Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
File:                     38E224203D0037111BF68F317AA5B79FAB3EFB77.cer (raw, json)
Hash identifier:          Y/H7c2HJEgJ33rhfnjgVfREyhb0KPsNRIHBHZeUDwN0=
Subject key identifier:   38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55E7AB58E8E186E0B4CB16B56A43AF67240C10CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 20:07:57 +0000
Certificate not after:    Wed 18 Dec 2024 20:12:57 +0000
Subordinate resources:    AS: 263566
                          IP: 170.79.28.0/22
                          IP: 177.44.216.0/22
                          IP: 2804:f18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:ab:58:e8:e1:86:e0:b4:cb:16:b5:6a:43:af:67:24:0c:10:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 20:07:57 2023 GMT
            Not After : Dec 18 20:12:57 2024 GMT
        Subject: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:00:7a:ee:10:c7:b6:fd:38:13:48:6c:f9:
                    b4:b2:c8:82:35:d5:12:b7:4d:56:f0:7b:42:34:73:
                    03:2f:d6:2f:a9:fd:04:03:33:4e:6e:9a:4e:fd:47:
                    c5:c0:2c:ad:5d:d3:ff:85:1c:b3:51:82:71:1a:73:
                    51:32:12:6e:b3:97:e4:81:f9:78:e5:ac:cd:63:f4:
                    3a:d5:a4:20:b7:67:50:0d:fb:8d:11:00:f7:d0:41:
                    97:af:0f:2c:f4:11:a2:07:1e:b0:c6:e6:41:09:47:
                    05:8c:41:29:63:69:1e:47:9b:0d:88:af:53:7d:af:
                    c2:04:b3:d9:ff:ad:cd:cf:16:84:f8:0f:d1:a9:b2:
                    37:f4:df:a6:a3:47:d4:49:f2:73:fd:6f:57:66:25:
                    e5:dd:60:d7:30:48:46:ca:86:1e:0e:28:72:b7:72:
                    fc:3b:fe:40:d3:75:43:d4:6f:da:01:33:d9:95:50:
                    4c:cb:e3:ab:27:97:a1:60:dc:d6:92:e1:ae:3d:1e:
                    29:a3:d1:ad:60:39:ef:eb:70:d2:68:a2:4d:2c:06:
                    f5:23:81:d9:cb:95:ae:8b:68:8b:bb:46:f8:29:dd:
                    f2:c1:e8:f0:09:cd:a0:0f:6a:e0:32:87:88:40:7b:
                    4f:dc:63:d0:64:99:75:ee:25:8c:56:41:5e:42:93:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.28.0/22
                  177.44.216.0/22
                IPv6:
                  2804:f18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263566

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:c1:c5:c3:cb:25:58:59:3d:04:12:8f:cb:6a:e1:56:30:
         5c:e8:63:b3:b5:cd:2a:1c:55:e6:55:95:20:19:26:3f:21:a9:
         a9:e2:c0:26:54:f2:42:a9:92:2a:05:bc:d6:9d:0d:21:9a:10:
         61:95:3f:e4:0b:f0:86:95:6d:7d:09:c9:b5:f7:d1:52:94:21:
         ce:53:05:f2:03:e1:a7:fa:39:12:31:6a:70:fa:4d:75:26:87:
         40:bd:0c:6b:05:68:92:01:f5:3a:eb:27:68:85:5f:fe:4b:54:
         ef:02:78:63:92:5f:3b:ca:af:5c:aa:cb:38:34:5e:e4:4f:2d:
         ae:8b:82:99:a8:73:6a:d2:3d:e6:9c:2c:93:fb:74:99:0d:ec:
         65:0a:e2:34:a2:6f:5f:03:9d:98:06:38:a3:55:a7:59:73:18:
         14:09:c2:7e:ee:a3:8c:50:44:c1:7d:79:2a:91:07:1d:aa:66:
         0b:88:f7:9e:14:ef:41:f9:93:ca:0c:30:6f:1b:35:50:70:42:
         e6:0e:44:2d:f1:f2:43:38:38:9c:74:84:69:45:46:50:b6:a5:
         cc:9c:5e:c1:a8:f9:85:4e:2a:fa:ab:ae:4b:2e:9f:42:46:f8:
         1f:1b:d1:67:60:3d:7e:c4:73:1f:db:ca:2e:89:2e:ac:f7:ee:
         8d:c4:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org