Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.cer
File:                     1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.cer (raw, json)
Hash identifier:          BrJjCnf9aaVxTskTcgNLpC82snuPFaN1myPpV5l5OhY=
Subject key identifier:   19:36:D1:B7:62:E4:EC:4D:BA:E7:E1:5E:E5:B9:30:4B:40:25:D7:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54CFA426C13725CC9CC1905857EE73FFE9F0B44E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 21:24:59 +0000
Certificate not after:    Mon 16 Sep 2024 21:29:59 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/22
                          IP: 2804:6060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:cf:a4:26:c1:37:25:cc:9c:c1:90:58:57:ee:73:ff:e9:f0:b4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 21:24:59 2023 GMT
            Not After : Sep 16 21:29:59 2024 GMT
        Subject: CN=1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:7c:3f:5e:0e:82:f5:05:05:17:21:ad:cb:
                    ac:c6:6b:58:1b:85:4f:bd:9e:20:fa:be:95:9f:a0:
                    3c:cb:d6:bc:6b:1a:b0:5f:e4:a0:1f:16:22:02:fa:
                    e5:ba:cf:4f:9f:fd:87:d5:75:a5:d7:ad:94:c8:bb:
                    01:c7:88:e7:3e:89:b6:47:10:22:25:eb:e8:35:e6:
                    91:e9:65:12:93:ca:53:b5:e9:25:30:f3:13:c1:ee:
                    35:ee:4b:b9:8a:2c:93:62:41:8a:13:8a:64:60:59:
                    25:f1:cd:ed:07:c5:66:cf:ff:38:27:1b:d7:7c:aa:
                    82:e1:56:94:fc:6f:f7:c8:e6:30:c6:e2:91:38:6c:
                    75:61:ce:e2:69:a1:ba:ee:ab:be:21:a4:1a:e3:02:
                    db:0b:83:e1:a3:d6:84:8f:14:8d:af:fb:3b:15:49:
                    88:26:a9:83:35:b3:f3:bf:d0:f9:af:92:48:9a:b3:
                    b7:f7:51:0a:48:82:ce:e0:15:58:b8:c7:e3:64:f4:
                    3d:e6:f8:99:7e:54:48:d9:26:aa:e0:70:0e:30:61:
                    fb:6c:3c:22:fb:f5:18:95:a6:42:24:79:23:f0:da:
                    a5:dd:b8:c8:a9:65:1c:b5:97:51:b8:c1:ab:5e:5d:
                    e1:b8:93:b0:66:9a:0a:a5:bb:43:e3:dd:5d:ac:a1:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:36:D1:B7:62:E4:EC:4D:BA:E7:E1:5E:E5:B9:30:4B:40:25:D7:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/1936D1B762E4EC4DBAE7E15EE5B9304B4025D7F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:c7:d1:d9:ef:ae:52:15:65:88:f0:de:f6:de:29:74:12:
         e6:00:35:a7:df:9c:64:f8:f3:8d:c4:1d:45:d9:71:08:55:7c:
         1e:ab:83:6b:b1:4c:1e:10:7e:11:3d:32:63:e3:92:75:d3:1b:
         3b:c3:99:90:74:a6:3b:34:8c:b1:39:bd:58:74:f7:96:16:92:
         14:42:89:5f:af:2a:64:8c:07:bd:a4:83:c1:9b:f0:be:ee:e4:
         e9:c3:9e:c9:56:a6:fd:d5:f5:bf:4f:bd:7b:49:3c:ae:8d:45:
         74:01:2d:0b:5c:7a:b4:61:46:cf:71:74:df:5c:32:3f:83:a2:
         18:27:a7:8d:31:59:8b:2b:f5:a5:99:e3:68:6e:13:17:61:c4:
         b0:20:fb:ce:16:7e:09:15:33:e3:d3:b3:11:86:38:51:3a:91:
         77:99:e4:5e:da:aa:39:fb:f9:24:f4:fe:5b:48:94:a0:cc:90:
         e2:2d:22:e8:94:ca:dd:40:aa:a8:1b:02:63:91:d3:c9:11:eb:
         bf:61:7a:b3:83:08:12:1d:06:ac:42:06:b8:6a:7c:10:9f:9a:
         37:a8:dd:e5:5f:01:53:23:cf:01:ac:dd:b3:30:51:43:9a:d5:
         4c:b4:4e:02:dc:f1:ca:a1:52:86:5b:f6:1f:f2:37:5d:cc:70:
         89:d6:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org