Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/236D256AE314CF2825B4CB4389237A1341E863DE.cer
File:                     236D256AE314CF2825B4CB4389237A1341E863DE.cer (raw, json)
Hash identifier:          FdFNjxwGdr9FUPQrS3JplqpnsZTRAwkAfMwE2QLMvpg=
Subject key identifier:   23:6D:25:6A:E3:14:CF:28:25:B4:CB:43:89:23:7A:13:41:E8:63:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2834FBF0C8E7B435DB101090668FACBC947FA540
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Mar 2023 17:31:37 +0000
Certificate not after:    Tue 12 Mar 2024 17:36:37 +0000
Subordinate resources:    AS: 61949
                          IP: 200.142.176.0/21
                          IP: 2804:18b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:34:fb:f0:c8:e7:b4:35:db:10:10:90:66:8f:ac:bc:94:7f:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 17:31:37 2023 GMT
            Not After : Mar 12 17:36:37 2024 GMT
        Subject: CN=236D256AE314CF2825B4CB4389237A1341E863DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0e:69:2f:8b:c3:02:c6:0e:af:5c:cf:85:29:
                    f3:e1:28:ef:76:de:fa:79:f1:43:a6:44:dc:eb:a1:
                    1e:c6:c1:e6:f1:c0:81:e9:f7:c6:73:90:e8:76:11:
                    ad:81:c1:c9:11:a8:ab:01:44:8c:77:79:c9:b2:b4:
                    e6:dc:fe:3a:cb:d6:cf:8d:27:5a:16:83:26:11:d3:
                    ce:8b:f3:3f:29:eb:14:fe:f9:8a:34:a4:7c:71:39:
                    8e:5f:e4:88:66:39:61:dc:f6:ad:0b:e7:35:3a:85:
                    10:80:f5:9e:00:74:f8:0a:81:1f:cd:18:62:d9:5d:
                    6a:9a:e9:ef:b2:27:cc:58:aa:51:4e:3f:d0:24:1d:
                    ec:ae:6f:79:b0:8d:c6:22:8a:42:92:85:ec:99:17:
                    0c:bf:47:c6:0d:cb:cc:82:c2:d2:1f:1d:87:2b:32:
                    56:a8:ea:f5:b5:dd:2d:6f:ad:ee:ab:0f:12:36:4f:
                    a8:77:9b:c0:ed:ba:7f:78:26:e0:69:6f:77:88:5b:
                    35:81:ca:7a:7a:73:b6:02:2a:91:25:85:8b:b2:d2:
                    b1:c4:51:e0:f0:26:35:f1:49:3e:5d:7b:07:89:41:
                    c0:7f:31:bd:ad:3c:c8:6c:d4:70:3a:e1:5e:7b:0b:
                    df:f3:8b:f2:93:46:6f:35:08:d8:eb:97:4a:8a:16:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:6D:25:6A:E3:14:CF:28:25:B4:CB:43:89:23:7A:13:41:E8:63:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BiCMFwVs1TtrevywaNNNYNorzYe4kDXkpTSp12tWJgNq/0/236D256AE314CF2825B4CB4389237A1341E863DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.176.0/21
                IPv6:
                  2804:18b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61949

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:00:f4:b2:fd:07:9d:a8:dc:f7:e9:9f:00:57:27:24:b9:
         01:7d:77:ab:46:b9:9a:b3:5c:c6:6d:cd:ff:ae:d5:44:f6:0a:
         a0:db:f1:7a:b8:0a:bb:d5:6f:a8:2d:99:89:b1:67:d6:7b:3f:
         a5:a0:3a:f8:24:e0:e7:81:79:c2:9f:fe:19:fe:c4:9f:e3:73:
         ed:1c:45:36:61:40:2f:ce:c6:ff:f2:14:73:51:01:4e:23:57:
         51:8e:00:a6:bc:a3:d0:a0:12:f8:8b:d8:49:19:9c:06:a0:9b:
         9f:5c:9e:6e:72:23:19:88:a0:54:90:e5:f4:9e:c0:01:87:12:
         f1:e4:f9:cf:47:39:b8:54:b0:43:89:c5:41:d9:dd:0e:b2:ea:
         0f:68:6d:e9:ca:2a:2d:c3:ec:fe:9b:e4:91:3c:74:cf:86:4f:
         23:8b:2d:02:3f:21:58:5e:4a:ed:a2:9e:7f:20:f3:f6:81:41:
         e6:bd:b3:d8:e6:d0:f6:e6:dc:e0:0e:32:3f:a3:76:26:5a:90:
         35:53:e9:15:ca:54:eb:8b:d5:c7:40:84:03:80:00:64:3d:8f:
         26:0f:72:7c:9a:c0:ac:9a:87:51:f4:80:a0:7b:79:fd:13:50:
         2e:b8:5d:08:f2:07:f7:cc:50:45:57:64:c3:df:4a:8e:d6:22:
         c6:55:bd:ed
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUKDT78MjntDXbEBCQZo+svJR/pUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAzMTQxNzMxMzdaFw0yNDAzMTIxNzM2MzdaMDMxMTAvBgNV
BAMTKDIzNkQyNTZBRTMxNENGMjgyNUI0Q0I0Mzg5MjM3QTEzNDFFODYzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxDmkvi8MCxg6vXM+FKfPhKO92
3vp58UOmRNzroR7GwebxwIHp98ZzkOh2Ea2BwckRqKsBRIx3ecmytObc/jrL1s+N
J1oWgyYR086L8z8p6xT++Yo0pHxxOY5f5IhmOWHc9q0L5zU6hRCA9Z4AdPgKgR/N
GGLZXWqa6e+yJ8xYqlFOP9AkHeyub3mwjcYiikKSheyZFwy/R8YNy8yCwtIfHYcr
Mlao6vW13S1vre6rDxI2T6h3m8Dtun94JuBpb3eIWzWBynp6c7YCKpElhYuy0rHE
UeDwJjXxST5deweJQcB/Mb2tPMhs1HA64V57C9/zi/KTRm81CNjrl0qKFihxAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjbSVq4xTPKCW0
y0OJI3oTQehj3jAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CaUNNRndWczFUdHJldnl3YU5OTllOb3J6WWU0a0RYa3BU
U3AxMnRXSmdOcS8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9CaUNNRndWczFUdHJldnl3YU5OTllOb3J6WWU0a0RYa3BU
U3AxMnRXSmdOcS8wLzIzNkQyNTZBRTMxNENGMjgyNUI0Q0I0Mzg5MjM3QTEzNDFF
ODYzREUubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA8iOsDANBAIAAjAHAwUA
KAQYuDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8f0wDQYJKoZIhvcNAQELBQAD
ggEBAKW4APSy/QedqNz36Z8AVyckuQF9d6tGuZqzXMZtzf+u1UT2CqDb8Xq4CrvV
b6gtmYmxZ9Z7P6WgOvgk4OeBecKf/hn+xJ/jc+0cRTZhQC/Oxv/yFHNRAU4jV1GO
AKa8o9CgEviL2EkZnAagm59cnm5yIxmIoFSQ5fSewAGHEvHk+c9HObhUsEOJxUHZ
3Q6y6g9obenKKi3D7P6b5JE8dM+GTyOLLQI/IVheSu2inn8g8/aBQea9s9jm0Pbm
3OAOMj+jdiZakDVT6RXKVOuL1cdAhAOAAGQ9jyYPcnyawKyah1H0gKB7ef0TUC64
XQjyB/fMUEVXZMPfSo7WIsZVve0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org