Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer
File:                     383B2C6B85855E4779ED18240ADF1496B0DEC78F.cer (raw, json)
Hash identifier:          W0Md4VsGP1MGhDVVkX8vFKqUx+oVmAQbL0ndhbJO2rg=
Subject key identifier:   38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B6F3A1C400E4690AD0D04E4BCA3A6122E4DBEB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 20:33:27 +0000
Certificate not after:    Thu 12 Sep 2024 20:38:27 +0000
Subordinate resources:    AS: 264448
                          IP: 131.255.28.0/22
                          IP: 2804:1ecc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6f:3a:1c:40:0e:46:90:ad:0d:04:e4:bc:a3:a6:12:2e:4d:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 14 20:33:27 2023 GMT
            Not After : Sep 12 20:38:27 2024 GMT
        Subject: CN=383B2C6B85855E4779ED18240ADF1496B0DEC78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:9c:79:a3:fa:26:68:a3:29:f2:c9:1e:30:
                    ad:75:12:8e:be:91:84:e7:af:73:6a:f9:b3:12:8f:
                    6b:c5:6c:a9:dc:71:c8:aa:30:8f:08:31:42:d2:92:
                    c1:f6:d7:0e:82:29:a8:91:ba:dc:83:8d:65:d2:9c:
                    8a:b9:b0:dc:27:c5:52:13:f2:32:c2:76:f9:57:0a:
                    df:a3:33:63:36:85:a5:0e:55:87:bd:33:57:53:3e:
                    22:80:d5:38:bb:36:6c:32:1b:70:6b:af:4b:99:99:
                    6d:6b:14:17:3c:8f:2a:1e:cd:c8:77:67:be:65:47:
                    84:52:be:71:db:17:1e:0a:38:fe:90:5f:10:64:3a:
                    fa:c5:b6:f1:69:2b:97:41:05:a1:95:41:3b:c8:74:
                    71:6f:91:26:49:da:84:99:77:38:56:ae:58:de:83:
                    f7:08:1b:41:66:49:59:02:be:d3:1c:5f:96:85:54:
                    b6:fd:bd:3f:7b:dc:77:dc:d1:30:a0:93:3d:99:e2:
                    82:81:85:8e:ba:32:83:63:b8:d6:4a:ce:43:54:5c:
                    c8:42:c6:83:10:dd:52:2f:ed:89:90:da:8a:db:4e:
                    0b:b9:7d:58:97:9e:13:70:86:e8:ac:db:6a:04:07:
                    e0:8d:69:9f:a4:bc:7a:98:de:36:91:34:82:08:af:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:3B:2C:6B:85:85:5E:47:79:ED:18:24:0A:DF:14:96:B0:DE:C7:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/383B2C6B85855E4779ED18240ADF1496B0DEC78F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.28.0/22
                IPv6:
                  2804:1ecc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264448

    Signature Algorithm: sha256WithRSAEncryption
         33:ec:ae:19:dd:5f:a0:37:85:51:af:f6:f3:39:91:ca:89:88:
         53:3e:ab:44:bb:91:09:40:45:b5:fb:4d:bf:e1:fe:5d:af:50:
         a5:c8:a9:fd:91:0b:57:5e:87:4b:ce:06:b3:33:75:18:16:3c:
         bd:01:c5:89:63:f2:b6:3b:36:e7:d5:be:68:26:f8:d2:bc:d1:
         f5:cc:cb:3e:c3:77:58:e3:8e:11:e6:28:75:6e:02:98:f1:28:
         4f:91:43:e9:39:a3:33:d2:8c:2a:6e:82:c9:bb:9c:d0:d5:d0:
         b1:1f:11:0f:34:23:9a:28:ed:1c:73:0e:2a:6e:0d:6d:b7:dc:
         e2:4a:fa:41:77:25:a4:f6:cd:c1:36:65:92:be:9b:d9:50:67:
         1f:99:83:13:2e:aa:57:6f:71:27:cc:4a:f7:81:38:e3:df:96:
         33:e2:cd:86:3c:0c:f6:bc:75:ef:59:aa:f9:08:53:af:e9:2f:
         e9:ab:54:4e:f9:21:03:05:ef:55:1e:c8:ea:ab:c2:b2:dd:d5:
         18:69:5d:c5:9c:33:86:b1:6b:43:92:dd:24:5e:63:49:4f:d6:
         d2:89:0f:2a:77:2a:f8:70:c1:49:17:af:88:05:e9:0e:52:9e:
         e9:55:48:b7:96:85:9b:cd:af:59:38:b7:73:9b:2b:7b:bd:1c:
         80:bb:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org