Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer
File:                     2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.cer (raw, json)
Hash identifier:          iOCzevxYYbodvmcVqDywGjACtgK0kVD9SqzLF6oeC8Y=
Subject key identifier:   27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29EA643E6FF10C288EAE0CE0C80C9938439FDACA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 12:55:08 +0000
Certificate not after:    Thu 22 Aug 2024 13:00:08 +0000
Subordinate resources:    AS: 271754
                          IP: 2804:8080::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ea:64:3e:6f:f1:0c:28:8e:ae:0c:e0:c8:0c:99:38:43:9f:da:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 12:55:08 2023 GMT
            Not After : Aug 22 13:00:08 2024 GMT
        Subject: CN=2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:3c:eb:1b:2c:41:f2:56:c3:b1:d5:a7:0e:
                    fa:20:4b:3a:cf:e1:be:ec:2c:90:a1:f2:fc:84:25:
                    64:7d:41:43:5e:b2:eb:db:6f:e2:7f:68:59:72:73:
                    4e:c5:22:07:ef:ca:0a:69:47:44:79:60:29:79:6f:
                    3d:58:b6:14:0d:b0:11:26:55:f7:e7:57:0f:82:29:
                    1e:cd:76:7b:99:51:9f:b8:f2:66:9c:bd:0b:c2:08:
                    5f:0a:a7:88:39:67:d1:bf:c8:1e:58:21:be:cc:14:
                    b7:5e:59:5a:bc:83:d9:b7:eb:46:56:ef:b0:c0:a8:
                    8f:23:68:e3:8f:40:c9:e3:f6:af:29:f4:d1:9b:47:
                    42:d1:a0:ae:fd:3c:d3:27:02:62:64:69:01:97:02:
                    51:5b:bc:ef:38:95:15:f7:20:bd:08:90:c3:55:13:
                    1a:71:32:47:1a:c6:e2:0a:af:19:fb:95:0e:98:14:
                    3b:91:91:b4:18:63:ca:2d:12:fa:13:0e:e7:8c:c4:
                    3e:d5:be:6b:0c:d1:2b:34:33:40:4b:ef:6c:81:77:
                    54:4b:70:39:3c:44:9b:70:fe:f5:51:7a:0f:ed:6b:
                    27:d6:0d:ed:1c:42:f4:df:b4:42:a5:5a:77:ab:e6:
                    1b:57:a8:43:03:67:fa:8b:23:2c:c5:33:55:5f:39:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:38:B5:ED:13:21:C8:2B:DE:0D:C3:DF:9C:0D:99:35:F7:B8:C0:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/2738B5ED1321C82BDE0DC3DF9C0D9935F7B8C01B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271754

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:4e:44:08:b2:0a:42:f0:04:5f:fd:e4:10:80:2d:19:e1:
         65:7c:e2:96:cd:a5:55:8a:5e:9d:8f:8d:db:78:a2:79:c4:ac:
         ee:72:5b:6e:17:3d:6b:bc:0a:e3:b3:4c:b4:48:af:d5:fe:47:
         3d:eb:33:11:2f:f3:9a:cc:9f:a6:b9:a2:c2:db:ae:0a:ce:bb:
         33:aa:30:a4:4f:77:1a:c6:17:63:eb:6a:df:80:89:f7:9c:45:
         bc:4d:5f:89:d5:2e:df:c0:66:43:43:56:e9:c7:b3:29:21:9a:
         86:31:2b:e9:7b:67:2f:87:d2:e9:6a:ed:71:a0:8a:0e:12:d2:
         e8:3f:30:12:0a:f1:94:05:f6:56:3f:a2:05:f4:43:65:3c:4d:
         bb:1e:f9:e4:a7:22:c9:96:91:0b:21:32:c9:dc:ad:84:ff:c5:
         81:e8:da:98:b6:24:27:20:75:71:b7:8e:8f:53:ae:67:b4:70:
         08:38:3a:86:ae:7a:79:e1:d5:d8:41:04:5f:36:20:1a:ae:e2:
         7c:94:d9:f1:3d:9b:43:58:71:a4:7c:53:04:82:62:b1:04:3f:
         c8:f6:6c:8d:3e:8b:7c:e4:11:a0:13:b7:11:c5:57:74:f9:cc:
         3b:bf:7e:6a:99:0f:c3:3b:db:af:4d:9a:f9:e6:f0:d0:58:a5:
         73:ee:96:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org