Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/536CB01C75E1F775305A72F345DD1273C3E8A063.cer
File:                     536CB01C75E1F775305A72F345DD1273C3E8A063.cer (raw, json)
Hash identifier:          Rq2mbW9BlgUbRJWoMsx8aID8xZlL8vOf0F3tFaQbRhU=
Subject key identifier:   53:6C:B0:1C:75:E1:F7:75:30:5A:72:F3:45:DD:12:73:C3:E8:A0:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       794FD3BD362CFE25F462CF63B303D9435D979427
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/536CB01C75E1F775305A72F345DD1273C3E8A063.mft
caRepository:             rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 22:45:12 +0000
Certificate not after:    Mon 04 Mar 2024 22:50:12 +0000
Subordinate resources:    AS: 264409
                          IP: 131.221.44.0/22
                          IP: 2804:1e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4f:d3:bd:36:2c:fe:25:f4:62:cf:63:b3:03:d9:43:5d:97:94:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 22:45:12 2023 GMT
            Not After : Mar  4 22:50:12 2024 GMT
        Subject: CN=536CB01C75E1F775305A72F345DD1273C3E8A063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:58:57:a5:33:1d:bf:db:1f:ab:62:1e:14:a0:
                    4a:8b:3f:30:e7:ef:7e:45:bc:4b:97:7f:57:ac:e9:
                    70:d0:9c:53:d3:c6:b6:a4:d0:75:8a:79:f9:46:c5:
                    39:e0:97:22:61:e5:7f:9a:33:b9:84:ee:f1:3b:06:
                    5e:ac:e9:24:8c:5e:59:d0:70:15:63:1b:32:77:12:
                    7c:88:90:6b:9d:96:69:53:b6:13:d1:a6:0e:e2:c4:
                    21:91:da:26:58:3c:f8:55:5c:0e:cf:1f:2b:1d:37:
                    32:52:61:71:0c:47:eb:f2:79:a8:53:01:bb:6e:bf:
                    0f:4b:5a:7e:8a:a9:10:a0:fb:62:a0:d4:44:75:af:
                    10:05:a5:5e:1a:d9:b2:3a:3e:97:6e:9a:7f:93:6c:
                    6a:31:f4:bf:87:0e:22:b7:21:70:e8:c6:e8:e7:a6:
                    24:f6:97:56:20:6d:f0:b6:b1:3a:cd:db:7f:12:0f:
                    9a:12:59:37:45:6f:15:28:38:5a:6f:f1:ed:58:96:
                    95:15:c1:90:d8:f8:b4:ab:04:5a:8c:d1:a5:86:e5:
                    98:36:77:e7:20:a1:02:47:d4:ff:b2:1f:61:ce:57:
                    dd:80:67:44:e2:07:77:22:2c:8b:85:f1:08:9f:1f:
                    88:10:c2:a9:c0:e7:d1:93:50:10:a6:76:fe:c7:3f:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:6C:B0:1C:75:E1:F7:75:30:5A:72:F3:45:DD:12:73:C3:E8:A0:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/536CB01C75E1F775305A72F345DD1273C3E8A063.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.44.0/22
                IPv6:
                  2804:1e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264409

    Signature Algorithm: sha256WithRSAEncryption
         64:02:09:e8:34:7c:d8:cf:ec:1f:59:9d:d5:0f:04:a5:a7:3b:
         ef:b7:6e:bd:a9:e3:0b:5b:bd:5f:05:9b:6c:91:48:a5:91:ca:
         cb:f8:3d:ef:b4:d3:72:b1:3a:19:27:e2:8d:19:c8:67:be:e9:
         de:83:ca:17:fc:5a:32:50:15:fa:bf:d6:f3:b3:18:db:33:2f:
         2e:b9:ee:5c:e5:37:8f:4e:b4:57:d8:f6:dd:c9:f3:d0:3a:8a:
         37:de:2a:ab:d1:8f:7c:ad:af:b0:a6:78:03:b6:50:97:cf:be:
         03:7a:80:64:de:78:d6:2c:4b:e7:b2:f1:0f:46:d3:02:6a:9f:
         a4:e0:e7:29:6c:ce:36:27:fc:c4:c9:93:57:65:16:89:cf:56:
         6a:70:e2:72:0e:31:34:20:06:00:bb:a4:b9:8b:4d:a1:07:3f:
         60:d4:9d:bf:5c:a4:ca:e0:9a:c5:e9:9d:69:ef:92:7d:1b:57:
         1e:3e:76:cb:e3:32:c7:c3:2a:23:84:2b:0b:57:2b:c3:72:4f:
         07:01:11:de:4a:59:c9:81:1d:3e:42:fc:d2:83:4a:8d:89:28:
         81:c2:cb:2f:5d:01:32:af:04:20:80:7f:7a:7c:a9:a0:47:26:
         a2:74:d7:fd:02:5c:df:b2:85:80:55:11:fe:e4:b6:8d:24:f9:
         9e:67:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org