Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36003A9F609C531E282C330250D02721AE6593D5.cer
File:                     36003A9F609C531E282C330250D02721AE6593D5.cer (raw, json)
Hash identifier:          Qj2+yYX24VGET2mW4EdbGLbgDSopZtK31wjP39htwTc=
Subject key identifier:   36:00:3A:9F:60:9C:53:1E:28:2C:33:02:50:D0:27:21:AE:65:93:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       508C4D24C553D02C60E9890C938D09B921CCE98C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/36003A9F609C531E282C330250D02721AE6593D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Apr 2022 00:46:42 +0000
Certificate not after:    Mon 10 Apr 2023 00:51:42 +0000
Subordinate resources:    AS: 269638
                          IP: 45.190.132.0/22
                          IP: 2804:6798::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8c:4d:24:c5:53:d0:2c:60:e9:89:0c:93:8d:09:b9:21:cc:e9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 11 00:46:42 2022 GMT
            Not After : Apr 10 00:51:42 2023 GMT
        Subject: CN=36003A9F609C531E282C330250D02721AE6593D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:04:a6:da:fc:fe:1b:88:45:96:0e:a0:fb:
                    8d:20:10:97:e4:9b:70:ee:e9:d9:82:78:ca:7f:05:
                    29:83:ef:2c:ee:ad:d5:7b:cf:c3:79:1f:f2:80:51:
                    44:04:05:06:a9:d8:5a:10:e9:5e:a8:22:9e:9b:e1:
                    63:9b:c9:6c:3f:b9:ba:78:43:8e:7b:ab:d4:c1:81:
                    83:e5:36:48:a0:aa:a4:89:18:9f:cd:b1:44:98:ae:
                    89:c6:42:05:05:d3:c8:c1:f5:e5:7e:13:bb:b4:29:
                    cd:47:d6:0c:fe:1f:83:9c:de:fb:32:37:19:9d:16:
                    9e:ad:8f:bb:55:26:fa:74:24:6f:c3:be:7f:ff:48:
                    e1:c9:d4:bd:69:15:28:34:3c:d8:93:6b:4f:cf:cc:
                    0b:25:61:a1:f6:b6:c6:b4:80:d7:c8:a1:42:03:ff:
                    77:ee:d8:38:20:3f:19:82:32:fd:55:6b:6c:29:7c:
                    43:24:89:2b:43:db:3d:2a:8a:a8:0c:fd:00:7e:be:
                    6c:6a:26:c8:ca:9d:d5:a8:50:a6:8f:25:22:a9:f0:
                    15:87:a9:f0:99:b7:d6:79:db:e1:1d:ed:d1:3d:5a:
                    35:90:fa:5d:7c:0f:86:34:86:e8:1e:4a:03:1e:11:
                    aa:5c:65:2e:6d:7a:7e:50:20:f4:94:b1:77:63:03:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:00:3A:9F:60:9C:53:1E:28:2C:33:02:50:D0:27:21:AE:65:93:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/36003A9F609C531E282C330250D02721AE6593D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.132.0/22
                IPv6:
                  2804:6798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269638

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:04:8c:fa:dd:39:27:58:f5:78:24:b1:92:07:b5:76:a4:
         d2:56:9e:db:38:f6:ff:7d:ce:0c:fd:27:02:28:66:85:3a:d1:
         91:9f:6c:2c:8f:01:ca:51:5b:6a:27:88:d6:66:1b:ea:82:45:
         aa:67:af:d4:bb:db:48:dd:2e:3f:c4:aa:8e:f6:ca:75:c6:8e:
         e7:35:dc:a8:ee:c2:53:c0:b6:67:dc:27:42:14:de:57:53:24:
         87:a7:d2:d9:8f:bd:01:80:f7:ce:c2:8a:1c:9a:26:64:f0:ea:
         c7:0f:6f:df:78:c4:78:d2:2e:85:8c:5d:bb:33:61:fa:6d:1b:
         ec:2e:e7:7c:06:1b:9a:70:3e:ac:77:50:9e:80:2b:ba:86:03:
         0d:8d:b4:4d:b1:43:be:47:cf:a2:be:1c:30:f6:33:45:47:88:
         68:f8:34:6f:6f:75:5f:10:6d:a9:48:e6:2a:9f:e9:e4:26:47:
         66:bd:6b:34:73:fa:0d:7b:11:82:50:51:6e:87:86:a6:f9:16:
         d8:c4:53:a2:9c:10:c4:5b:90:b9:68:11:75:32:7e:b6:a4:fc:
         68:8b:0b:c8:f3:0e:4e:53:9f:9d:4e:dd:bb:5b:73:43:90:aa:
         04:10:32:60:a6:bc:18:3d:39:c1:ac:13:ca:90:0c:09:77:fb:
         8e:f6:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org