Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B68E9DDC639D3842AACA1B4F23C46D2948C08D80.cer
File:                     B68E9DDC639D3842AACA1B4F23C46D2948C08D80.cer (raw, json)
Hash identifier:          UU0Mb1J/+G9i1hw9hwREuKZ6uKvEAlZy1KE9wWnKep0=
Subject key identifier:   B6:8E:9D:DC:63:9D:38:42:AA:CA:1B:4F:23:C4:6D:29:48:C0:8D:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F72D3C122AC2478B5684CE7940AAC1B17EC9BE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/B68E9DDC639D3842AACA1B4F23C46D2948C08D80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:14:58 +0000
Certificate not after:    Fri 25 Oct 2024 20:19:58 +0000
Subordinate resources:    AS: 52788
                          IP: 177.38.68.0/22
                          IP: 2804:b84::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:72:d3:c1:22:ac:24:78:b5:68:4c:e7:94:0a:ac:1b:17:ec:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 20:14:58 2023 GMT
            Not After : Oct 25 20:19:58 2024 GMT
        Subject: CN=B68E9DDC639D3842AACA1B4F23C46D2948C08D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:a0:2c:ec:7b:aa:7d:55:9c:00:cb:60:b1:
                    ac:09:34:e2:a9:45:fb:e3:3a:63:d8:67:7c:a4:69:
                    0b:b9:7b:c6:1d:1b:15:13:ee:29:8e:ac:d2:21:66:
                    5d:0a:d3:29:e8:37:51:29:0a:2b:19:9e:ed:a8:3b:
                    1d:8d:2a:ef:0c:11:e7:00:23:24:3c:2e:90:76:89:
                    2b:3b:82:e8:ae:a5:dc:6e:ac:24:3d:01:a9:75:94:
                    08:bf:33:15:63:0a:fe:81:06:5d:8d:e0:5f:09:9a:
                    2f:85:65:9a:c9:d9:b5:bf:0e:0e:24:26:41:df:23:
                    b7:76:74:aa:91:17:8d:bc:4d:a2:60:f2:db:f2:07:
                    62:f1:ba:66:17:0f:a4:2a:19:ac:21:c0:f3:78:dc:
                    a5:d0:14:5f:6b:bf:57:a5:e6:5b:20:84:00:c7:53:
                    ea:3a:33:b6:9c:60:66:a0:e7:7a:95:db:a4:1d:14:
                    e9:81:b8:39:08:3c:a4:c2:c6:d2:16:9e:a6:79:37:
                    26:5d:50:4c:d7:a3:5d:c9:db:a0:e2:74:18:a1:48:
                    4f:47:2e:02:47:fc:1b:9c:b2:73:72:2e:3e:1e:6c:
                    09:b0:af:1b:70:0d:4b:a7:d4:ff:b8:03:6a:78:e6:
                    dc:2a:92:56:cf:0d:6c:79:27:76:61:fc:65:e2:48:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:8E:9D:DC:63:9D:38:42:AA:CA:1B:4F:23:C4:6D:29:48:C0:8D:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/B68E9DDC639D3842AACA1B4F23C46D2948C08D80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.68.0/22
                IPv6:
                  2804:b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52788

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:5a:fa:93:12:a2:61:8b:50:b6:50:1c:a6:b7:4d:d5:37:
         0e:c2:7a:61:e6:be:55:88:27:2e:ea:3b:3d:0c:53:89:5a:b5:
         42:d9:de:af:c5:4e:ea:43:4d:86:fc:88:1b:47:c8:df:5b:a3:
         5e:8b:e1:6c:8b:7a:77:2c:ec:36:6d:a0:9d:11:6f:7c:64:85:
         79:56:50:d4:6d:01:39:2d:b8:dc:65:a0:d2:e4:4d:09:70:a2:
         54:2d:71:46:62:f5:4c:d3:45:5e:26:43:14:22:61:e6:35:3a:
         e8:42:d8:37:2e:7f:66:76:5f:8f:31:12:f8:76:97:71:1e:be:
         3c:37:e6:8d:70:80:18:6b:4d:e7:8a:d0:f3:79:cd:61:f7:5a:
         1a:d3:d0:87:15:f0:7c:3f:5e:32:d2:ac:e1:51:40:17:ef:9d:
         74:52:5f:2b:35:b3:ab:03:e8:a6:32:f0:41:ee:b2:11:8e:f3:
         40:d2:67:94:1f:e1:89:79:a4:e7:c4:0f:c0:82:87:da:da:ff:
         41:4c:e5:c8:0a:1a:0e:7b:6b:9d:b8:e3:75:b1:73:e1:5a:36:
         37:33:3c:1c:68:0d:52:9b:ed:15:d8:3e:90:0b:6f:5a:a8:53:
         89:57:72:ca:55:3a:57:1c:9f:46:dc:3c:c3:b9:c8:fd:79:cd:
         82:2a:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:58:53 2025 by rpki-client