Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer
File:                     6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer (raw, json)
Hash identifier:          oEPwQ9TbiBX3foxn5HqtCZDtJ9oCY993AWvsOPHmd5c=
Subject key identifier:   6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       041519F7E4EEFFB914FF6C858279742521AF3D61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 16:07:25 +0000
Certificate not after:    Tue 02 Jul 2024 16:12:25 +0000
Subordinate resources:    AS: 271626
                          IP: 181.189.80.0/22
                          IP: 2804:7e78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:15:19:f7:e4:ee:ff:b9:14:ff:6c:85:82:79:74:25:21:af:3d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 16:07:25 2023 GMT
            Not After : Jul  2 16:12:25 2024 GMT
        Subject: CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:af:fa:e8:84:02:7c:02:2c:3c:e8:8a:8f:
                    08:41:5e:44:4c:c7:89:07:6d:92:5e:79:48:76:96:
                    04:96:e6:6b:20:99:76:0a:70:2b:b4:88:b0:4d:87:
                    42:d8:8c:41:79:2e:6c:c7:82:c0:74:50:99:92:02:
                    43:9e:1f:92:51:db:39:a4:aa:0a:c5:de:d4:aa:d9:
                    7b:fb:2e:37:5f:5f:d3:80:a4:b0:5b:f6:5d:f2:d9:
                    eb:13:68:f2:6b:1f:e7:48:e1:f4:d6:4a:4c:53:d0:
                    ec:89:a4:98:86:f4:00:15:c7:59:d3:34:e8:df:d3:
                    dd:0c:0f:70:91:1b:3f:9c:7b:fd:db:00:0c:0a:03:
                    10:a2:89:ae:bc:fd:56:9b:59:c3:10:b7:42:c9:f5:
                    6b:4e:fe:9b:95:00:6e:15:6c:c2:56:69:f6:78:5f:
                    34:78:71:20:75:c3:97:ca:94:e9:3e:7f:d2:6f:f7:
                    c9:d5:8d:fe:70:c5:bc:47:a4:a5:7c:24:fd:82:11:
                    99:4e:0b:ca:06:da:ea:da:54:ef:5e:4b:b3:bf:5a:
                    79:31:d0:0f:af:0a:15:50:3d:32:ec:74:fc:90:db:
                    bf:f5:82:0a:f7:ea:d8:54:e5:97:b4:15:2b:d4:ba:
                    78:45:55:8a:cb:d8:bb:cd:e5:d5:81:5d:17:be:c6:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.80.0/22
                IPv6:
                  2804:7e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271626

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:7d:5e:0b:c2:0f:c5:49:f0:d9:92:53:bd:72:f1:cc:76:
         fa:37:b9:8a:8f:12:21:80:52:b7:32:35:7f:c4:bc:32:77:e7:
         03:6e:9a:3f:d7:ac:b2:86:73:46:53:04:86:4b:24:c9:f2:c9:
         74:e6:f0:8f:ad:14:2b:59:26:62:9b:2e:53:bd:21:f3:d4:a1:
         46:39:b3:84:3a:eb:57:93:b5:29:b0:e1:74:27:34:51:9b:04:
         88:86:61:59:c6:4e:88:0d:55:50:45:a2:3f:ed:3b:2b:0d:bf:
         a9:41:62:8d:55:bf:f1:28:35:74:74:3d:8c:79:60:4a:f3:b6:
         b0:5a:6d:e1:31:48:5a:7f:74:cb:2a:4e:b0:67:a6:29:92:8f:
         18:1d:3e:4a:ff:d9:50:f8:90:36:84:2c:a8:df:4d:42:6a:35:
         28:13:fd:ab:4e:62:5a:91:80:50:62:31:c7:b3:2c:c6:1b:3e:
         c8:d1:d7:79:e3:cf:f2:09:1d:a7:27:dd:38:b4:f9:6a:95:54:
         d1:bd:be:76:d0:7b:bc:5e:a7:10:80:1e:2c:0b:32:22:7b:c5:
         cc:c0:1a:98:44:7a:bd:03:fb:ab:24:03:8e:95:76:4a:88:e0:
         b0:4e:9b:6a:ad:6b:ba:f9:62:53:78:18:b9:0c:b0:7d:81:2f:
         9a:4f:28:36
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUBBUZ9+Tu/7kU/2yFgnl0JSGvPWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDQxNjA3MjVaFw0yNDA3MDIxNjEyMjVaMDMxMTAvBgNV
BAMTKDZDNjhGNEU0MzlGNDk3MzBGM0I2MkZDMkYyNDA4NjNBOEFCMkE4MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRY6/66IQCfAIsPOiKjwhBXkRM
x4kHbZJeeUh2lgSW5msgmXYKcCu0iLBNh0LYjEF5LmzHgsB0UJmSAkOeH5JR2zmk
qgrF3tSq2Xv7LjdfX9OApLBb9l3y2esTaPJrH+dI4fTWSkxT0OyJpJiG9AAVx1nT
NOjf090MD3CRGz+ce/3bAAwKAxCiia68/VabWcMQt0LJ9WtO/puVAG4VbMJWafZ4
XzR4cSB1w5fKlOk+f9Jv98nVjf5wxbxHpKV8JP2CEZlOC8oG2uraVO9eS7O/Wnkx
0A+vChVQPTLsdPyQ27/1ggr36thU5Ze0FSvUunhFVYrL2LvN5dWBXRe+xuerAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsaPTkOfSXMPO2
L8LyQIY6irKoIDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby81WFBaUVU3cGpXelR3YjQ3YTVNekd1Mk10U1BOSHlFdmtu
b2FqVWdEUFNuaC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZr
bm9halVnRFBTbmgvMC82QzY4RjRFNDM5RjQ5NzMwRjNCNjJGQzJGMjQwODYzQThB
QjJBODIwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK1vVAwDQQCAAIwBwMF
ACgEfngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCUKMA0GCSqGSIb3DQEBCwUA
A4IBAQB1931eC8IPxUnw2ZJTvXLxzHb6N7mKjxIhgFK3MjV/xLwyd+cDbpo/16yy
hnNGUwSGSyTJ8sl05vCPrRQrWSZimy5TvSHz1KFGObOEOutXk7UpsOF0JzRRmwSI
hmFZxk6IDVVQRaI/7TsrDb+pQWKNVb/xKDV0dD2MeWBK87awWm3hMUhaf3TLKk6w
Z6Ypko8YHT5K/9lQ+JA2hCyo301CajUoE/2rTmJakYBQYjHHsyzGGz7I0dd548/y
CR2nJ904tPlqlVTRvb520Hu8XqcQgB4sCzIie8XMwBqYRHq9A/urJAOOlXZKiOCw
TptqrWu6+WJTeBi5DLB9gS+aTyg2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:31 2024 by rpki-client on console-ams.rpki-client.org