Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
File:                     380AE62845C4468F9462327C41A0D22DA68054FD.cer (raw, json)
Hash identifier:          hiu7TzFvvmErKVYqAFr8XySlYKK2GBshmPWa6afiVws=
Subject key identifier:   38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08B43C454D23CE5964C61887EDB6F5CE89DEB76A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 13:25:33 +0000
Certificate not after:    Thu 06 Mar 2025 13:30:33 +0000
Subordinate resources:    AS: 262908
                          IP: 168.196.56.0/22
                          IP: 177.38.24.0/21
                          IP: 177.52.56.0/22
                          IP: 177.91.136.0/22
                          IP: 2804:3c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:3c:45:4d:23:ce:59:64:c6:18:87:ed:b6:f5:ce:89:de:b7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 13:25:33 2024 GMT
            Not After : Mar  6 13:30:33 2025 GMT
        Subject: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:c0:dd:5d:ee:ef:b5:1e:85:f9:66:6c:18:
                    00:b0:7c:04:ad:4c:20:4b:1e:47:7a:91:ff:a2:47:
                    dd:2a:43:d9:ac:9c:c6:0c:4b:4d:d3:23:a3:1e:19:
                    44:a3:f2:ed:98:2c:3e:3b:9e:8d:16:ce:21:28:5d:
                    7f:3a:78:52:2c:4f:46:29:20:93:31:ab:14:cc:12:
                    45:b2:0d:70:23:a9:d1:4c:24:90:73:b2:d5:76:0d:
                    15:ad:52:65:4c:cd:86:3b:e0:4e:8c:bd:66:6d:d5:
                    33:8d:e5:a6:a4:3f:f2:c5:74:1f:6a:52:d1:a9:7f:
                    1e:19:61:74:c3:81:f8:40:94:17:30:5a:0d:d6:9c:
                    b7:18:a9:e9:1f:51:ff:78:62:af:00:e0:41:ab:b8:
                    e7:16:27:50:c3:7c:d2:e2:4a:17:40:bd:db:bc:6d:
                    e0:e7:f2:89:e4:4f:ef:73:b3:89:30:75:59:5d:b2:
                    75:cb:ae:aa:07:76:ce:12:67:62:07:39:77:ad:5f:
                    55:28:4a:d3:90:47:f0:da:e2:1e:82:2b:83:43:d6:
                    f8:b5:09:54:02:a4:ea:f2:22:54:1d:33:8c:b5:ca:
                    aa:2e:56:e0:6c:a1:d2:2e:1c:d3:5b:82:6b:43:39:
                    79:5e:e9:04:47:97:95:6b:53:9c:9f:7e:a2:ec:6f:
                    7b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.56.0/22
                  177.38.24.0/21
                  177.52.56.0/22
                  177.91.136.0/22
                IPv6:
                  2804:3c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262908

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:ab:c1:61:16:6d:7f:65:48:50:a7:32:2e:66:82:c3:8e:
         1e:d6:60:ed:6d:44:be:48:d1:b8:b1:90:65:62:3d:12:c7:1e:
         3f:07:97:11:c7:46:a1:6b:d0:74:39:cf:0d:00:df:3e:9e:82:
         27:27:b0:c4:33:8d:81:3b:4d:19:68:d9:b1:48:09:64:74:50:
         df:1b:9d:9b:80:d5:3b:d6:8c:ed:0d:ca:37:1e:a0:ab:4b:c3:
         cc:6d:27:8a:9d:19:68:c2:58:c5:8d:cc:72:f3:60:e9:a7:28:
         00:ef:3a:10:ce:cd:0e:42:f7:5c:b1:be:ab:19:42:a7:7d:e9:
         ac:e2:37:75:bb:d9:b7:13:2c:e6:35:4c:24:e6:49:a0:e8:6c:
         fb:3b:e6:26:43:97:84:4a:7a:ad:71:35:d9:69:e7:48:d4:85:
         f1:c3:79:59:cc:19:c6:40:fc:90:6b:6d:4e:f5:f7:1a:99:f1:
         07:cc:59:ec:92:ac:b6:8a:92:7e:ec:78:1e:c2:21:f0:c7:e9:
         a3:91:b6:d9:82:64:26:33:d6:fb:b3:0b:4a:06:c1:36:b0:af:
         ce:e3:c9:45:46:65:91:bf:ee:74:0c:93:ad:46:3f:1d:d2:54:
         50:94:27:c0:72:f0:07:d7:60:db:5e:63:e7:7b:9e:a8:3e:55:
         71:48:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org