Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.cer
File:                     38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.cer (raw, json)
Hash identifier:          2mz0Vs6taD5h1a4XudCj62gS9pS1D2VFWAKaCNcT/Fg=
Subject key identifier:   38:F9:5E:5D:5D:96:54:3C:23:B0:E3:81:77:40:D4:AA:8E:4B:F1:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A75FD7CE409464D23AF2700D44F6DD394DA3577
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 05:05:52 +0000
Certificate not after:    Thu 19 Dec 2024 05:10:52 +0000
Subordinate resources:    AS: 263538
                          IP: 191.5.160.0/22
                          IP: 2804:1390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:75:fd:7c:e4:09:46:4d:23:af:27:00:d4:4f:6d:d3:94:da:35:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 05:05:52 2023 GMT
            Not After : Dec 19 05:10:52 2024 GMT
        Subject: CN=38F95E5D5D96543C23B0E3817740D4AA8E4BF10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:a9:80:d8:34:8c:cb:ad:ad:a8:ef:26:38:
                    42:8a:48:2c:d1:d3:8b:91:97:ec:26:8f:d5:54:d4:
                    c1:62:78:68:8f:50:a0:bd:cf:be:66:32:15:02:b0:
                    69:fe:80:24:5a:af:17:da:11:96:10:21:26:22:37:
                    5c:e1:7a:47:59:54:89:78:71:84:3e:8d:a9:8b:39:
                    0d:37:cc:83:52:c2:78:0a:c8:f9:b5:e5:79:6b:3d:
                    46:fd:3c:a1:a3:73:cb:64:fa:a8:80:53:ca:42:af:
                    3f:93:99:29:84:60:04:ee:fb:63:39:98:6d:50:3e:
                    f4:ef:8b:77:07:26:df:37:81:ba:c6:ca:a0:43:f9:
                    52:1b:af:93:cb:0b:1d:97:0f:8f:06:74:8e:21:2e:
                    1c:74:6d:23:45:d6:30:87:58:d4:7b:9a:66:4d:9d:
                    66:8e:e1:d2:1a:df:13:09:f3:1b:22:77:14:99:fd:
                    58:68:02:2f:87:86:91:89:90:d3:e5:f3:af:3a:03:
                    7e:75:3d:a6:5c:0b:5e:a3:1a:ee:57:cb:b1:5f:43:
                    f8:99:12:69:be:39:7f:52:dc:0c:32:08:77:71:7d:
                    2e:d3:53:a8:56:2e:bd:41:c1:12:2f:e2:d0:0c:c8:
                    69:b2:fd:a3:4f:1f:01:e5:aa:43:0b:66:5e:44:d5:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:F9:5E:5D:5D:96:54:3C:23:B0:E3:81:77:40:D4:AA:8E:4B:F1:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/0/38F95E5D5D96543C23B0E3817740D4AA8E4BF10B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.160.0/22
                IPv6:
                  2804:1390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263538

    Signature Algorithm: sha256WithRSAEncryption
         83:68:86:65:13:b8:21:7a:bc:78:84:f4:cd:f8:ef:72:bc:86:
         be:f4:e9:80:63:66:92:a8:22:e0:7b:3a:81:43:9a:66:9f:1e:
         f9:d9:f2:cd:22:40:43:5b:df:86:24:1d:c1:f1:de:b1:d7:a7:
         af:d9:2d:5f:63:a4:c0:a5:ee:2b:20:11:d6:80:b9:c2:59:46:
         b5:5f:43:07:7f:b0:77:a5:a0:43:3a:7e:ca:31:9b:48:4b:a9:
         cb:e1:95:be:9e:d3:3e:25:76:99:f7:56:52:a1:ea:f2:88:54:
         8a:99:d7:be:8d:78:fe:90:47:6e:5b:a7:60:b3:ee:1c:8b:37:
         5e:79:8e:74:49:e7:cc:52:ee:04:9e:c0:2a:eb:75:12:ab:90:
         10:7b:70:2e:79:00:6b:66:1f:55:b7:20:6f:65:75:29:a2:e5:
         48:2d:62:4a:12:a8:28:ae:6f:b1:61:3f:8c:c1:1c:34:06:5b:
         27:8a:87:95:dd:f9:68:17:6f:ce:17:8f:0a:79:03:f4:3c:c4:
         e2:8a:d8:86:f8:00:16:f5:9a:6d:9f:2a:54:88:04:f1:ab:73:
         e0:74:dd:55:87:0b:62:cd:82:b5:10:08:61:ba:71:b0:c0:72:
         8d:04:7d:67:72:c0:bb:ec:bd:bc:a4:7f:5e:78:ea:7e:96:60:
         ab:1b:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org