Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/436AC15E57989C85E66C586C30E7C23263E417D9.cer
File:                     436AC15E57989C85E66C586C30E7C23263E417D9.cer (raw, json)
Hash identifier:          e3khqXtJESjFQQyIe4uDgiaTrF/iLuylMZklhlP/lY0=
Subject key identifier:   43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B2FF340336340CFE35D6EAE5B79B4B940D67E20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 19:21:18 +0000
Certificate not after:    Fri 31 May 2024 19:26:18 +0000
Subordinate resources:    AS: 267957
                          IP: 45.166.128.0/22
                          IP: 2804:55cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2f:f3:40:33:63:40:cf:e3:5d:6e:ae:5b:79:b4:b9:40:d6:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 19:21:18 2023 GMT
            Not After : May 31 19:26:18 2024 GMT
        Subject: CN=436AC15E57989C85E66C586C30E7C23263E417D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:69:c1:4b:91:b9:a6:a8:ab:88:aa:b0:55:
                    5f:12:c1:f5:19:4d:df:13:fe:d3:ae:c5:54:7a:b3:
                    8e:a5:7b:94:07:0a:0c:34:ec:f4:a4:c9:2f:6c:8f:
                    66:d1:2f:78:5f:02:80:9d:dc:db:29:0d:5d:75:dd:
                    2f:29:d6:3e:6e:32:46:12:98:60:74:df:4a:40:c2:
                    9d:13:e6:86:39:17:88:31:10:13:11:03:e2:00:db:
                    94:85:da:5f:b8:7e:65:7e:8d:c2:43:64:2d:ec:04:
                    55:d5:31:15:2b:3c:ed:44:11:96:d0:02:c2:ab:1c:
                    aa:95:71:23:ea:1d:14:0c:45:43:e9:58:db:fa:90:
                    41:5b:dc:45:f5:50:41:e7:b3:ca:68:f1:ac:8a:4c:
                    98:2c:76:d4:74:11:f9:23:33:a2:cb:a5:d5:6a:fe:
                    fa:75:94:ed:bd:83:21:70:06:17:70:34:3b:e8:77:
                    68:da:93:31:5f:9b:a8:5a:2e:2f:d1:e8:fb:f2:1b:
                    87:94:43:ca:ec:5e:7d:82:1b:93:13:3a:1d:f7:ff:
                    42:32:13:e5:96:89:5c:98:f2:86:a3:b6:18:32:a7:
                    f4:02:b1:ce:29:07:ce:4c:81:54:1d:2e:52:89:e1:
                    b7:dd:fc:88:12:c1:24:52:8c:78:ee:6e:e4:d9:01:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:6A:C1:5E:57:98:9C:85:E6:6C:58:6C:30:E7:C2:32:63:E4:17:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/436AC15E57989C85E66C586C30E7C23263E417D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.128.0/22
                IPv6:
                  2804:55cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267957

    Signature Algorithm: sha256WithRSAEncryption
         a5:52:e9:4e:cc:fc:9e:25:12:1c:11:87:d2:44:27:9c:8f:85:
         70:d9:3b:ba:6d:89:90:33:49:6e:01:c9:0f:20:14:d4:8c:65:
         e2:ce:5a:4a:34:20:a0:66:09:9a:9e:1b:eb:9e:20:29:d8:15:
         a4:d0:de:c9:6f:f4:94:5a:a8:92:6f:36:5d:ee:12:76:57:99:
         00:5b:f3:26:f5:99:20:c2:27:81:df:e1:51:1b:57:58:2e:18:
         fb:f0:10:ee:df:64:2a:34:66:35:51:b5:72:77:67:d0:be:bc:
         35:1b:cf:c9:98:08:24:16:b2:b8:cd:e2:33:04:89:73:46:a8:
         82:61:45:80:d3:ad:1f:58:55:bb:3f:3b:ad:2e:00:99:10:30:
         64:1c:eb:92:81:c1:1d:d3:83:1b:ec:28:16:06:c2:bc:ba:2d:
         e4:5b:6a:0f:66:51:a0:68:67:13:3b:1c:e9:53:8d:dc:31:0c:
         c1:af:7e:a7:3b:eb:e9:7c:3b:ad:04:02:fb:ac:67:60:cb:70:
         0f:fd:53:67:61:63:0b:7c:b2:bf:7f:20:9e:b9:33:0f:52:f5:
         c8:74:2f:9f:34:3b:a4:5c:69:f3:e3:c4:57:30:95:a3:d9:36:
         93:23:68:bc:72:84:59:57:b3:c3:bd:05:17:e1:ab:59:de:31:
         12:06:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org