Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/360AF1068F03010D0F49188E66411805181F3A57.cer
File:                     360AF1068F03010D0F49188E66411805181F3A57.cer (raw, json)
Hash identifier:          xlA+eKgLwuGnFwRV9bGs/3mMrh9A2HL+IqDqXsIqsTw=
Subject key identifier:   36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23573DC0C3AE3CE671C3B2F4D7001B5B074655A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/360AF1068F03010D0F49188E66411805181F3A57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 18:37:35 +0000
Certificate not after:    Tue 19 Mar 2024 18:42:35 +0000
Subordinate resources:    AS: 268619
                          IP: 45.164.152.0/22
                          IP: 2804:53f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:57:3d:c0:c3:ae:3c:e6:71:c3:b2:f4:d7:00:1b:5b:07:46:55:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 18:37:35 2023 GMT
            Not After : Mar 19 18:42:35 2024 GMT
        Subject: CN=360AF1068F03010D0F49188E66411805181F3A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:5d:69:77:58:c7:58:fd:ff:a7:87:36:dd:
                    fb:a3:4f:46:38:cf:e5:d4:5b:d7:ce:8b:3c:78:3a:
                    f9:13:f4:69:05:f3:1d:2a:b5:eb:d5:cd:38:c7:e5:
                    d0:14:08:89:c1:da:9e:eb:08:de:7d:32:85:86:5f:
                    2c:3d:d0:83:67:0d:08:f8:02:a6:cf:72:27:69:2f:
                    63:1e:21:d3:1e:51:f7:b7:c5:39:c3:a9:df:dd:58:
                    6e:0b:2d:7a:df:4f:a8:4b:d4:0f:7f:26:8c:9f:b3:
                    38:73:2d:cb:98:c9:7c:94:36:c2:f5:01:67:3b:5c:
                    dd:ff:dd:24:b8:c3:d1:1f:a4:c4:65:6c:99:2e:56:
                    5c:f4:49:32:19:24:f3:7e:6b:1b:e3:b0:dd:0a:87:
                    b0:0f:04:c5:22:06:66:90:1d:12:9c:db:a9:71:49:
                    74:6a:bd:4d:a2:3c:8f:65:df:ff:23:a9:31:13:13:
                    3f:86:2b:7f:5f:49:7b:11:90:dd:3a:a6:d0:a1:cd:
                    e4:a5:94:1b:dc:12:6e:cb:2a:79:ee:df:aa:dd:88:
                    da:73:ed:da:e9:9f:11:29:37:b5:6e:65:7d:65:7b:
                    15:fc:d3:f5:3d:a2:87:9c:8f:37:68:23:5d:97:26:
                    43:f9:54:fd:ed:ed:0a:fb:7c:ec:fa:7d:15:e1:62:
                    7f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:0A:F1:06:8F:03:01:0D:0F:49:18:8E:66:41:18:05:18:1F:3A:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HXQ4PufQCcNRqVheiR36tSTSqMDbSikH4iAnNUS2LMZL/0/360AF1068F03010D0F49188E66411805181F3A57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.152.0/22
                IPv6:
                  2804:53f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268619

    Signature Algorithm: sha256WithRSAEncryption
         04:38:03:fa:4b:60:01:dc:ca:1a:c6:2a:e6:d0:d3:db:9f:71:
         ec:b3:e8:97:40:41:39:c4:25:a4:94:34:b0:8c:02:31:d7:d8:
         bf:bc:4f:9f:e0:58:8b:b3:76:c2:b4:c6:af:17:c8:7b:15:08:
         ed:a4:1b:55:ea:5f:54:2c:83:ee:a0:ec:9f:c2:74:29:04:eb:
         3c:e5:3b:ab:b6:d9:20:a7:0e:fe:c6:d3:58:a8:a6:5e:8e:3a:
         06:1d:89:c2:f6:f7:b7:c3:ef:61:b8:96:3f:af:14:81:64:03:
         2a:bd:72:0e:26:7b:00:28:d6:1e:cd:29:53:70:aa:ff:df:48:
         46:06:db:9f:7e:af:40:fb:f1:d5:b7:5d:37:2e:78:98:28:3e:
         e3:81:09:52:88:5f:00:7b:17:b1:fc:18:50:47:50:cc:02:14:
         14:79:47:df:52:5c:40:8a:df:29:1e:56:28:ad:c3:ce:c4:1c:
         54:c2:d1:99:a2:f3:31:4d:da:9e:9e:91:a9:0a:cd:2c:f2:17:
         4b:5a:0a:77:df:81:60:e1:cb:a3:b0:66:06:36:7f:bc:cf:cd:
         0e:e2:da:1f:91:af:62:52:f6:5f:85:2e:32:29:89:ec:6d:bb:
         3a:d8:1b:c6:8f:78:e0:fa:a5:a1:4f:29:d7:51:81:1f:87:9d:
         cc:1b:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org