Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36EFA7014D84E8575931BE947541B85295240D78.cer
File:                     36EFA7014D84E8575931BE947541B85295240D78.cer (raw, json)
Hash identifier:          zOCix9811c5AFTe0IEqQIN3KglKW98k32IpU9tO/j3U=
Subject key identifier:   36:EF:A7:01:4D:84:E8:57:59:31:BE:94:75:41:B8:52:95:24:0D:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       067A5AB0C59E16D476402B78358245ACAA374582
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/1/36EFA7014D84E8575931BE947541B85295240D78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 19:05:29 +0000
Certificate not after:    Mon 13 May 2024 19:10:29 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7a:5a:b0:c5:9e:16:d4:76:40:2b:78:35:82:45:ac:aa:37:45:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 15 19:05:29 2023 GMT
            Not After : May 13 19:10:29 2024 GMT
        Subject: CN=36EFA7014D84E8575931BE947541B85295240D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:d2:b6:5c:19:00:87:52:94:1d:8a:6c:77:
                    b1:cf:23:69:2f:06:5f:c1:67:50:fd:3c:a5:03:2d:
                    11:c2:86:45:a1:aa:17:66:e9:e2:d8:f6:03:bc:ca:
                    3b:c1:c1:17:58:16:3f:93:e1:89:89:7f:ea:57:5d:
                    f3:35:98:f8:42:3d:9b:3c:a8:57:01:52:5b:05:49:
                    4a:c1:91:5a:b5:99:5a:68:a9:f4:d6:6e:40:b4:09:
                    e7:37:40:23:45:48:48:89:71:86:cf:9f:c0:4c:4e:
                    35:60:ba:ee:9e:45:18:e0:95:b4:59:5f:6a:06:ba:
                    1c:28:7c:22:4e:90:2a:b7:8f:8b:85:29:a7:9a:e0:
                    15:3e:03:99:24:31:ed:0d:18:bc:d4:11:ac:dc:70:
                    84:3e:c7:b9:f8:72:95:3a:36:c6:9c:94:6c:52:f0:
                    e5:f0:d0:b9:05:3b:f5:ca:8a:61:f7:32:be:90:8f:
                    ac:2d:f8:a9:7c:c4:96:b0:15:a0:38:a4:b5:c1:23:
                    88:d8:22:04:f4:4a:b0:df:ef:4a:ce:4a:a7:a1:be:
                    c7:f1:82:a7:ab:8b:31:ba:07:a8:ee:2a:54:91:3e:
                    10:f0:0b:74:ed:8f:44:b6:d0:28:e5:c4:5f:99:17:
                    bf:b3:da:03:7e:9f:f5:9e:e7:74:37:1b:71:e6:95:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:EF:A7:01:4D:84:E8:57:59:31:BE:94:75:41:B8:52:95:24:0D:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKAxSb5FBw4TYV1jRJz1tpRV2rPUkemCWBhKnLAKUJnr/1/36EFA7014D84E8575931BE947541B85295240D78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:a6:85:07:af:6a:0f:b7:cc:4f:a9:dd:8e:24:ff:c2:4f:
         4a:19:db:10:cf:c6:cb:3e:e6:27:66:44:18:87:93:69:fe:09:
         12:1a:c0:ec:50:0e:28:9e:d5:90:92:97:2c:69:00:91:6a:26:
         ba:cf:26:cb:48:b7:b3:29:6b:5e:17:de:b2:00:cd:08:c6:9e:
         9f:5a:60:e5:c0:07:4d:25:2f:69:5c:d9:05:c0:ef:84:14:e8:
         30:94:ae:6f:2d:bb:e8:fe:3d:df:53:7a:95:df:40:4e:e7:96:
         61:0f:7e:7f:c7:c8:63:67:19:af:e6:81:3d:6d:b7:61:66:9c:
         6f:a9:9c:c4:87:78:65:30:15:5b:a3:a0:17:4f:b2:39:33:f6:
         b9:13:b1:6e:f3:f5:23:79:ea:2a:94:f2:f2:b6:c9:a9:2a:a8:
         50:60:2a:28:b9:02:6d:04:42:32:2d:98:12:59:75:e5:93:09:
         47:63:96:c6:e0:ed:ed:8d:60:32:bc:ec:6d:cd:00:a4:9e:23:
         5c:85:52:5f:a2:80:d2:c5:54:84:03:d1:4f:2c:1b:f6:fe:4d:
         58:c7:a9:1c:4b:92:c4:94:dc:d6:c5:bd:4f:df:30:2c:f8:e6:
         9b:4a:02:7f:ed:c0:3d:80:4e:e5:bb:1a:69:55:b2:53:d3:f7:
         d5:99:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:12:12 2025 by rpki-client