Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/36FB73C6CE2D00DA414447380E75A686C540DABD.cer
File:                     36FB73C6CE2D00DA414447380E75A686C540DABD.cer (raw, json)
Hash identifier:          0BnKt6Mnw/PEwhUOr5EnKEXJgp5/t/twm/a4W2fNsno=
Subject key identifier:   36:FB:73:C6:CE:2D:00:DA:41:44:47:38:0E:75:A6:86:C5:40:DA:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F0B7CA1913A6830FFD3CAA03AAAA4D235B96608
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/36FB73C6CE2D00DA414447380E75A686C540DABD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 12:33:41 +0000
Certificate not after:    Wed 25 Dec 2024 12:38:41 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0b:7c:a1:91:3a:68:30:ff:d3:ca:a0:3a:aa:a4:d2:35:b9:66:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 27 12:33:41 2023 GMT
            Not After : Dec 25 12:38:41 2024 GMT
        Subject: CN=36FB73C6CE2D00DA414447380E75A686C540DABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:2f:ab:00:3c:ae:9d:82:f6:c4:b1:7d:28:
                    eb:f1:5e:c2:31:2e:17:3e:62:41:a1:b6:24:95:c8:
                    46:d1:a3:d3:ae:c1:95:6a:fd:14:59:ca:a0:ff:24:
                    59:a8:4b:4e:92:a8:62:89:fc:22:83:03:0d:4a:ae:
                    17:53:e5:34:0d:38:8f:7c:24:44:d4:63:9e:71:75:
                    04:13:42:8f:78:f9:88:56:48:96:72:fe:eb:38:77:
                    f9:e3:78:40:c8:24:07:03:7a:7f:63:72:86:21:6f:
                    3f:ef:d8:c2:d7:3b:82:cf:ba:be:60:b1:65:11:e5:
                    e9:fc:ba:1a:25:d1:ae:3d:91:9a:5c:33:93:4e:19:
                    d8:c3:61:62:d7:e7:2b:e7:bd:72:68:5f:9c:86:20:
                    e1:5a:56:2a:f1:15:98:79:9b:e3:03:e1:29:e7:35:
                    0b:07:51:a3:db:ac:07:ea:bd:70:3b:6a:6d:99:85:
                    cf:7b:0b:86:4a:c8:12:b3:c5:f7:1d:38:e5:42:f7:
                    af:f7:9c:a0:04:fc:ac:6e:d0:1b:2e:78:3f:87:f1:
                    06:a7:a0:90:cd:bd:18:b0:fb:67:b7:b7:8d:2d:ca:
                    92:25:99:d8:ff:a1:6f:3f:5b:1c:dd:a4:12:e4:d7:
                    95:23:19:87:14:6d:4c:7a:25:04:74:91:4d:fc:c7:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                36:FB:73:C6:CE:2D:00:DA:41:44:47:38:0E:75:A6:86:C5:40:DA:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/36FB73C6CE2D00DA414447380E75A686C540DABD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:46:ac:cb:9f:bb:1e:05:65:af:99:82:09:6f:a7:79:54:
         55:f9:cc:4d:78:c9:f2:05:84:7a:e4:19:4b:9c:36:ad:d3:2e:
         6e:75:e2:58:f0:01:7e:8a:c5:85:2c:80:3e:66:82:f0:21:9f:
         2c:ab:d3:f2:01:b3:1f:b7:2c:c8:ce:aa:bc:aa:ae:ac:6c:b2:
         8a:09:11:85:0c:2a:ef:58:a6:94:32:0b:46:50:8c:cd:88:dc:
         4e:58:52:fe:76:1a:51:bb:c3:8d:20:ef:f8:98:56:ff:2a:21:
         d9:29:47:56:2e:ae:fc:20:dc:33:67:c3:26:75:63:fa:76:e4:
         f6:13:ed:d9:34:ec:10:fa:3d:dc:a0:2b:6f:b1:96:40:5f:d9:
         2c:99:57:b0:2b:cc:0b:8b:07:fc:55:c8:8b:02:89:95:ec:02:
         07:bf:02:2b:39:a8:fb:88:4c:59:fd:af:f8:7b:83:00:2f:e8:
         9c:8a:ba:b2:08:d5:98:a5:69:56:3c:99:62:7d:9a:51:c9:86:
         65:98:aa:c0:af:03:98:45:88:b6:bd:66:06:0b:e1:a3:e0:d4:
         b0:45:3b:9b:19:43:13:66:db:da:ff:2b:9f:95:18:00:56:f9:
         26:7b:45:5b:08:5e:6d:39:5b:c9:2f:21:30:37:6f:fa:41:63:
         ad:47:b3:db
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUPwt8oZE6aDD/08qgOqqk0jW5ZggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzEyMjcxMjMzNDFaFw0yNDEyMjUxMjM4NDFaMDMxMTAvBgNV
BAMTKDM2RkI3M0M2Q0UyRDAwREE0MTQ0NDczODBFNzVBNjg2QzU0MERBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVy+rADyunYL2xLF9KOvxXsIx
Lhc+YkGhtiSVyEbRo9OuwZVq/RRZyqD/JFmoS06SqGKJ/CKDAw1KrhdT5TQNOI98
JETUY55xdQQTQo94+YhWSJZy/us4d/njeEDIJAcDen9jcoYhbz/v2MLXO4LPur5g
sWUR5en8uhol0a49kZpcM5NOGdjDYWLX5yvnvXJoX5yGIOFaVirxFZh5m+MD4Snn
NQsHUaPbrAfqvXA7am2Zhc97C4ZKyBKzxfcdOOVC96/3nKAE/Kxu0BsueD+H8Qan
oJDNvRiw+2e3t40typIlmdj/oW8/WxzdpBLk15UjGYcUbUx6JQR0kU38x2pJAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2+3PGzi0A2kFE
RzgOdaaGxUDavTAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaWJOWVpzU2dNcTJ3ekV4aHllc1FUQnRoRWFITkhKYTQ4
bWVvRnBVYmZXeC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9GaWJOWVpzU2dNcTJ3ekV4aHllc1FUQnRoRWFITkhKYTQ4
bWVvRnBVYmZXeC8wLzM2RkI3M0M2Q0UyRDAwREE0MTQ0NDczODBFNzVBNjg2QzU0
MERBQkQubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA7O/MDANBAIAAjAHAwUA
KAQNFDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzXQwDQYJKoZIhvcNAQELBQAD
ggEBAAn0RqzLn7seBWWvmYIJb6d5VFX5zE14yfIFhHrkGUucNq3TLm514ljwAX6K
xYUsgD5mgvAhnyyr0/IBsx+3LMjOqryqrqxssooJEYUMKu9YppQyC0ZQjM2I3E5Y
Uv52GlG7w40g7/iYVv8qIdkpR1Yurvwg3DNnwyZ1Y/p25PYT7dk07BD6PdygK2+x
lkBf2SyZV7ArzAuLB/xVyIsCiZXsAge/Ais5qPuITFn9r/h7gwAv6JyKurII1Zil
aVY8mWJ9mlHJhmWYqsCvA5hFiLa9ZgYL4aPg1LBFO5sZQxNm29r/K5+VGABW+SZ7
RVsIXm05W8kvITA3b/pBY61Hs9s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org