Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C68CF66B43F3866D89125950110EE1CF5D145F65.cer
File:                     C68CF66B43F3866D89125950110EE1CF5D145F65.cer (raw, json)
Hash identifier:          4dPy2z9cszqY5NZztMI5j0nxiwWjzHugG6kyLq09PLs=
Subject key identifier:   C6:8C:F6:6B:43:F3:86:6D:89:12:59:50:11:0E:E1:CF:5D:14:5F:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FF3B8B75DC7B2ED1FA9BEAE2103AF8EDC015E98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/1/C68CF66B43F3866D89125950110EE1CF5D145F65.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 16:45:01 +0000
Certificate not after:    Fri 26 Jul 2024 16:50:01 +0000
Subordinate resources:    AS: 266948
                          IP: 45.225.192.0/22
                          IP: 2804:45c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f3:b8:b7:5d:c7:b2:ed:1f:a9:be:ae:21:03:af:8e:dc:01:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 16:45:01 2023 GMT
            Not After : Jul 26 16:50:01 2024 GMT
        Subject: CN=C68CF66B43F3866D89125950110EE1CF5D145F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:5b:6c:a0:a8:93:92:34:78:0e:d9:73:d3:
                    86:c0:70:dd:c0:d9:2e:73:f3:7e:7f:42:b4:70:ea:
                    66:3a:13:ea:65:43:e8:87:8b:64:ea:ce:32:03:e3:
                    01:75:33:34:5c:05:21:7d:57:af:07:7d:df:5f:43:
                    73:c3:06:1e:08:9f:90:e1:f2:2d:f4:fd:ce:e1:12:
                    d8:36:1f:2c:a9:0d:cc:5a:60:45:77:78:a0:e9:1e:
                    c9:66:15:dc:4f:6a:b5:00:3a:ed:d9:10:4d:3e:56:
                    63:38:06:60:a7:40:77:83:82:08:65:45:aa:c3:d5:
                    bf:ed:c4:0c:ec:b9:de:cc:23:0f:bf:50:c1:97:7e:
                    37:a6:ae:de:e9:38:e5:52:a0:35:6d:88:16:41:5f:
                    1a:ba:ca:74:d7:c7:e9:0a:83:3d:7c:34:db:ef:69:
                    60:92:f9:54:a2:41:98:fd:3b:1c:73:d7:d1:88:ed:
                    e5:ca:4e:c4:ae:50:8b:1a:99:b4:62:b4:94:06:35:
                    ec:5f:a6:cf:df:0e:db:96:ca:e2:b6:ec:bd:74:e9:
                    36:66:32:52:e0:d3:c6:79:28:ec:46:2b:f9:58:28:
                    9a:45:11:dd:8e:87:a5:0f:cc:f5:43:13:6b:d0:02:
                    05:ab:77:16:0d:64:80:a2:57:5c:23:33:3f:69:e2:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:8C:F6:6B:43:F3:86:6D:89:12:59:50:11:0E:E1:CF:5D:14:5F:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/1/C68CF66B43F3866D89125950110EE1CF5D145F65.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/22
                IPv6:
                  2804:45c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266948

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:ca:fa:38:d8:75:bf:dd:a2:7e:c7:31:cc:4f:ec:05:96:
         e3:f0:5d:2f:ef:38:1a:8d:98:ae:d7:52:cf:a8:be:47:86:ea:
         6e:ab:f1:85:b5:8e:6e:2f:07:a5:7c:c8:eb:e1:7f:93:02:7e:
         12:4c:d8:27:40:46:46:2d:7f:f4:71:e4:a3:1d:74:87:be:a5:
         00:bd:2a:68:ec:92:44:a7:d1:a7:2d:f1:bd:d6:a3:bf:1c:2c:
         c5:f2:8f:bb:98:8f:a7:33:0d:d6:80:53:5b:3f:ac:57:b8:39:
         13:dc:6e:ba:e4:39:bf:52:c9:13:ac:ec:9f:9b:08:b3:46:a1:
         8a:d2:90:7b:69:34:f6:9b:68:fa:38:77:54:8e:1f:ab:c1:55:
         79:89:23:8e:57:c6:27:ea:d1:64:51:fe:19:79:df:d4:6c:a9:
         a8:69:c7:28:79:a5:e9:7c:9c:51:0d:5e:c9:02:70:e3:dd:11:
         57:d3:5f:67:95:7d:f9:97:b9:7f:3f:50:72:39:a7:ac:f9:56:
         08:55:b1:e3:34:37:52:fe:0e:52:b5:54:db:3f:77:65:53:a5:
         81:c0:0d:08:b7:9f:44:16:85:4b:c7:a6:b7:33:95:e4:1f:89:
         9d:cc:bb:85:b3:51:eb:24:14:e6:11:2d:28:89:f6:1d:66:2b:
         47:fb:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org