifier:          4RKJgmgY96LqDdEVzBnRGBXlAsMzEgSzba4pws8B6x0=
Subject key identifier:   68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       633CB0CD050929657243D987D806ACC45B214EB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Mar 2024 20:47:10 +0000
Certificate not after:    Thu 20 Mar 2025 20:52:10 +0000
Subordinate resources:    AS: 264881
                          IP: 168.227.172.0/22
                          IP: 170.79.20.0/22
                          IP: 2804:2f44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:b0:cd:05:09:29:65:72:43:d9:87:d8:06:ac:c4:5b:21:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 20:47:10 2024 GMT
            Not After : Mar 20 20:52:10 2025 GMT
        Subject: CN=68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:1b:72:75:91:01:bb:bc:d5:d0:fd:1d:6b:
                    01:f6:ff:6f:02:5b:06:fb:31:b0:ef:d8:9b:bb:37:
                    94:32:42:3c:89:d2:05:5c:38:d8:13:28:d7:86:1c:
                    02:6c:55:b6:c9:46:1f:cd:3e:0e:26:6b:84:80:f9:
                    97:a1:e7:da:78:43:c9:1c:61:5c:09:44:77:24:42:
                    6b:4e:db:f4:53:de:0c:a9:f6:81:0b:ec:95:5e:d6:
                    80:c1:08:08:9c:04:38:49:c3:8b:70:df:0a:9c:03:
                    a2:8d:99:fb:e1:28:52:55:4f:37:99:0e:e7:d7:32:
                    5c:64:af:c6:cd:74:2f:7b:9e:41:0d:a5:0c:0a:72:
                    cd:c7:31:73:b8:85:61:24:c5:46:ce:e5:a3:28:32:
                    a8:08:80:13:a5:d5:84:b6:dc:a1:19:56:59:1e:22:
                    91:6b:90:f6:43:e8:c4:84:d4:d8:e5:3e:db:7e:90:
                    3a:20:39:10:cd:3a:ac:05:1e:db:40:70:be:20:e9:
                    da:57:29:1e:18:be:44:b1:04:0e:68:f4:8e:9f:06:
                    9d:7b:3f:92:e6:1b:1f:cd:fc:81:57:e2:b9:60:55:
                    8b:08:29:35:de:2f:3b:5d:9a:ed:e7:2f:86:9d:0d:
                    c8:66:20:a2:56:c5:8c:93:9c:f4:1c:c2:97:ca:5c:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:F7:E0:63:7F:23:C3:E9:F6:44:A9:B6:53:17:04:BB:CB:E7:AA:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/0/68F7E0637F23C3E9F644A9B6531704BBCBE7AA0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.172.0/22
                  170.79.20.0/22
                IPv6:
                  2804:2f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264881

    Signature Algorithm: sha256WithRSAEncryption
         20:59:76:8e:79:df:a0:a5:e1:b3:ec:5d:03:99:ce:3b:dc:69:
         43:87:72:9f:48:d6:4a:21:a9:49:aa:e9:fa:aa:56:9a:b7:8e:
         57:4c:f7:a9:f3:6d:e9:f5:10:da:cd:d0:a7:af:09:cb:b6:93:
         46:27:cb:81:fc:a4:33:f2:a6:c9:ec:37:d4:d9:cb:c1:2d:cd:
         d8:fe:10:c7:1c:b6:d7:6e:ce:45:0e:c6:d8:c0:60:17:a8:66:
         b2:8a:d0:7e:6c:62:cf:5f:27:e7:10:83:16:e2:73:ab:0b:8e:
         cb:25:09:fb:be:a0:9b:2f:89:49:f1:39:0c:52:74:14:21:2c:
         e2:5c:ee:e4:81:5a:92:04:15:76:dd:3e:6f:f9:a1:d2:dc:c3:
         4b:2a:03:8c:f4:1f:f6:11:11:93:68:35:ef:ac:c7:25:3e:87:
         72:62:a4:ce:52:a1:cb:16:08:78:41:c8:3f:89:c4:93:7f:63:
         dd:76:ab:9b:91:5f:e4:80:dc:70:8c:9d:7c:9b:aa:83:0b:46:
         28:b9:d7:fa:26:c9:f5:9a:1e:ff:72:ea:94:30:76:b9:6b:8a:
         7b:6a:fe:7b:fd:4c:b3:8f:e4:4f:3e:b1:8a:34:18:16:de:b6:
         b1:58:8c:5b:23:c0:fc:41:2b:a0:ef:9b:4a:e1:46:ec:cf:25:
         6e:b3:48:d2
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIUYzywzQUJKWVyQ9mH2AasxFshTrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yNDAzMjEyMDQ3MTBaFw0yNTAzMjAyMDUyMTBaMDMxMTAvBgNV
BAMTKDY4RjdFMDYzN0YyM0MzRTlGNjQ0QTlCNjUzMTcwNEJCQ0JFN0FBMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWBtydZEBu7zV0P0dawH2/28C
Wwb7MbDv2Ju7N5QyQjyJ0gVcONgTKNeGHAJsVbbJRh/NPg4ma4SA+Zeh59p4Q8kc
YVwJRHckQmtO2/RT3gyp9oEL7JVe1oDBCAicBDhJw4tw3wqcA6KNmfvhKFJVTzeZ
DufXMlxkr8bNdC97nkENpQwKcs3HMXO4hWEkxUbO5aMoMqgIgBOl1YS23KEZVlke
IpFrkPZD6MSE1NjlPtt+kDogORDNOqwFHttAcL4g6dpXKR4YvkSxBA5o9I6fBp17
P5LmGx/N/IFX4rlgVYsIKTXeLztdmu3nL4adDchmIKJWxYyTnPQcwpfKXPjRAgMB
AAGjggMhMIIDHTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo9+BjfyPD6fZE
qbZTFwS7y+eqDjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82U1NxVHBpQ0xFSm5EMWVvNnRvb1NzUTNMcDJMUkwyM3RH
TjczRHJERmdjNi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0
R043M0RyREZnYzYvMC82OEY3RTA2MzdGMjNDM0U5RjY0NEE5QjY1MzE3MDRCQkNC
RTdBQTBFLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAKo46wDBAKqTxQwDQQC
AAIwBwMFACgEL0QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAqxMA0GCSqGSIb3
DQEBCwUAA4IBAQAgWXaOed+gpeGz7F0Dmc473GlDh3KfSNZKIalJqun6qlaat45X
TPep823p9RDazdCnrwnLtpNGJ8uB/KQz8qbJ7DfU2cvBLc3Y/hDHHLbXbs5FDsbY
wGAXqGayitB+bGLPXyfnEIMW4nOrC47LJQn7vqCbL4lJ8TkMUnQUISziXO7kgVqS
BBV23T5v+aHS3MNLKgOM9B/2ERGTaDXvrMclPodyYqTOUqHLFgh4Qcg/icSTf2Pd
dqubkV/kgNxwjJ18m6qDC0Youdf6Jsn1mh7/cuqUMHa5a4p7av57/Uyzj+RPPrGK
NBgW3raxWIxbI8D8QSug75tK4UbszyVus0jS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org