Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer
File:                     38CB8780348540E936E47924E01C69A24F8C15DE.cer (raw, json)
Hash identifier:          uFOPsRLmI3iZpFTntk2PcZ0+Lk3+Snv0o2Ln+F3aPzI=
Subject key identifier:   38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       423DDB956BFD65430515896E7B0B9A9227A13451
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 19:38:40 +0000
Certificate not after:    Mon 31 Mar 2025 19:43:40 +0000
Subordinate resources:    AS: 268452
                          IP: 45.160.244.0/22
                          IP: 2804:5170::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:db:95:6b:fd:65:43:05:15:89:6e:7b:0b:9a:92:27:a1:34:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 19:38:40 2024 GMT
            Not After : Mar 31 19:43:40 2025 GMT
        Subject: CN=38CB8780348540E936E47924E01C69A24F8C15DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:cb:b0:c8:f9:21:c9:19:b7:dc:6a:70:d0:
                    8a:93:93:41:74:03:ce:0f:63:a7:61:5c:09:b8:04:
                    86:53:8f:e5:93:8d:d2:bd:8b:ea:24:ef:54:f9:48:
                    72:41:cd:f1:18:3e:6f:9f:94:a0:b7:01:46:05:72:
                    7a:08:9e:23:fb:96:c0:ff:42:a8:24:f2:d4:1f:c0:
                    5a:d7:59:78:97:01:fd:55:e7:71:0b:21:d9:fd:d8:
                    95:5a:17:40:2a:e9:70:e0:55:bc:89:33:29:42:e6:
                    10:59:85:29:4d:6f:10:92:46:98:13:2d:bb:79:88:
                    08:2d:2c:56:50:6a:58:99:ea:61:57:36:d8:a1:09:
                    b1:4f:5f:a9:21:0a:13:a7:d3:71:5e:0c:39:c0:b7:
                    ab:75:52:bf:b9:d6:c3:26:6c:cf:d0:02:24:ae:88:
                    cd:f7:dd:5a:72:c3:a5:a4:78:2b:67:4f:56:36:3d:
                    a3:47:d8:d1:52:e1:da:d5:c4:97:26:24:18:3b:d6:
                    9f:66:79:7a:66:c7:47:01:ee:c4:b2:1d:74:94:1a:
                    74:c7:03:d4:dc:8a:70:d2:9c:ce:40:13:99:a2:8d:
                    69:42:7b:4e:70:a5:c4:fe:3e:61:60:12:2d:3e:da:
                    8b:7d:9a:f6:b2:c1:8b:5d:1e:d0:5c:b3:22:3e:d0:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22
                IPv6:
                  2804:5170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268452

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:b3:3f:49:01:80:df:dd:91:b0:3e:75:13:57:f7:70:83:
         28:fa:74:ce:3c:d0:a6:84:88:b5:bb:aa:06:20:8f:45:1a:2e:
         62:c7:99:1c:fb:dc:d0:ae:dc:bc:57:1e:da:a8:c6:78:3e:72:
         b6:a2:e1:da:03:40:4b:91:99:a0:97:7d:54:d6:59:99:aa:71:
         0f:a4:cd:b1:0f:1a:86:ac:62:27:4f:2a:14:26:9f:12:47:27:
         0e:b0:66:ab:63:ca:d5:49:f2:b1:54:26:51:23:e5:5e:ed:6a:
         be:b8:fd:10:b6:0e:89:36:1f:ca:9b:d8:7c:d0:c1:29:96:32:
         ad:fe:2d:cb:68:31:48:80:1a:91:fa:09:92:d3:bd:4e:a3:db:
         a7:78:a2:45:3c:a8:2a:dd:d4:2e:bf:98:3a:d2:3a:fd:a7:f0:
         70:28:73:fe:ef:ab:82:54:7e:20:4e:55:38:d3:70:6b:10:c4:
         83:dc:52:d4:73:14:92:4c:b5:4f:1a:51:b9:15:4c:ec:69:82:
         b0:fc:7b:47:d3:58:f9:9a:69:58:0c:70:1f:84:61:e0:31:7d:
         60:2e:e8:24:b3:63:df:34:47:e6:31:c6:18:6a:5b:6c:51:1c:
         86:d2:9f:8e:0b:55:fd:59:96:eb:69:fa:99:d9:c2:81:a6:e0:
         7c:d2:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org