Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3606C0839FFED19A4D00399B33B7D5C366E2913A.cer
File:                     3606C0839FFED19A4D00399B33B7D5C366E2913A.cer (raw, json)
Hash identifier:          CzitsqplXI26dy8INv2J2kxZbnjT3dMpsgTaVNmuq8o=
Subject key identifier:   36:06:C0:83:9F:FE:D1:9A:4D:00:39:9B:33:B7:D5:C3:66:E2:91:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       349EEAC5478EAF3A96BA8DB0285C417A7B21176F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/3606C0839FFED19A4D00399B33B7D5C366E2913A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 14:14:24 +0000
Certificate not after:    Fri 21 Oct 2022 14:19:24 +0000
Subordinate resources:    AS: 266146
                          IP: 160.20.68.0/22
                          IP: 2804:3b64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:ea:c5:47:8e:af:3a:96:ba:8d:b0:28:5c:41:7a:7b:21:17:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 14:14:24 2021 GMT
            Not After : Oct 21 14:19:24 2022 GMT
        Subject: CN=3606C0839FFED19A4D00399B33B7D5C366E2913A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:9e:5e:00:3d:7e:41:60:39:3f:64:84:3e:
                    04:28:9b:c8:70:24:8f:71:71:cf:23:d7:52:95:c3:
                    92:af:e0:1e:fc:d1:4c:aa:ce:47:6a:62:43:91:e0:
                    30:4c:a9:29:64:00:16:64:97:75:0c:9f:40:8f:a1:
                    eb:a5:bb:c8:7b:3f:93:f2:93:05:96:c3:ec:71:7f:
                    ce:cc:09:ac:bf:04:7a:5c:ea:c8:9d:41:2a:03:59:
                    0d:09:e4:9a:f4:fa:83:ec:d7:6f:a6:5c:c8:35:40:
                    b7:27:09:a6:fd:dd:bf:c8:0e:49:c7:51:8b:a9:5d:
                    a7:8e:0d:a0:00:8a:df:e8:86:a7:be:1d:39:fc:f6:
                    b2:19:e4:fe:19:40:ac:1c:a3:e8:70:94:9a:0a:f6:
                    27:f4:f7:ac:cc:3e:e4:8c:b1:54:f9:9e:69:49:d2:
                    e1:4c:7e:8a:08:05:cb:8a:2e:3d:12:54:f7:0d:24:
                    cd:93:8b:c7:0a:85:03:64:a1:49:a8:3e:05:5b:9b:
                    76:9b:7c:3a:4d:7c:d9:58:f8:69:c6:83:3f:3f:07:
                    a1:95:8e:12:e6:97:49:4c:9c:4b:69:fd:3c:e7:58:
                    c0:41:93:e6:be:b9:4b:b4:fc:38:5f:f4:74:0a:c6:
                    f7:19:f9:ee:7c:e2:dc:b5:8b:a1:25:3b:05:99:a0:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:06:C0:83:9F:FE:D1:9A:4D:00:39:9B:33:B7:D5:C3:66:E2:91:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/3606C0839FFED19A4D00399B33B7D5C366E2913A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.68.0/22
                IPv6:
                  2804:3b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266146

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:38:d3:f1:2c:ca:3d:67:8f:c9:7e:d7:62:2f:6b:4e:8d:
         00:dc:a8:40:de:52:89:9e:71:35:99:ea:47:8d:21:4e:d2:17:
         52:04:5c:8e:3a:4a:1f:b4:50:20:f2:83:0d:15:3f:14:fe:5e:
         10:b3:4a:e4:93:51:40:14:34:c8:55:2c:1b:bf:9c:76:10:b6:
         34:dc:60:2c:b4:5e:06:2b:a4:53:d6:16:ec:f4:47:44:53:ad:
         f7:52:80:6c:e8:c4:06:52:29:34:2f:cf:1f:f7:ce:8d:02:3a:
         b4:4f:f1:06:55:a8:d4:b0:cc:8d:ae:b8:cc:7e:9b:08:3d:db:
         28:25:f8:f9:f1:80:7a:4a:f5:43:f5:97:8a:d9:a2:cc:12:3a:
         da:bb:69:71:fb:10:0f:7c:54:06:56:f1:3e:4d:49:63:de:51:
         37:6c:68:6b:9b:7b:2b:58:f1:74:22:47:31:92:31:ff:08:fa:
         2d:65:b6:9b:0b:d4:29:9f:93:f3:5a:98:45:55:3e:50:09:8d:
         04:c7:54:cf:d0:1a:91:cc:03:ef:be:35:c5:f2:f9:cc:b4:05:
         e3:9c:f8:79:c2:38:42:ab:53:f1:f7:0b:17:4d:cd:0b:12:8f:
         fd:4b:94:00:80:3b:2c:9b:60:f8:72:eb:07:3a:ca:c0:28:6e:
         19:f2:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org