Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/838C5FDB72302D37AB7E6040EDDAC2C35D5CB65B.cer
File:                     838C5FDB72302D37AB7E6040EDDAC2C35D5CB65B.cer (raw, json)
Hash identifier:          Cf8Y7bwObXeHPP0W5EIDCFgyBWmeVnqKj1yVfRV3jLw=
Subject key identifier:   83:8C:5F:DB:72:30:2D:37:AB:7E:60:40:ED:DA:C2:C3:5D:5C:B6:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FDC96AC3F98DB9248655520796081EDCE567B68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/838C5FDB72302D37AB7E6040EDDAC2C35D5CB65B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Nov 2022 18:39:27 +0000
Certificate not after:    Thu 23 Nov 2023 18:44:27 +0000
Subordinate resources:    AS: 61717
                          IP: 45.71.144.0/22
                          IP: 131.72.4.0/22
                          IP: 170.233.16.0/22
                          IP: 2804:1b44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:96:ac:3f:98:db:92:48:65:55:20:79:60:81:ed:ce:56:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 18:39:27 2022 GMT
            Not After : Nov 23 18:44:27 2023 GMT
        Subject: CN=838C5FDB72302D37AB7E6040EDDAC2C35D5CB65B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:13:a1:db:ec:3f:8f:50:83:98:f1:ce:fa:
                    9e:dd:2d:10:8b:22:84:f5:a8:ab:61:bc:12:c4:4f:
                    97:d5:9b:20:23:78:c2:41:26:98:a4:28:b7:4f:b6:
                    4e:b1:87:f3:81:7f:3e:d9:dd:3c:34:e7:b5:10:1f:
                    b1:52:ff:b8:d5:0d:b7:6b:b4:61:9d:8c:05:59:bf:
                    14:4a:f9:f2:ed:1f:3e:f1:12:04:92:08:65:16:91:
                    43:30:6d:fd:11:f8:7e:dd:2a:18:61:2a:f7:f9:e6:
                    51:e4:ce:5c:8c:d7:1c:40:6c:db:d9:05:b0:86:e3:
                    9a:5c:0b:4f:d0:50:11:48:8b:69:98:d0:46:89:d2:
                    c7:21:6b:41:ed:35:08:ca:e1:7b:fa:51:3f:f4:e4:
                    9e:ee:47:bd:b5:ab:59:40:75:81:f4:ac:db:25:67:
                    9f:4b:6c:0b:72:d6:04:3a:fb:7a:97:65:82:b8:a5:
                    c5:71:35:3f:10:6b:7d:b6:18:66:c4:d1:d8:d3:74:
                    ed:37:f6:b6:a3:67:3e:75:69:06:8a:66:b9:9e:e9:
                    78:a4:9a:45:b0:ce:f8:06:80:a9:5c:ae:10:d3:96:
                    40:e9:db:37:7a:a1:9d:f7:26:7d:98:66:1b:ad:73:
                    2a:39:9b:ad:20:5b:d0:01:9b:61:c4:fe:ee:fb:73:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:8C:5F:DB:72:30:2D:37:AB:7E:60:40:ED:DA:C2:C3:5D:5C:B6:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/838C5FDB72302D37AB7E6040EDDAC2C35D5CB65B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/22
                  131.72.4.0/22
                  170.233.16.0/22
                IPv6:
                  2804:1b44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61717

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:e3:65:0e:5b:e9:e0:43:ab:34:b5:6e:8f:53:29:77:04:
         34:60:e9:38:2c:62:fc:b1:8d:d4:3e:86:07:66:7f:28:fd:f6:
         1a:5b:7d:a0:98:5f:5f:b0:d7:af:e6:40:c4:69:6f:34:28:75:
         dc:99:07:a9:85:44:44:a0:76:e1:bf:55:9b:fa:fc:56:93:23:
         dc:77:0a:30:2d:39:25:b9:61:36:a2:bd:20:b1:68:f6:dc:d2:
         ee:96:05:48:4e:6c:e1:86:79:78:f5:55:17:f3:46:a5:ea:76:
         e2:94:a1:97:12:7e:51:d7:12:80:e2:34:40:e3:be:a7:ef:ab:
         c2:18:a8:c6:dd:f1:e7:3b:27:65:df:cf:2b:b8:47:f1:da:9e:
         b9:75:ef:50:f2:fb:61:69:9b:86:2a:38:bc:cc:43:20:60:8b:
         3b:40:22:0d:a9:55:33:c8:5a:63:78:c1:95:fc:93:b7:92:f6:
         4a:79:98:fc:f7:63:c2:d2:50:37:fc:09:33:35:06:5a:af:e3:
         d1:b8:99:f9:5f:4b:a6:71:8c:6e:4f:f9:10:4e:4e:d4:e5:2a:
         1c:ec:52:4b:3d:b4:cf:3c:c8:43:c4:61:c5:5a:07:24:9a:6e:
         1f:04:da:bb:a2:6f:58:a8:fa:74:c6:5f:04:a6:e6:18:e5:94:
         e9:89:14:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org