Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
File:                     38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer (raw, json)
Hash identifier:          lFxsHNMMuhlUWUXWImD7Yaof130yIbsYQXxvcLvEGSk=
Subject key identifier:   38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52850C82D56203EEDBCC514259EC0837B3D2C16A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 12:34:26 +0000
Certificate not after:    Wed 15 May 2024 12:39:26 +0000
Subordinate resources:    AS: 61857
                          IP: 131.0.64.0/22
                          IP: 170.233.20.0/22
                          IP: 2804:1a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:0c:82:d5:62:03:ee:db:cc:51:42:59:ec:08:37:b3:d2:c1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 12:34:26 2023 GMT
            Not After : May 15 12:39:26 2024 GMT
        Subject: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:1c:a9:71:70:12:17:6e:50:0b:3d:8d:80:
                    bd:7c:bf:34:71:23:a9:41:3f:72:16:8b:ec:77:f2:
                    01:ff:e8:9d:52:f8:ab:57:74:41:80:84:ef:37:32:
                    67:d9:04:89:0e:d5:37:7e:22:74:53:49:7c:14:95:
                    95:79:01:2d:ba:86:fe:37:ed:d6:9f:79:db:fd:eb:
                    e9:3b:3d:d1:bd:e6:8c:f9:fd:37:59:d9:fc:94:1e:
                    d4:82:7d:43:06:a2:a0:7c:b3:c2:70:02:6b:5e:fd:
                    7a:7f:dc:13:61:84:30:4c:79:99:a9:1c:0c:de:20:
                    81:d3:39:98:52:3d:8d:b0:b6:0a:25:62:f7:65:4e:
                    ca:aa:b8:f3:f1:b9:74:5e:bb:15:a5:4f:74:3e:b0:
                    3d:55:fa:b9:07:5f:d4:51:a3:eb:3b:e4:1e:ce:48:
                    c8:35:ec:0b:e2:7d:4f:d2:c0:eb:32:43:b7:83:67:
                    a6:d1:79:f5:3c:80:f9:9b:7a:12:08:da:4c:11:dc:
                    33:11:71:b0:3f:24:11:93:f5:aa:45:50:bf:ac:14:
                    cd:c6:5d:a0:6b:21:f9:3b:77:8b:f4:ba:de:10:62:
                    42:eb:c0:be:9a:71:52:fe:1f:cb:3b:ae:a3:de:fc:
                    ab:a4:a4:82:6e:8f:a0:a4:e2:7f:93:f3:05:ee:e1:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22
                  170.233.20.0/22
                IPv6:
                  2804:1a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61857

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:1f:e6:4b:f1:5a:30:56:1e:ce:a3:cc:d6:f3:c9:ad:c8:
         47:45:4a:b9:b0:c1:4c:ee:2c:d1:7b:e9:9d:8b:1c:02:23:5c:
         85:14:f6:32:48:bd:c1:78:3b:86:ee:bb:74:20:7c:77:62:0f:
         07:52:93:a9:fb:6b:bf:bf:7b:e8:c1:29:80:17:c2:84:74:53:
         52:9f:a9:a9:ba:87:b6:7d:3b:d5:6f:e7:1e:b8:d8:37:c2:9d:
         e3:3e:4f:d3:89:72:f1:47:9d:80:13:89:2c:4c:ca:93:cc:02:
         29:b0:ec:dd:58:d0:8e:f7:5a:e9:d7:2c:0f:74:b4:27:e5:b4:
         47:36:b3:37:f7:fe:30:f6:9a:50:62:7b:df:3c:c4:0f:37:2f:
         59:e8:10:3a:c3:6b:8e:86:be:12:85:17:1e:8c:93:78:0c:68:
         ca:1a:20:ef:1a:51:d5:4b:cd:15:9e:98:14:bc:f7:c5:cd:58:
         4d:c3:1b:24:ea:8a:0c:ab:61:14:ce:f0:1e:b9:4c:d8:7a:d7:
         7b:72:3e:23:21:1c:4d:e0:a0:7e:bb:4d:9d:37:bf:41:67:1c:
         4a:11:f0:57:bb:53:fc:17:14:99:54:62:cc:9b:24:52:9b:93:
         3e:15:79:7a:a1:ca:61:c4:77:c2:2a:3f:0b:65:ee:75:d3:bc:
         e8:15:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org