Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA636A1F8DB3FECAE42FBB7A8ECD7532B2DE7B80.cer
File:                     CA636A1F8DB3FECAE42FBB7A8ECD7532B2DE7B80.cer (raw, json)
Hash identifier:          Rz0d08YO3zyLyg8xNzjvWz28xt3kOLwTmrBJu1W+ZQ8=
Subject key identifier:   CA:63:6A:1F:8D:B3:FE:CA:E4:2F:BB:7A:8E:CD:75:32:B2:DE:7B:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C6BF8768EF0A880DE40D62D61E244F7D7850755
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/CA636A1F8DB3FECAE42FBB7A8ECD7532B2DE7B80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Feb 2022 18:34:40 +0000
Certificate not after:    Mon 27 Feb 2023 18:39:40 +0000
Subordinate resources:    AS: 61784
                          IP: 138.186.184.0/22
                          IP: 201.55.200.0/22
                          IP: 2804:1948::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6b:f8:76:8e:f0:a8:80:de:40:d6:2d:61:e2:44:f7:d7:85:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 18:34:40 2022 GMT
            Not After : Feb 27 18:39:40 2023 GMT
        Subject: CN=CA636A1F8DB3FECAE42FBB7A8ECD7532B2DE7B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:f7:5c:79:b0:b9:e7:13:a8:6c:b1:f7:f9:
                    fc:d7:87:76:b9:15:73:08:cd:94:a1:77:ee:58:de:
                    29:c0:dd:78:b9:c7:b1:87:01:83:a0:6a:18:f9:7e:
                    83:2e:83:43:01:59:f6:f6:2f:cc:9d:c0:c4:4c:37:
                    b7:a9:56:b2:fd:78:d2:73:ba:07:0c:ce:22:aa:d5:
                    5d:e7:09:bf:35:cc:c6:6c:53:96:9b:93:09:b2:d7:
                    fd:39:97:ca:70:01:eb:06:05:7f:3f:aa:47:43:53:
                    a4:23:bf:43:31:13:f2:4e:ba:94:db:15:3c:31:70:
                    f1:a7:c7:44:cf:0e:31:3c:33:3f:ab:44:6d:1d:16:
                    0b:4e:60:00:41:a1:38:eb:fd:c6:3a:3e:53:ca:4f:
                    fa:b7:55:33:85:a7:ff:89:29:78:7f:d3:bf:2c:99:
                    f9:bf:37:f9:8c:c4:fc:eb:95:83:5d:3f:03:31:63:
                    98:b4:9b:05:f2:fa:e7:b4:15:b4:c1:01:c9:5e:d5:
                    d4:8d:91:0b:9a:9c:1f:99:ac:15:d6:42:75:07:6d:
                    0d:ee:dd:86:98:fc:14:7b:4f:90:26:98:2c:40:33:
                    b0:74:3e:04:f1:81:15:bc:c5:9d:3f:a7:13:5f:48:
                    93:6d:33:61:1d:fd:70:f4:a8:af:4f:a4:a0:9e:e6:
                    1a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:63:6A:1F:8D:B3:FE:CA:E4:2F:BB:7A:8E:CD:75:32:B2:DE:7B:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/CA636A1F8DB3FECAE42FBB7A8ECD7532B2DE7B80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22
                  201.55.200.0/22
                IPv6:
                  2804:1948::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61784

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:43:aa:e8:10:4a:f7:9b:1b:ea:f8:b1:bc:32:79:5a:8b:
         0a:b8:19:2f:c8:74:5a:6a:98:f4:3e:b8:58:4b:ca:d7:27:38:
         9d:e5:39:f7:a8:d2:59:65:b2:bf:b7:de:0f:88:4b:1e:dd:90:
         55:75:69:5f:b3:8a:11:26:d4:06:6e:0f:54:94:7a:f9:5a:20:
         ab:2a:2b:b0:81:22:ff:55:7f:12:b4:3c:d9:bd:16:f0:8b:c7:
         4a:34:bf:54:89:f1:c5:db:ae:19:e4:31:de:8f:5b:37:16:b9:
         fd:d1:59:b6:be:63:a6:e4:34:77:9e:1b:d4:5b:fe:b8:78:a1:
         f4:45:44:42:13:d6:b0:c7:a3:80:97:36:59:8e:09:ea:98:d3:
         38:b9:1f:31:87:39:b2:cf:b2:dc:01:bf:b1:b2:39:19:7b:58:
         0d:40:c2:ab:0b:8f:5a:9b:4d:1f:56:b2:4c:6f:fc:29:88:95:
         09:63:a5:28:ec:cd:29:2c:e5:56:da:8f:5a:07:3c:b6:40:5a:
         5a:b4:0c:86:cf:2c:98:c3:56:ab:26:03:b5:f7:d0:6d:13:bc:
         31:78:ce:66:c7:22:1e:8d:ca:f2:42:5a:e1:7c:a5:13:3b:71:
         a8:e5:f3:28:7b:fd:b1:f6:81:9c:6f:27:13:49:80:7e:25:ca:
         c5:c4:7a:0e
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIUXGv4do7wqIDeQNYtYeJE99eFB1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMjAyMjgxODM0NDBaFw0yMzAyMjcxODM5NDBaMDMxMTAvBgNV
BAMTKENBNjM2QTFGOERCM0ZFQ0FFNDJGQkI3QThFQ0Q3NTMyQjJERTdCODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vvdcebC55xOobLH3+fzXh3a5
FXMIzZShd+5Y3inA3Xi5x7GHAYOgahj5foMug0MBWfb2L8ydwMRMN7epVrL9eNJz
ugcMziKq1V3nCb81zMZsU5abkwmy1/05l8pwAesGBX8/qkdDU6Qjv0MxE/JOupTb
FTwxcPGnx0TPDjE8Mz+rRG0dFgtOYABBoTjr/cY6PlPKT/q3VTOFp/+JKXh/078s
mfm/N/mMxPzrlYNdPwMxY5i0mwXy+ue0FbTBAcle1dSNkQuanB+ZrBXWQnUHbQ3u
3YaY/BR7T5AmmCxAM7B0PgTxgRW8xZ0/pxNfSJNtM2Ed/XD0qK9PpKCe5hofAgMB
AAGjggMgMIIDHDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKY2ofjbP+yuQv
u3qOzXUyst57gDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENEVXVFhYR1Vpb0JwYVMzOGJXVUdQMzF3MXBHaEVWTHFE
ZFJiVWJaMlRVUi8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ENEVXVFhYR1Vpb0JwYVMzOGJXVUdQMzF3MXBHaEVWTHFE
ZFJiVWJaMlRVUi8wL0NBNjM2QTFGOERCM0ZFQ0FFNDJGQkI3QThFQ0Q3NTMyQjJE
RTdCODAubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAoq6uAMEAsk3yDANBAIA
AjAHAwUAKAQZSDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA8VgwDQYJKoZIhvcN
AQELBQADggEBAKjZQ6roEEr3mxvq+LG8Mnlaiwq4GS/IdFpqmPQ+uFhLytcnOJ3l
Ofeo0lllsr+33g+ISx7dkFV1aV+zihEm1AZuD1SUevlaIKsqK7CBIv9VfxK0PNm9
FvCLx0o0v1SJ8cXbrhnkMd6PWzcWuf3RWba+Y6bkNHeeG9Rb/rh4ofRFREIT1rDH
o4CXNlmOCeqY0zi5HzGHObLPstwBv7GyORl7WA1AwqsLj1qbTR9Wskxv/CmIlQlj
pSjszSks5Vbaj1oHPLZAWlq0DIbPLJjDVqsmA7X30G0TvDF4zmbHIh6NyvJCWuF8
pRM7cajl8yh7/bH2gZxvJxNJgH4lysXEeg4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org