Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
File:                     36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer (raw, json)
Hash identifier:          8bnoIf8l4cjGdYK8EXUjpql2/Bd0Nxbnd4dbjXDmD7k=
Subject key identifier:   36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2795A60602664039D7FD6BD62E7B159BFB8D7210
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 12:55:09 +0000
Certificate not after:    Fri 01 Nov 2024 13:00:09 +0000
Subordinate resources:    AS: 28669
                          IP: 45.234.40.0/22
                          IP: 168.227.12.0/22
                          IP: 170.238.116.0/22
                          IP: 177.36.160.0/20
                          IP: 177.107.80.0/20
                          IP: 177.137.64.0/20
                          IP: 179.189.224.0/20
                          IP: 186.195.144.0/20
                          IP: 186.225.96.0/19
                          IP: 187.108.32.0/20
                          IP: 187.111.160.0/20
                          IP: 189.8.80.0/20
                          IP: 189.28.144.0/20
                          IP: 191.241.224.0/19
                          IP: 201.46.16.0/20
                          IP: 2804:290::/32
                          IP: 2804:7cc::/32
                          IP: 2804:4bec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:95:a6:06:02:66:40:39:d7:fd:6b:d6:2e:7b:15:9b:fb:8d:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 12:55:09 2023 GMT
            Not After : Nov  1 13:00:09 2024 GMT
        Subject: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:ce:b4:31:97:8f:33:d8:68:9d:11:e0:66:
                    d2:9a:30:1b:b4:6c:37:28:5e:6c:dd:a8:24:a0:0f:
                    c1:8c:c4:7e:a0:c5:7a:0d:8a:59:37:0c:a6:08:1d:
                    24:0a:83:47:5a:df:9a:4a:12:7b:cd:99:48:2f:09:
                    95:7c:c2:3a:c8:53:da:bb:a5:32:0a:bb:ab:81:12:
                    67:b0:b0:59:bc:e9:15:eb:35:e7:b2:98:35:34:34:
                    84:8f:4c:c9:ee:e3:d9:ec:60:20:19:73:d6:a8:db:
                    cd:73:77:d0:ba:f5:e3:c5:1c:56:0c:a9:cd:35:c7:
                    dc:33:cc:6d:1d:3d:85:a8:bb:36:4d:0c:60:ae:20:
                    f9:50:d0:8b:a4:9c:73:10:db:c5:a0:d4:d3:bf:86:
                    11:03:e7:92:10:97:d0:7a:0c:b5:a6:3d:ea:ca:47:
                    72:36:9d:b5:8d:14:07:2a:50:0e:ba:c6:22:36:52:
                    08:2e:b1:8a:4d:a5:5e:88:73:85:c0:f3:d0:8b:ba:
                    48:c0:43:96:85:47:e7:5f:52:c4:6d:a5:cf:c9:b7:
                    e5:9d:5e:52:17:2a:30:59:2c:52:de:6c:d6:86:20:
                    62:fc:e6:bd:1b:63:f9:69:e0:33:f9:44:11:df:45:
                    23:77:6f:9e:93:31:fe:97:5c:f7:f6:29:bc:7a:17:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.40.0/22
                  168.227.12.0/22
                  170.238.116.0/22
                  177.36.160.0/20
                  177.107.80.0/20
                  177.137.64.0/20
                  179.189.224.0/20
                  186.195.144.0/20
                  186.225.96.0/19
                  187.108.32.0/20
                  187.111.160.0/20
                  189.8.80.0/20
                  189.28.144.0/20
                  191.241.224.0/19
                  201.46.16.0/20
                IPv6:
                  2804:290::/32
                  2804:7cc::/32
                  2804:4bec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28669

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:39:51:9e:ea:fa:ca:3a:ec:70:ad:d0:d6:0c:0a:89:89:
         3c:08:38:7c:79:e6:c4:ef:a8:db:8b:33:25:5b:a0:f0:07:50:
         3a:4f:8e:64:f9:2d:87:4e:d4:99:a2:62:2d:f3:ba:4e:fa:05:
         be:51:3c:a8:1f:28:f7:1e:75:45:3d:d3:79:1e:38:8f:a7:09:
         a2:80:ea:71:6a:fc:06:80:77:cf:5e:18:58:15:76:cb:05:eb:
         53:64:14:d3:d2:73:4b:d5:34:59:c9:4f:62:25:32:0f:0d:1b:
         8e:39:84:c1:2e:50:0f:36:b9:66:84:08:2b:d2:8f:24:79:3c:
         5b:5d:31:d8:10:71:49:d1:f3:47:62:bd:c5:13:d2:6c:a5:81:
         61:85:99:19:af:67:12:5b:62:0f:39:f3:64:cc:ca:15:4e:cd:
         00:dd:eb:fd:2b:c4:43:cd:14:5e:ef:dc:1e:81:53:c4:0d:09:
         38:92:5b:7e:3d:83:9e:21:fd:63:89:1e:53:07:ed:d2:89:5d:
         9d:7a:41:84:7d:f7:db:de:02:10:5d:a8:ab:f9:d9:82:4d:59:
         8d:8e:2e:ff:55:de:b2:14:d4:6f:36:b4:0b:f0:55:ed:23:f6:
         f2:d6:6f:2b:ed:a5:21:d9:3a:a6:af:81:3a:ec:0c:1e:d8:a9:
         b3:03:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 09:46:21 2025 by rpki-client