Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.cer
File:                     38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.cer (raw, json)
Hash identifier:          LKnhEy6IuksdDetslUEHnYBm+0VIYsePzY/82kJKMho=
Subject key identifier:   38:C8:75:1C:BD:42:BD:AF:6F:F9:31:AD:D4:00:2C:72:4A:3B:8A:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       040A08E20E42F837A1B40AC3470A2A750C3C2041
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 18:29:40 +0000
Certificate not after:    Wed 12 Mar 2025 18:34:40 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:08:e2:0e:42:f8:37:a1:b4:0a:c3:47:0a:2a:75:0c:3c:20:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 18:29:40 2024 GMT
            Not After : Mar 12 18:34:40 2025 GMT
        Subject: CN=38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:06:f8:1b:9f:53:04:66:80:0a:04:b7:98:
                    1f:13:1e:7a:b6:64:c6:f9:61:75:c9:12:b8:ba:b4:
                    47:f9:a9:dc:74:67:a2:96:f5:01:6d:8a:a9:f9:01:
                    db:46:ab:22:0e:7b:2a:45:35:26:b6:34:7f:d1:42:
                    4a:00:f1:05:54:65:af:8f:92:42:9c:e9:3d:22:a0:
                    12:a2:f9:ef:15:49:81:26:bb:bf:15:97:f3:0e:6e:
                    d6:6e:4b:9e:04:43:7b:2b:0d:74:be:c6:db:34:35:
                    b6:35:22:51:d4:ed:33:07:5f:ee:58:41:e2:81:01:
                    7b:a0:3c:38:77:1c:ef:3e:65:d5:a6:10:10:f6:08:
                    c8:93:b9:9a:03:ab:4a:f4:02:29:b7:a6:fc:ef:d4:
                    bd:27:f6:ad:e2:b6:7f:26:ac:51:95:33:59:61:1f:
                    86:99:c2:b7:40:b2:46:62:d2:e6:4b:c7:7c:b9:19:
                    e1:03:c3:c6:2d:11:b6:30:97:ab:d9:d6:62:43:75:
                    f1:9d:ef:1a:71:a1:f9:30:ac:f3:d9:16:d7:ad:89:
                    2d:80:3b:b8:31:f1:52:b3:23:22:c7:a1:3d:6d:d9:
                    bd:e1:1f:b3:2c:a0:e0:c9:7e:65:77:d6:c7:f1:e0:
                    73:d4:f4:66:4b:f4:93:09:80:b7:5a:9f:31:c2:c4:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:C8:75:1C:BD:42:BD:AF:6F:F9:31:AD:D4:00:2C:72:4A:3B:8A:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/38C8751CBD42BDAF6FF931ADD4002C724A3B8A4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:b7:ba:61:67:a1:0b:8b:22:b7:ae:bc:48:fb:44:9b:f4:
         7d:27:59:1a:12:e3:d3:c8:4b:7f:3b:3e:36:7c:a6:8c:e3:73:
         83:80:f0:8c:18:23:c4:49:f5:db:a8:e4:cf:0a:05:ea:1d:fd:
         e5:ac:b1:76:5d:86:1a:3f:75:c3:e1:8d:e7:26:84:d9:24:66:
         f3:b2:7e:3b:12:66:79:97:f5:7a:cf:6c:38:ab:68:74:ee:dc:
         4d:6e:91:7d:ec:66:1d:00:aa:79:45:f9:ac:1a:cf:94:be:a1:
         90:27:8d:b5:07:85:84:e2:47:6b:e1:54:a2:4f:de:4a:5a:97:
         d2:cb:83:fc:30:a2:d1:9d:78:67:50:68:8a:b0:aa:11:9d:1b:
         ee:ff:39:af:80:48:a2:d6:8b:c0:53:fe:c4:26:aa:e3:80:f1:
         dc:ef:5c:a1:ad:5c:96:f5:2f:55:59:84:f3:a1:8a:1b:a5:58:
         4e:97:06:5c:d1:12:65:80:86:96:21:a7:23:2c:57:fb:22:3c:
         6c:ce:3e:13:74:2a:b7:5e:e3:5e:f3:90:36:03:a7:f0:a9:48:
         b7:6c:e8:92:6c:36:93:81:b2:25:9a:7b:68:c6:aa:9f:1d:eb:
         9a:e1:dd:49:7e:64:64:c0:7d:95:0e:e8:1f:10:e5:20:33:16:
         db:ac:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org