Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.cer
File:                     36A2F1A073C1E2560697D35F5C8F0E131B1C5916.cer (raw, json)
Hash identifier:          GqAs96pnq/O1YNggs1llAnCNPraMSaWn4uwWKSZKvF8=
Subject key identifier:   36:A2:F1:A0:73:C1:E2:56:06:97:D3:5F:5C:8F:0E:13:1B:1C:59:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D32F2617C5EB9016AAA2307BC979C32578877E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.mft
caRepository:             rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 04:05:10 +0000
Certificate not after:    Fri 03 Jan 2025 04:10:10 +0000
Subordinate resources:    AS: 266136
                          IP: 45.6.136.0/22
                          IP: 2804:3b38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:f2:61:7c:5e:b9:01:6a:aa:23:07:bc:97:9c:32:57:88:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 04:05:10 2024 GMT
            Not After : Jan  3 04:10:10 2025 GMT
        Subject: CN=36A2F1A073C1E2560697D35F5C8F0E131B1C5916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:a9:0f:27:21:a2:ab:56:37:26:42:cb:98:
                    a6:6d:fb:d5:d7:14:ac:bc:9d:d7:99:74:5e:4c:69:
                    81:1e:5a:89:e8:b3:72:e0:04:e2:ca:67:13:2d:dc:
                    98:36:6e:02:66:a5:55:32:cf:b0:03:d3:ad:0e:22:
                    6e:5a:f1:de:e2:6f:e1:53:ee:27:11:5f:f8:9b:86:
                    43:8a:07:b5:ba:96:e5:a3:5f:55:60:95:91:02:3c:
                    e4:38:2b:62:c5:14:9c:90:74:92:b0:bd:44:e2:22:
                    b0:9b:dd:ec:c8:c1:ea:df:e0:d4:6b:15:b5:a8:4e:
                    a8:8c:19:65:6b:ff:e3:f0:3a:94:8a:60:47:95:7f:
                    96:72:86:58:45:47:e2:64:73:49:e7:e3:7c:9c:a4:
                    df:06:34:61:27:42:5c:6d:f4:52:25:17:d5:6b:e6:
                    07:a3:63:69:96:4a:ca:74:82:73:51:00:69:f6:2e:
                    10:22:6b:38:50:d1:fd:e5:a8:5c:db:d0:e7:14:b6:
                    29:1f:93:c1:9c:18:ec:98:44:07:f6:87:5e:6d:7a:
                    a9:c2:b6:89:2a:e9:35:bb:b4:e7:d4:f1:a4:71:66:
                    9d:f6:bc:d2:80:58:75:8f:58:8f:2a:8a:45:d2:e2:
                    c2:2f:82:fa:77:00:7e:65:83:12:ba:9e:bf:f0:ab:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:A2:F1:A0:73:C1:E2:56:06:97:D3:5F:5C:8F:0E:13:1B:1C:59:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/0/36A2F1A073C1E2560697D35F5C8F0E131B1C5916.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.136.0/22
                IPv6:
                  2804:3b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266136

    Signature Algorithm: sha256WithRSAEncryption
         89:1d:99:6c:21:9a:2f:f0:af:34:a0:2a:3e:8e:53:a8:b8:a4:
         7b:71:3c:7e:3e:fd:da:4f:e3:a7:00:e3:af:48:42:47:97:0c:
         8a:1b:5f:89:1b:30:e3:9c:8b:5a:12:e0:41:aa:df:a3:22:53:
         19:88:f3:e3:8a:db:77:19:00:3c:37:67:bf:1c:be:44:0f:57:
         aa:d5:7d:01:de:35:31:f1:22:0b:c1:5a:65:bd:11:a6:e4:ca:
         89:ed:96:c0:b8:75:ab:c1:e3:f4:c1:d8:19:07:bd:53:ec:8a:
         f4:8c:3c:c4:3b:e9:29:dd:82:b8:39:db:60:e2:05:b8:fe:21:
         e6:e9:dc:f5:2c:8e:10:b1:08:88:6b:60:dd:60:26:4a:94:ae:
         5f:21:73:3f:dd:f3:2e:37:99:b6:f9:fc:93:33:ec:18:92:da:
         4c:83:46:8c:31:f1:1e:f5:7a:f4:e8:a4:b1:95:9d:ed:0a:f0:
         62:93:36:72:c6:8f:03:a7:24:de:ca:e7:e3:b8:d9:f4:8e:e0:
         7d:7d:c8:39:e0:91:48:fc:07:81:8c:14:3d:96:48:c1:57:d3:
         17:03:24:e6:2d:92:f1:10:7d:7d:68:05:14:e6:ef:1c:89:da:
         75:13:f8:3c:bd:cf:fb:d0:4c:47:cd:36:83:a9:53:c5:e1:c7:
         5d:20:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----