Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
File:                     38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer (raw, json)
Hash identifier:          ra2njJAW72MlXJ6HuHyaD0E5NIlG8apbFD5YV07+G4Y=
Subject key identifier:   38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5234A5FC4F63ADD64790E392D9C1FFF5ECC4E7EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Jan 2023 20:16:24 +0000
Certificate not after:    Fri 26 Jan 2024 20:21:24 +0000
Subordinate resources:    AS: 263934
                          IP: 138.219.128.0/22
                          IP: 2804:2800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:a5:fc:4f:63:ad:d6:47:90:e3:92:d9:c1:ff:f5:ec:c4:e7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 20:16:24 2023 GMT
            Not After : Jan 26 20:21:24 2024 GMT
        Subject: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:9f:e7:1b:c2:e8:54:ee:10:76:95:e9:c8:
                    33:be:be:51:a7:97:7e:bc:56:62:0b:b4:13:88:69:
                    93:3c:7b:92:f6:06:bc:7f:ec:64:c8:1a:71:d5:dd:
                    31:b2:49:21:e9:b0:45:d8:b7:c5:df:75:0b:12:0a:
                    55:ff:a6:96:5b:f6:8a:e3:3b:a4:64:0f:d0:9d:fb:
                    a4:40:b2:3b:82:0a:61:6e:a0:b2:5e:7e:d5:27:41:
                    f1:c0:be:00:07:15:d1:7d:2e:2f:14:78:da:5d:63:
                    43:c2:e3:43:5f:3c:59:bb:9f:0b:43:c5:73:ee:6e:
                    11:d5:72:b1:92:7b:37:6c:c6:ca:81:7b:73:ce:05:
                    9d:bb:c7:58:f4:69:7f:89:1b:7a:ef:d0:9a:42:5e:
                    5b:df:2f:82:d2:ce:bb:2c:3b:85:db:8f:f5:48:ea:
                    06:ba:6f:9f:79:fd:a5:c5:cd:87:35:7d:0e:35:b9:
                    ef:5c:cf:9f:42:52:46:64:84:47:33:96:d2:3d:26:
                    41:ef:2b:fd:77:fa:01:86:c1:a8:46:d0:26:4a:02:
                    56:02:4b:ff:96:50:37:dc:f9:1e:99:07:ed:6b:84:
                    e7:b9:13:c9:60:ad:f1:a9:dc:60:d5:fe:c9:19:8d:
                    e2:d4:bb:6e:79:d6:9b:23:56:1e:9f:eb:f3:7f:af:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/22
                IPv6:
                  2804:2800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263934

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:a2:85:3f:98:d5:db:31:a3:af:ca:62:75:5b:b8:ab:7c:
         81:81:ea:1c:f0:69:23:f2:1e:8e:35:72:32:43:42:a9:cc:dd:
         0d:20:d0:c5:69:c4:c1:b5:77:a2:cf:d1:9e:18:73:cc:5c:73:
         01:0c:d1:59:c3:f7:a0:9e:08:79:d6:df:40:db:7d:1a:46:cb:
         16:01:91:42:32:69:82:09:43:71:13:5f:40:aa:de:1d:1d:e4:
         5b:b1:1e:ce:ef:6e:11:30:84:57:5b:e3:97:f3:d3:82:48:b5:
         e5:06:2b:f6:a8:d0:c9:49:ff:ae:ce:8b:eb:7b:24:1d:c7:a4:
         11:90:05:2a:b9:01:78:b6:86:aa:cc:dd:25:c9:29:26:72:43:
         11:ab:95:ea:40:76:5e:dd:7a:ad:cf:70:23:13:2f:7d:a1:92:
         16:a1:89:a7:de:a8:d1:63:cc:62:44:22:a8:8b:6e:08:da:49:
         e3:ee:2a:45:c3:28:0c:2e:9e:91:fe:69:ce:89:20:04:aa:91:
         49:de:eb:d8:48:24:53:c9:33:ad:9c:89:ff:d4:cb:af:9f:bc:
         b7:ab:3a:b6:52:78:87:33:56:ad:7e:9d:c8:17:29:68:f8:60:
         3f:90:54:28:9c:30:28:3d:e2:72:fc:bb:c1:0c:8d:49:c0:c5:
         1f:80:36:94
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUUjSl/E9jrdZHkOOS2cH/9ezE5+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMjcyMDE2MjRaFw0yNDAxMjYyMDIxMjRaMDMxMTAvBgNV
BAMTKDM4RjJFMDI0NzRFRDg3RTNBNzZERTZEQjk4NkY3NTJBRkQxMEI4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0Z/nG8LoVO4QdpXpyDO+vlGn
l368VmILtBOIaZM8e5L2Brx/7GTIGnHV3TGySSHpsEXYt8XfdQsSClX/ppZb9orj
O6RkD9Cd+6RAsjuCCmFuoLJeftUnQfHAvgAHFdF9Li8UeNpdY0PC40NfPFm7nwtD
xXPubhHVcrGSezdsxsqBe3POBZ27x1j0aX+JG3rv0JpCXlvfL4LSzrssO4Xbj/VI
6ga6b595/aXFzYc1fQ41ue9cz59CUkZkhEczltI9JkHvK/13+gGGwahG0CZKAlYC
S/+WUDfc+R6ZB+1rhOe5E8lgrfGp3GDV/skZjeLUu2551psjVh6f6/N/rxI3AgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ48uAkdO2H46dt
5tuYb3Uq/RC4wjAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RTVrbkNRYWlucWRqcmVrMUhhVHpHdHFOTVp1MXBqQ0Np
NFpzdlQydjZwNC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby82RTVrbkNRYWlucWRqcmVrMUhhVHpHdHFOTVp1MXBqQ0Np
NFpzdlQydjZwNC8wLzM4RjJFMDI0NzRFRDg3RTNBNzZERTZEQjk4NkY3NTJBRkQx
MEI4QzIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAorbgDANBAIAAjAHAwUA
KAQoADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBv4wDQYJKoZIhvcNAQELBQAD
ggEBAAL1ooU/mNXbMaOvymJ1W7irfIGB6hzwaSPyHo41cjJDQqnM3Q0g0MVpxMG1
d6LP0Z4Yc8xccwEM0VnD96CeCHnW30DbfRpGyxYBkUIyaYIJQ3ETX0Cq3h0d5Fux
Hs7vbhEwhFdb45fz04JIteUGK/ao0MlJ/67Oi+t7JB3HpBGQBSq5AXi2hqrM3SXJ
KSZyQxGrlepAdl7deq3PcCMTL32hkhahiafeqNFjzGJEIqiLbgjaSePuKkXDKAwu
npH+ac6JIASqkUne69hIJFPJM62cif/Uy6+fvLerOrZSeIczVq1+ncgXKWj4YD+Q
VCicMCg94nL8u8EMjUnAxR+ANpQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org