Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36824D1C7AB8CCE4C9C6872488A2302EE8BE4108.cer
File:                     36824D1C7AB8CCE4C9C6872488A2302EE8BE4108.cer (raw, json)
Hash identifier:          TBnBioCdeOYP8Aa+UtmmY4xVMu/PndRa7NgOJYd3884=
Subject key identifier:   36:82:4D:1C:7A:B8:CC:E4:C9:C6:87:24:88:A2:30:2E:E8:BE:41:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BC7F3A128A3A6F9BD7D1201BC84FE1E36A6924A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/36824D1C7AB8CCE4C9C6872488A2302EE8BE4108.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jan 2022 00:15:57 +0000
Certificate not after:    Wed 18 Jan 2023 00:20:57 +0000
Subordinate resources:    AS: 262490
                          IP: 177.66.80.0/21
                          IP: 2804:514::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:f3:a1:28:a3:a6:f9:bd:7d:12:01:bc:84:fe:1e:36:a6:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 00:15:57 2022 GMT
            Not After : Jan 18 00:20:57 2023 GMT
        Subject: CN=36824D1C7AB8CCE4C9C6872488A2302EE8BE4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:47:71:cd:fe:75:57:da:2b:58:20:5f:9c:
                    d7:da:e6:f5:8f:f0:21:f6:d2:0c:f9:56:b8:b6:bc:
                    af:5d:05:77:71:33:38:4e:2c:fd:34:e0:b8:16:f3:
                    86:88:dd:bd:d0:a9:a7:43:ca:12:4a:43:ce:0e:95:
                    f5:29:38:41:0a:25:c9:15:81:b9:89:12:bb:35:d2:
                    64:c9:f1:82:2d:09:53:e4:73:e7:35:33:fc:15:67:
                    ca:80:74:45:e9:d1:2b:a4:99:9d:0e:4a:50:ab:fb:
                    be:9b:0f:ff:77:fd:5b:be:38:1a:53:c6:83:d2:2a:
                    bc:0d:cd:bb:fd:34:34:f1:db:2b:23:d1:65:7b:ad:
                    a7:26:c7:f6:17:6f:b5:27:6d:79:d1:57:85:ed:a9:
                    a1:b4:6a:83:3b:74:be:4d:d5:51:1d:0f:2f:66:9d:
                    e6:6f:03:80:46:6b:42:f8:ef:eb:b6:ea:15:bc:e6:
                    3c:1c:91:5b:b2:91:ba:b0:de:05:65:9b:5d:65:5b:
                    ae:92:0b:59:bd:c7:32:a3:9f:7b:1c:b2:96:a0:80:
                    23:c4:ba:a4:75:bc:ad:10:18:15:5c:6c:5e:79:5f:
                    4a:95:42:f8:80:53:46:88:9d:52:39:cd:f6:c6:8c:
                    de:05:d7:24:29:a6:88:79:eb:e7:22:09:b6:dd:8e:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:82:4D:1C:7A:B8:CC:E4:C9:C6:87:24:88:A2:30:2E:E8:BE:41:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6Abm7mqturDVRYh5Ki8kaLs9UX95XyjrfmSocy7KJE7/0/36824D1C7AB8CCE4C9C6872488A2302EE8BE4108.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.80.0/21
                IPv6:
                  2804:514::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262490

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:65:c1:b5:82:f7:cd:c4:b6:ca:f3:6b:52:79:af:00:b7:
         ab:1c:22:cb:c0:59:f4:4c:e1:82:91:02:13:5f:ed:45:8e:87:
         7a:04:d9:d7:f3:d4:6e:c8:ba:60:7b:1e:91:a6:c1:7d:a0:75:
         b7:6b:b8:39:54:b3:ff:a6:20:8e:6c:2f:7a:03:ad:f2:74:47:
         38:75:48:67:e8:31:22:92:27:d8:fd:f8:96:75:bd:9e:f3:83:
         21:75:72:ee:ab:ae:bb:65:61:55:a5:c0:73:11:f6:ff:77:0d:
         6c:97:f5:95:8d:c6:4f:49:8d:2a:93:b8:1b:7b:98:63:77:25:
         19:6d:3e:0c:ae:da:86:cd:32:7a:06:79:ad:7a:e7:81:90:25:
         52:e4:65:40:1b:9d:ef:f2:00:c7:e8:a2:d7:6c:5f:13:05:e9:
         3e:d9:f4:0a:a8:79:07:36:c8:d6:4f:25:e5:3a:63:23:77:43:
         89:0c:92:7c:a8:0a:82:62:00:35:76:12:b5:8e:3a:21:4e:95:
         c5:8b:4b:31:f4:74:95:d1:11:15:b7:48:ef:81:a8:32:ad:d3:
         1e:19:56:05:4b:cb:31:db:04:6a:10:14:74:5a:af:97:df:83:
         8a:5a:64:74:06:3e:86:e9:5b:95:b4:ef:df:64:81:95:68:8f:
         77:bd:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org