Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.cer
File:                     36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.cer (raw, json)
Hash identifier:          RPYOcOCgjmTpYbUFav8TWl7P9KLWLQarDLaKzCC8dzI=
Subject key identifier:   36:A6:B5:8C:6D:CD:21:60:E5:60:A1:B8:AC:69:EF:09:02:B0:CD:4C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C360B1F2C7ECD49E4C2719F9FFBF2D58DA5182A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jan 2022 21:15:35 +0000
Certificate not after:    Fri 06 Jan 2023 21:20:35 +0000
Subordinate resources:    AS: 267654
                          IP: 45.70.156.0/22
                          IP: 2804:44cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:36:0b:1f:2c:7e:cd:49:e4:c2:71:9f:9f:fb:f2:d5:8d:a5:18:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  7 21:15:35 2022 GMT
            Not After : Jan  6 21:20:35 2023 GMT
        Subject: CN=36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:77:a8:69:bf:87:02:e2:a1:80:cf:ca:60:
                    e2:79:ae:a9:70:db:37:4e:c4:36:d2:70:6d:f1:ac:
                    8b:0b:4d:16:50:23:88:56:42:4b:49:79:0b:a8:40:
                    df:bc:e5:fd:72:bb:28:75:85:12:86:a1:ac:82:b1:
                    4d:05:df:8e:0d:48:a8:e4:c3:02:e4:aa:bc:88:47:
                    e7:36:06:2a:ae:f3:e4:eb:0b:45:3c:75:64:77:c5:
                    61:f8:7a:57:f8:2e:75:1f:1f:42:10:6c:4e:99:bd:
                    ce:ec:2e:b2:81:62:23:2a:06:48:1a:83:2a:6d:e4:
                    3e:c9:49:a4:13:c5:6a:78:be:fd:0c:80:ee:57:33:
                    f5:72:b7:2d:f3:3e:c6:88:66:c1:c5:02:e8:be:87:
                    a4:15:81:7d:e9:e1:11:e3:d6:49:98:2d:fa:6d:87:
                    0e:79:79:a5:6f:81:06:cf:47:ff:74:b8:ff:44:b0:
                    3c:34:3d:f7:f9:fd:3c:72:4e:d2:c8:52:87:55:00:
                    d0:66:0f:f7:b0:ed:aa:f8:8f:7e:b9:53:ff:e7:c3:
                    4e:54:c1:73:2e:1a:7d:1d:38:75:83:ea:37:66:81:
                    62:6a:15:a9:fe:83:c4:04:e9:a8:17:da:22:66:a4:
                    04:cc:d3:25:c1:ea:9a:e0:6d:52:db:2c:d8:50:87:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:A6:B5:8C:6D:CD:21:60:E5:60:A1:B8:AC:69:EF:09:02:B0:CD:4C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/36A6B58C6DCD2160E560A1B8AC69EF0902B0CD4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.156.0/22
                IPv6:
                  2804:44cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267654

    Signature Algorithm: sha256WithRSAEncryption
         00:51:57:1d:c9:95:ab:9e:69:6b:a4:fe:8e:e0:ad:ea:72:54:
         5e:e3:cf:3b:a4:2c:40:8b:5a:f2:0e:0c:70:d2:83:fe:b6:6c:
         46:66:d7:a0:59:09:bb:f3:05:26:d3:65:8a:af:bd:65:42:bf:
         13:39:58:06:77:f9:0c:93:6b:0e:57:91:16:4d:6b:d8:0a:05:
         c1:ca:1d:c2:79:cf:f4:da:89:47:b7:91:1e:e1:26:8e:56:14:
         f8:3e:e0:ca:79:66:49:80:97:09:c6:18:78:d1:8a:a8:52:38:
         4e:24:01:60:1d:5a:41:d2:c7:e3:a9:a7:df:97:2d:40:74:da:
         d2:76:5f:88:93:15:e5:47:a2:46:73:57:ed:eb:35:34:af:76:
         69:a0:f0:4c:ba:1f:65:50:a8:2d:9a:ca:d0:37:5b:7b:b3:1b:
         24:a1:66:20:4d:39:41:74:47:de:3f:6b:f6:c1:af:5e:ca:05:
         c5:6a:4f:03:b8:a4:bc:f0:fc:89:1d:d0:13:ab:be:0c:67:6d:
         d7:4f:07:0c:bb:4d:83:68:58:c2:70:5e:9f:e1:61:be:b9:d3:
         b3:e7:b7:34:df:5c:2f:70:08:f8:a0:4d:ec:1f:d0:05:65:77:
         bb:e5:55:f3:49:5e:53:b9:d5:ac:4a:9e:f9:8a:ee:78:bf:94:
         8a:69:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org