Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.cer
File:                     A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.cer (raw, json)
Hash identifier:          Us3/uvGBCYFBcn8jJHZD/0xsNlQEvOjOQDw1vLwisU0=
Subject key identifier:   A3:6D:32:C1:95:FD:A8:9F:6C:59:D4:5D:A8:0E:6A:B9:A7:DC:B2:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       442DE30317565B848E3CE4035E6DEBB2E27E6F44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Feb 2023 20:06:45 +0000
Certificate not after:    Sat 17 Feb 2024 20:11:45 +0000
Subordinate resources:    AS: 262644
                          IP: 167.249.12.0/22
                          IP: 177.86.248.0/22
                          IP: 2804:2a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2d:e3:03:17:56:5b:84:8e:3c:e4:03:5e:6d:eb:b2:e2:7e:6f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 20:06:45 2023 GMT
            Not After : Feb 17 20:11:45 2024 GMT
        Subject: CN=A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:c3:f9:4e:ca:b3:be:89:21:5e:cc:4d:61:
                    d1:07:20:0c:ca:2a:b2:6a:64:b3:f6:bf:e4:d3:26:
                    30:3f:6d:ac:38:44:49:13:5e:61:37:f8:13:f6:22:
                    b7:df:a1:d6:86:06:33:c4:61:e5:32:d9:44:4a:2c:
                    10:c4:f2:e0:9c:64:90:a5:4e:d0:96:57:7b:bd:5f:
                    6e:70:89:13:89:c1:33:d0:ab:e4:9a:73:dd:ec:9d:
                    6f:a6:ce:12:b0:f8:cc:29:72:49:ac:4a:1b:91:4e:
                    60:fa:10:30:79:b9:13:12:12:6c:7c:11:fe:94:44:
                    7e:03:97:4f:85:4c:e9:05:0e:7e:74:7b:99:c7:fc:
                    07:76:14:29:55:d0:be:c1:f9:c9:ed:77:5b:07:bc:
                    db:c0:94:fc:53:90:90:18:63:7d:0f:53:91:53:60:
                    e6:53:20:7a:93:89:76:46:ee:ca:01:43:26:ff:b6:
                    65:52:bb:c5:fc:69:ae:a7:25:05:17:a9:07:86:69:
                    e9:39:2f:b7:60:f2:13:a4:5b:a8:9c:7c:70:ee:f2:
                    e3:98:eb:25:08:6e:33:44:4c:e4:ed:11:c8:29:a1:
                    8c:ff:29:ea:f6:b9:40:d3:36:b3:10:bd:fb:ff:7e:
                    d9:40:7a:23:73:ed:71:4a:de:59:37:41:de:35:68:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:6D:32:C1:95:FD:A8:9F:6C:59:D4:5D:A8:0E:6A:B9:A7:DC:B2:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/A36D32C195FDA89F6C59D45DA80E6AB9A7DCB280.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22
                  177.86.248.0/22
                IPv6:
                  2804:2a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262644

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:c7:74:7d:d4:33:e7:75:a7:92:77:45:a8:20:ef:6f:57:
         e2:40:15:1e:47:7c:ed:82:9c:1a:3b:20:18:3f:26:3f:e0:d9:
         88:63:d2:5e:5f:83:35:e7:8b:37:b1:a6:da:c8:3b:37:62:4d:
         38:be:07:60:ad:3b:a8:ee:f9:8a:34:33:4e:b0:0a:94:43:9a:
         74:4c:b4:52:f3:10:5c:57:9d:e3:07:29:7c:a4:d6:af:1d:ce:
         dd:f4:2a:fb:d9:2d:47:ee:30:90:e8:78:43:88:be:26:82:d2:
         84:15:4b:3f:ea:cb:d1:85:6a:c9:bc:13:69:74:3f:25:2a:59:
         cd:fc:3f:c8:07:aa:fe:95:7d:e3:79:7b:84:f1:35:fb:bc:22:
         50:8d:61:0a:0a:e8:b2:9a:e8:6e:30:7f:ae:c2:1a:d5:03:c2:
         9a:8b:33:98:68:4d:af:c1:5e:3f:fb:7a:06:12:e2:f3:4b:75:
         92:95:7d:03:f7:c9:4f:93:e3:0b:3a:7d:ca:e0:cc:17:16:58:
         2b:92:0d:c6:6e:d7:3c:c4:5d:33:41:04:69:35:f4:90:9b:77:
         11:24:29:4e:46:5e:73:72:12:8b:a5:bd:1c:28:ea:e8:6c:a4:
         f9:0a:11:d4:53:a5:a5:8d:32:03:00:09:35:71:fa:d8:6b:a7:
         ba:ea:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org