Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/336FFB9D903628E6215E986816BA8225F54758BE.cer
File:                     336FFB9D903628E6215E986816BA8225F54758BE.cer (raw, json)
Hash identifier:          TI9FubXyf1c3F0KE6Mvx0Hn8A9I+VCJUaQjWDaxh5HI=
Subject key identifier:   33:6F:FB:9D:90:36:28:E6:21:5E:98:68:16:BA:82:25:F5:47:58:BE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32537830CB75FF127503B16474D4B87B7380924F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/336FFB9D903628E6215E986816BA8225F54758BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 13:09:05 +0000
Certificate not after:    Tue 11 Jul 2023 13:14:05 +0000
Subordinate resources:    AS: 263671
                          IP: 143.208.140.0/22
                          IP: 191.241.128.0/21
                          IP: 2804:1154::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:78:30:cb:75:ff:12:75:03:b1:64:74:d4:b8:7b:73:80:92:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 13:09:05 2022 GMT
            Not After : Jul 11 13:14:05 2023 GMT
        Subject: CN=336FFB9D903628E6215E986816BA8225F54758BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:19:9c:c1:aa:1e:17:7a:e8:9c:a3:a7:2a:41:
                    04:bf:cb:07:5c:9f:c8:b8:4f:9e:63:39:14:9b:d5:
                    b0:20:db:d0:1d:c7:6c:f4:5a:ba:fd:6a:ea:af:3b:
                    77:87:1f:e7:a1:08:fa:a9:b3:6c:d0:8e:fb:ee:c3:
                    37:5a:ba:1c:ab:13:01:6a:52:ae:f9:30:62:ef:6a:
                    e8:6b:29:9d:58:ea:31:9b:55:cb:6b:4d:83:06:5f:
                    96:63:86:5e:6d:35:b4:22:9a:33:40:05:b0:af:3d:
                    f3:dc:6c:fa:a3:d5:fc:c2:e7:61:7f:db:bd:c5:01:
                    be:5e:9f:90:d9:25:e7:aa:85:92:1b:1e:39:8d:48:
                    07:cc:4a:84:7f:9c:b8:48:6e:82:9c:70:10:81:6d:
                    3a:e7:da:fe:d1:b0:e1:07:46:e5:e6:11:e5:08:8d:
                    dd:84:46:56:ae:d5:f1:92:27:af:6b:a1:bd:11:f0:
                    49:3e:b0:ca:2d:7e:dc:fe:f3:dc:2e:cf:8e:da:e5:
                    d7:a9:a4:24:87:e8:af:a1:33:7c:3e:4c:d1:36:f3:
                    3d:c8:18:d1:95:1e:32:71:df:88:17:10:9e:c7:c8:
                    1e:1d:09:03:bf:63:a4:f6:21:3b:0f:91:a0:5b:83:
                    37:c7:92:b9:09:ca:95:bb:be:19:70:5d:28:85:60:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:6F:FB:9D:90:36:28:E6:21:5E:98:68:16:BA:82:25:F5:47:58:BE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/336FFB9D903628E6215E986816BA8225F54758BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.140.0/22
                  191.241.128.0/21
                IPv6:
                  2804:1154::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263671

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:b5:24:36:8c:35:c0:9d:a6:d4:4e:cf:38:1c:93:fc:41:
         fa:e0:94:80:1c:ff:1b:25:56:e1:75:91:d7:da:a7:0e:e1:39:
         b5:92:f2:ea:99:c2:ab:54:e7:f1:38:74:3c:77:aa:cd:c6:fb:
         3e:80:b4:0a:a6:9b:07:9c:90:3d:c1:48:5b:63:93:eb:40:5e:
         62:ea:b5:dc:02:0d:ba:e8:56:ac:5d:1d:f3:e1:af:1b:b5:70:
         be:f2:a2:0d:27:25:fc:15:27:99:50:8f:00:4f:f6:5b:fe:90:
         52:3b:e1:b5:5d:d1:f1:7c:4b:18:f1:45:de:89:84:10:02:5b:
         70:46:8f:de:3e:c7:f4:74:0f:6d:02:22:fe:27:98:bc:ec:59:
         1a:32:f0:46:b2:63:3e:f3:49:8b:7d:db:7f:90:fc:f3:cc:50:
         4f:a2:4f:a2:5a:aa:c8:de:46:bb:f4:0d:f1:e8:6a:18:b5:27:
         0b:58:3e:33:1c:31:ee:1a:7b:cc:5e:c1:f8:36:92:25:51:14:
         da:5b:f8:66:eb:dc:97:65:d4:4a:ce:f9:93:bc:81:1c:ab:58:
         b6:d9:cb:1a:61:44:7c:0b:9f:20:6c:bd:06:4a:5d:f5:6b:1a:
         e7:e3:f8:3e:fd:19:f6:50:b9:f6:17:99:66:b1:24:6e:1e:6d:
         26:90:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org