Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer
File:                     36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.cer (raw, json)
Hash identifier:          3/E/sQpqfG/ZGfmy8yqdXF2/GAnb6wHDKHUdhonAptc=
Subject key identifier:   36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5445C780C80DB5C9B4A84A7ADF89038A058DC782
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 18:11:18 +0000
Certificate not after:    Thu 19 Sep 2024 18:16:18 +0000
Subordinate resources:    AS: 263545
                          IP: 191.6.0.0/22
                          IP: 2804:13ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:45:c7:80:c8:0d:b5:c9:b4:a8:4a:7a:df:89:03:8a:05:8d:c7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 18:11:18 2023 GMT
            Not After : Sep 19 18:16:18 2024 GMT
        Subject: CN=36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:ad:6c:05:c7:66:9f:52:1a:a5:62:f6:ac:
                    f4:fe:c3:2f:04:f6:07:1b:64:58:d9:40:64:72:26:
                    ce:95:62:b7:4d:c9:f1:50:64:81:30:10:d1:de:b9:
                    6c:76:0c:0b:f3:3e:70:c8:2b:b9:50:73:67:60:72:
                    f9:0c:00:12:59:f5:32:ca:78:1f:41:fb:3b:35:87:
                    00:6b:6e:33:e3:26:90:49:5a:fd:bc:e9:e3:07:7e:
                    41:bb:4a:c1:51:07:66:b8:12:5d:29:ec:42:06:c1:
                    51:0f:17:ea:61:88:92:b0:ff:01:f2:8d:19:d0:93:
                    de:b5:9f:4b:df:19:c5:a0:c8:aa:f0:a8:a7:a9:5b:
                    97:75:05:b4:62:e0:e1:e8:53:32:5f:a2:45:e3:6e:
                    ff:e4:1b:d2:17:ec:35:59:d1:14:7f:17:71:47:5e:
                    74:9a:9b:0d:cf:b1:7d:66:d8:3d:a8:dd:5c:a6:d6:
                    b6:fa:e7:4e:0a:9a:52:53:f6:61:62:a2:73:f1:2e:
                    e1:43:b3:44:98:d0:0a:32:20:75:27:19:1d:3e:6e:
                    09:1b:62:25:2d:57:dd:cf:f9:7b:14:2b:b6:d8:62:
                    f7:77:db:17:79:a4:35:d8:40:d4:37:00:6d:3c:b7:
                    ac:db:ab:2c:0d:ac:26:ae:8b:48:3b:e2:f1:40:60:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:B3:06:7A:BF:A9:D4:4E:0C:8B:3E:FA:52:DE:8D:8A:DF:28:33:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/36B3067ABFA9D44E0C8B3EFA52DE8D8ADF28336A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.0.0/22
                IPv6:
                  2804:13ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263545

    Signature Algorithm: sha256WithRSAEncryption
         85:2c:05:66:51:09:58:4b:c4:03:6d:23:3c:f6:aa:d9:77:83:
         ac:7d:27:df:e5:00:0f:48:64:15:a6:66:51:bd:24:1d:00:41:
         38:ba:91:6d:c9:20:8d:ec:3a:ef:bd:d4:9b:0a:c8:ca:eb:55:
         a3:38:8a:ab:19:49:04:5d:32:18:58:e1:7d:d5:b5:7c:b7:ec:
         b5:9b:06:40:79:32:9f:09:82:aa:0d:66:db:52:14:ef:c2:7f:
         02:f7:05:7e:a7:36:5d:0e:3e:69:8f:27:f7:6b:64:77:86:6d:
         ae:68:48:77:d3:b0:01:cb:15:9a:de:f1:6a:b2:4b:97:de:d3:
         65:6e:e8:ab:74:12:08:9e:e4:a2:a7:87:7c:fd:c5:d3:75:38:
         4a:20:ab:e6:de:36:e3:e3:a4:90:ee:1f:c4:1d:fd:5c:50:7d:
         29:02:98:b5:d5:2d:6c:2a:7b:8b:9e:3f:05:21:62:7e:79:ba:
         af:76:ef:8c:ae:b9:96:8d:82:a9:7f:87:00:d4:cd:ba:8d:60:
         54:f1:10:9d:3b:4b:ff:6d:86:ce:d2:54:4e:8d:6c:95:60:76:
         1f:1c:d3:2e:ba:13:67:b4:7d:73:9e:c3:f1:77:47:a7:ef:f3:
         92:c5:e9:ca:57:18:21:90:d0:e1:91:92:a5:ac:62:72:8f:f1:
         75:78:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org