Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36F665342472E37B1A265E089E5C8754A433B1A2.cer
File:                     36F665342472E37B1A265E089E5C8754A433B1A2.cer (raw, json)
Hash identifier:          L1XFRp2touaDKuQds07EPhoGcMl3dQx1OkrKU/fZL10=
Subject key identifier:   36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       455531362E26549321985A4F76148EBCBA21857A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/36F665342472E37B1A265E089E5C8754A433B1A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 12:18:04 +0000
Certificate not after:    Tue 21 Jan 2025 12:23:04 +0000
Subordinate resources:    AS: 265928
                          IP: 131.196.132.0/22
                          IP: 2804:4004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:55:31:36:2e:26:54:93:21:98:5a:4f:76:14:8e:bc:ba:21:85:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 12:18:04 2024 GMT
            Not After : Jan 21 12:23:04 2025 GMT
        Subject: CN=36F665342472E37B1A265E089E5C8754A433B1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:d2:20:c5:a6:9a:9f:84:2c:53:93:66:45:
                    37:a5:a0:5b:b0:50:d9:05:d2:bb:a6:94:f6:29:13:
                    b4:82:d0:0e:42:15:4e:9b:5c:9d:3a:d8:b6:b3:5f:
                    5f:25:ac:06:29:61:d8:c1:e1:cc:99:72:35:5f:82:
                    73:a7:5b:80:9e:3c:10:6a:87:31:d3:38:1f:d0:a9:
                    68:f4:4b:e2:9d:24:86:55:66:83:7e:68:3e:1f:e3:
                    3a:1c:8e:a0:e3:28:dc:1a:78:8b:09:fb:3e:06:e9:
                    a2:98:a7:e8:f6:54:31:be:35:a5:72:ba:42:20:cc:
                    82:f8:99:0f:d7:da:27:5a:1f:ad:1c:ef:ce:01:e0:
                    9c:22:97:6d:08:6f:93:05:93:7a:93:3d:2f:91:91:
                    ca:fa:16:62:99:d8:5a:aa:a4:16:00:69:29:75:6a:
                    e0:8c:2a:f9:c6:a7:9a:15:b2:b8:27:0d:9f:9b:fe:
                    35:15:0f:f9:29:9e:6e:5b:7f:63:8f:f8:c5:fe:3e:
                    94:8f:d7:16:8a:45:bf:27:ae:09:92:8f:aa:c2:8b:
                    96:d3:34:8c:ac:b1:94:5a:38:0c:78:c0:3a:4a:73:
                    50:ed:e8:e9:61:d4:f5:42:36:fb:0c:e9:25:da:97:
                    cb:d0:8a:46:36:78:25:7b:76:00:f1:3a:cf:79:ed:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:F6:65:34:24:72:E3:7B:1A:26:5E:08:9E:5C:87:54:A4:33:B1:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/36F665342472E37B1A265E089E5C8754A433B1A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/22
                IPv6:
                  2804:4004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265928

    Signature Algorithm: sha256WithRSAEncryption
         6a:29:13:01:f5:1c:bc:09:dd:d6:67:a6:9a:13:bd:cd:42:4b:
         18:ff:94:09:e9:bd:86:60:df:56:9a:b5:0b:10:ab:5e:11:5d:
         25:af:79:6b:57:bb:9a:91:1d:ff:9d:b5:dc:a4:c1:9a:55:96:
         76:82:4f:05:ca:77:4c:09:e3:06:fb:61:92:5a:45:d4:ea:13:
         58:fd:7d:a4:02:ce:c0:6e:b8:62:ae:5f:8d:53:da:89:fd:36:
         e0:87:5e:4d:6b:7f:9a:ab:3f:fc:bb:da:d2:ab:b1:e0:03:7f:
         91:f4:b0:fe:4e:ef:ea:10:b7:c7:28:eb:7f:eb:1d:53:b4:72:
         6c:94:f6:61:2d:2c:3c:5c:01:8a:97:87:66:ce:9c:29:e2:a3:
         9f:29:5e:80:90:c6:12:fd:77:3a:2c:98:58:33:49:16:16:bd:
         5a:87:a6:c0:fe:39:19:21:d7:4d:16:8d:e1:40:ed:b2:0d:13:
         ca:39:a1:0b:c8:e1:e1:d3:9d:17:68:ad:55:c2:f6:49:23:68:
         c1:35:62:8b:0a:50:99:23:8f:2b:6b:cf:b5:c7:43:e7:65:97:
         c3:c1:aa:dd:67:60:b1:a7:68:c6:43:74:5e:bf:ab:0e:d2:81:
         07:45:1b:b6:38:f1:07:a6:3e:36:bb:9f:59:2b:d7:b7:98:9d:
         42:97:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org