Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CE68A6D76A55B9D8764712CA4B612489BCF20583.cer
File:                     CE68A6D76A55B9D8764712CA4B612489BCF20583.cer (raw, json)
Hash identifier:          UAgqJ7c0fStxkpect2Ht+/paYpusLTNcXpGjF/xPspo=
Subject key identifier:   CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B87A7A609AC138776D6390A507380DA04FDFEDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 15:52:00 +0000
Certificate not after:    Tue 04 Jun 2024 15:57:00 +0000
Subordinate resources:    AS: 271192
                          IP: 179.42.152.0/22
                          IP: 2804:77ac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:87:a7:a6:09:ac:13:87:76:d6:39:0a:50:73:80:da:04:fd:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  6 15:52:00 2023 GMT
            Not After : Jun  4 15:57:00 2024 GMT
        Subject: CN=CE68A6D76A55B9D8764712CA4B612489BCF20583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:20:de:6e:e0:44:56:91:52:18:06:9b:e5:
                    7d:8d:77:23:94:0d:ed:ee:ae:e2:d8:bd:5d:22:73:
                    5c:1f:7e:5b:4d:5f:ba:a3:3d:9f:dc:aa:84:1d:32:
                    64:dd:20:8b:e9:13:5c:af:7e:6e:1f:2c:95:4d:53:
                    21:97:2f:95:71:4a:36:1f:ea:71:8b:82:63:70:d0:
                    ac:d8:24:94:ff:98:86:97:5e:b1:b8:27:e6:c2:d0:
                    bf:ee:5b:4e:d6:c3:a2:9e:74:6e:20:60:b1:50:8b:
                    62:41:37:ca:b8:2c:1d:90:2f:f0:36:9f:6f:12:23:
                    5e:e3:bb:fc:b7:9d:c0:da:86:0a:f9:f2:d9:cc:5e:
                    87:96:3b:ac:4c:94:d3:a9:7d:f5:85:d3:b2:87:f8:
                    cf:c2:df:63:6b:f7:3c:3b:07:19:99:db:de:d6:b7:
                    75:28:6c:f5:8b:f7:44:f6:b1:cc:40:e3:a0:00:f3:
                    04:1f:e0:8a:72:e6:68:00:51:cd:d1:3b:6f:4b:8a:
                    e8:c8:67:5c:c1:25:3b:7b:80:ec:fd:f1:fe:4a:a2:
                    a5:32:78:72:3e:6f:d6:2a:85:01:55:8f:66:41:f2:
                    39:0f:f7:60:18:c5:fd:05:96:1d:e7:58:05:89:63:
                    35:d5:23:d8:57:41:b0:fb:d4:6b:f7:26:15:05:4d:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:68:A6:D7:6A:55:B9:D8:76:47:12:CA:4B:61:24:89:BC:F2:05:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/2/CE68A6D76A55B9D8764712CA4B612489BCF20583.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22
                IPv6:
                  2804:77ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271192

    Signature Algorithm: sha256WithRSAEncryption
         ab:0b:04:ff:6b:bd:6d:51:80:4a:ad:9d:39:45:cd:e0:84:e0:
         a8:be:7e:b2:02:37:26:2e:45:f3:f6:86:16:4a:e1:f9:34:e0:
         c5:a3:7f:9a:eb:64:8b:87:71:43:ad:3c:c6:21:5d:ea:33:c8:
         40:8b:1c:31:e9:42:3e:fd:28:2e:75:e7:31:87:4c:f0:48:61:
         e1:ed:67:e4:52:06:87:2e:7e:11:a2:b0:36:83:ef:74:63:6a:
         c7:d5:cd:0f:1f:95:24:6c:37:c6:4b:cb:16:74:e7:82:45:aa:
         a6:9f:21:08:67:23:78:a7:04:32:ad:3b:a3:1e:8b:22:a1:cf:
         28:a8:9e:ea:b9:74:71:ab:de:35:83:8e:0f:4c:eb:ad:25:45:
         73:bb:b4:3b:73:43:eb:a1:87:74:b9:61:a1:38:36:c5:1f:8f:
         8b:7f:d6:c9:91:a8:81:5b:55:cd:6c:ed:94:b2:9f:7d:54:18:
         4d:b4:32:fb:3c:80:c2:c5:3d:db:30:89:e2:37:69:03:53:00:
         9f:9b:1b:e2:9f:5f:53:2f:d1:e8:0c:62:94:58:48:95:cc:fa:
         12:a6:50:f4:31:1c:84:0a:de:58:71:2b:70:7a:c0:fb:16:f1:
         67:24:cb:31:c8:4c:5d:08:05:98:f8:08:e7:34:bd:2c:2d:f0:
         b4:81:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:39:43 2025 by rpki-client