Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer
File:                     36729E9397EC3A3BAF16C4493F8EBB20B38367A9.cer (raw, json)
Hash identifier:          rGqcLiQcTFYwprDdnwegIt4amB0kyHNva5zkR2PXMUo=
Subject key identifier:   36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4AA799D06258CCAB72B6D04537B711E0763772FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 15:34:36 +0000
Certificate not after:    Tue 02 Jul 2024 15:39:36 +0000
Subordinate resources:    AS: 264570
                          IP: 138.36.40.0/22
                          IP: 2804:21bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a7:99:d0:62:58:cc:ab:72:b6:d0:45:37:b7:11:e0:76:37:72:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  4 15:34:36 2023 GMT
            Not After : Jul  2 15:39:36 2024 GMT
        Subject: CN=36729E9397EC3A3BAF16C4493F8EBB20B38367A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:25:c9:6e:e4:c2:4e:21:78:aa:06:67:a2:
                    fd:2e:5e:1b:9d:30:f8:da:f8:e1:54:90:86:94:17:
                    4e:0f:da:bd:d0:7a:6a:6e:88:f5:3c:3a:83:7d:88:
                    58:f8:fd:e3:78:b7:f7:c4:9c:cb:06:a9:32:09:fb:
                    8c:a1:95:ba:61:7a:e9:e5:6c:cb:3b:5d:dc:ec:95:
                    f9:4b:c1:e2:39:bc:6f:90:e4:a5:f0:8b:df:74:c9:
                    3b:5c:12:c8:06:7b:54:00:97:17:d1:61:3f:8b:7f:
                    f0:87:d5:2e:e3:45:bb:de:16:0e:3c:47:27:ab:54:
                    18:a3:65:5e:60:7f:7b:db:dd:ab:18:dc:1c:2f:f9:
                    9d:c4:ad:be:1e:99:b3:46:c4:34:7b:06:2a:74:c2:
                    ff:15:21:5e:c3:23:54:3d:2d:e0:c0:68:e9:61:ac:
                    cc:85:c8:b2:73:e2:b7:41:a0:6d:1b:10:42:59:ff:
                    f2:91:02:16:9f:4c:be:56:2d:10:6d:eb:ca:3a:52:
                    da:90:38:aa:d9:af:a1:f0:82:eb:f8:38:01:9d:6d:
                    37:67:cb:67:89:8a:8f:9f:f2:f3:d7:49:98:16:82:
                    56:f0:60:47:87:7b:69:72:11:fe:ed:fe:05:ea:87:
                    74:e1:52:3a:dd:ff:8c:af:0a:23:f6:8d:93:af:44:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:72:9E:93:97:EC:3A:3B:AF:16:C4:49:3F:8E:BB:20:B3:83:67:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EzWPjsBq4BqFx2bm9YXo15NLDuH7KY95V2BcvB2gAqq4/0/36729E9397EC3A3BAF16C4493F8EBB20B38367A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.40.0/22
                IPv6:
                  2804:21bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264570

    Signature Algorithm: sha256WithRSAEncryption
         b4:ec:bb:c5:52:e4:a8:f7:8a:e5:a2:3f:0c:16:13:ce:e0:53:
         d3:90:60:de:6d:e2:2e:2b:96:40:2e:f0:e8:91:27:7d:ba:27:
         73:d4:ff:88:6f:a5:ca:74:46:d9:81:7b:3a:bf:92:0a:23:8a:
         cb:b9:91:26:de:e1:42:08:1c:5a:e9:a6:60:9b:49:22:ac:33:
         f5:3d:5d:78:f3:48:27:69:0c:3a:be:8f:c5:87:5b:c4:a7:fe:
         e9:a3:3e:75:17:24:ed:c0:5d:c7:4e:89:03:d8:9b:81:eb:f6:
         d7:6c:35:19:6e:14:65:32:19:d9:b0:b5:db:9a:18:5b:81:ac:
         cc:28:7b:7c:38:50:dc:ca:f9:67:af:47:ff:be:ea:22:f3:31:
         98:9a:2e:b7:7a:b1:28:c6:e7:87:d7:67:74:89:0b:f2:5a:a4:
         e9:d2:ae:96:8b:c9:4c:ad:0c:b5:91:61:6c:66:63:08:d5:eb:
         bd:11:d9:fe:22:4b:e7:ec:ae:43:7a:33:4c:bd:74:11:4c:09:
         76:68:df:d0:79:7d:e8:c5:1e:a4:9b:df:a5:1e:ca:8e:97:d9:
         79:56:3a:1d:ec:8b:ef:9e:54:94:b3:82:78:89:ab:31:da:0a:
         56:d1:bd:e2:0f:bf:60:12:5b:1e:18:22:a7:0c:4a:7a:7d:0f:
         33:63:aa:8e
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUSqeZ0GJYzKtyttBFN7cR4HY3cv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA3MDQxNTM0MzZaFw0yNDA3MDIxNTM5MzZaMDMxMTAvBgNV
BAMTKDM2NzI5RTkzOTdFQzNBM0JBRjE2QzQ0OTNGOEVCQjIwQjM4MzY3QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUiXJbuTCTiF4qgZnov0uXhud
MPja+OFUkIaUF04P2r3QempuiPU8OoN9iFj4/eN4t/fEnMsGqTIJ+4yhlbpheunl
bMs7XdzslflLweI5vG+Q5KXwi990yTtcEsgGe1QAlxfRYT+Lf/CH1S7jRbveFg48
RyerVBijZV5gf3vb3asY3Bwv+Z3Erb4embNGxDR7Bip0wv8VIV7DI1Q9LeDAaOlh
rMyFyLJz4rdBoG0bEEJZ//KRAhafTL5WLRBt68o6UtqQOKrZr6Hwguv4OAGdbTdn
y2eJio+f8vPXSZgWglbwYEeHe2lyEf7t/gXqh3ThUjrd/4yvCiP2jZOvRDtZAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2cp6Tl+w6O68W
xEk/jrsgs4NnqTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FeldQanNCcTRCcUZ4MmJtOVlYbzE1TkxEdUg3S1k5NVYy
QmN2QjJnQXFxNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FeldQanNCcTRCcUZ4MmJtOVlYbzE1TkxEdUg3S1k5NVYy
QmN2QjJnQXFxNC8wLzM2NzI5RTkzOTdFQzNBM0JBRjE2QzQ0OTNGOEVCQjIwQjM4
MzY3QTkubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAookKDANBAIAAjAHAwUA
KAQhvDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMECXowDQYJKoZIhvcNAQELBQAD
ggEBALTsu8VS5Kj3iuWiPwwWE87gU9OQYN5t4i4rlkAu8OiRJ326J3PU/4hvpcp0
RtmBezq/kgojisu5kSbe4UIIHFrppmCbSSKsM/U9XXjzSCdpDDq+j8WHW8Sn/umj
PnUXJO3AXcdOiQPYm4Hr9tdsNRluFGUyGdmwtduaGFuBrMwoe3w4UNzK+WevR/++
6iLzMZiaLrd6sSjG54fXZ3SJC/JapOnSrpaLyUytDLWRYWxmYwjV670R2f4iS+fs
rkN6M0y9dBFMCXZo39B5fejFHqSb36Ueyo6X2XlWOh3si++eVJSzgniJqzHaClbR
veIPv2ASWx4YIqcMSnp9DzNjqo4=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org