Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/838E68116DF7FA82100254E70121556A8E484E4B.cer
File:                     838E68116DF7FA82100254E70121556A8E484E4B.cer (raw, json)
Hash identifier:          nCwRMxS0YrTp+QdMPLZ5L6pG8uAJY4lj0IKKXLDUq3Q=
Subject key identifier:   83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7580FAD7079C2D1C0FD741BB24298B0EA09F0638
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Jun 2023 03:23:35 +0000
Certificate not after:    Sun 16 Jun 2024 03:28:35 +0000
Subordinate resources:    AS: 270265
                          IP: 200.108.164.0/22
                          IP: 2804:695c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:80:fa:d7:07:9c:2d:1c:0f:d7:41:bb:24:29:8b:0e:a0:9f:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 18 03:23:35 2023 GMT
            Not After : Jun 16 03:28:35 2024 GMT
        Subject: CN=838E68116DF7FA82100254E70121556A8E484E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:7a:28:20:98:df:5d:c5:63:9c:b0:c8:59:
                    3a:aa:99:e6:b2:f0:05:90:39:4e:d3:2c:b4:c6:83:
                    a3:d6:74:b4:9c:19:78:c3:35:c7:a0:8d:12:60:a3:
                    21:18:af:cd:a7:b1:5b:ad:5c:3e:f1:b4:6a:33:cf:
                    c0:a9:c0:8e:7f:2e:ac:d1:cf:60:4e:01:f6:ce:11:
                    89:98:45:ca:56:c6:9f:d7:a6:a3:0f:c2:9a:b5:fc:
                    0e:b9:23:f0:5f:ad:21:a4:2c:1c:51:07:0d:26:36:
                    21:e6:fb:d3:66:75:39:99:a4:e6:ff:e8:3b:53:dd:
                    f8:fe:42:59:b9:5c:84:66:df:6c:a8:0a:a7:52:8c:
                    94:36:92:46:0c:ef:ec:e2:5e:0f:62:00:58:00:86:
                    37:0e:ea:95:3a:c0:1c:f2:c0:ac:7c:ab:bc:30:55:
                    6c:fe:00:7d:36:d4:d0:fd:40:bb:10:d3:3a:7c:e4:
                    f9:0f:5d:65:ef:8a:e4:53:d3:c9:e9:54:fa:e3:96:
                    e7:ff:7f:8d:53:51:a2:cf:59:51:9c:1c:83:66:3a:
                    7f:c9:01:3f:37:d9:fb:46:5d:69:8f:9c:76:6c:a1:
                    b7:68:ec:54:26:f6:d6:dd:d4:67:ff:02:27:0a:c7:
                    18:c1:3e:ee:5c:e1:52:04:98:75:76:c8:35:2c:29:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:8E:68:11:6D:F7:FA:82:10:02:54:E7:01:21:55:6A:8E:48:4E:4B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/838E68116DF7FA82100254E70121556A8E484E4B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.164.0/22
                IPv6:
                  2804:695c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270265

    Signature Algorithm: sha256WithRSAEncryption
         10:60:6d:23:b1:e3:b6:3b:a7:b7:35:f6:ee:76:34:3a:74:78:
         10:dd:6f:77:08:8f:27:6c:79:78:22:e9:ee:45:51:64:0a:01:
         55:8e:08:fa:0a:f3:37:39:3d:4d:b1:3e:d1:4b:a9:9a:04:8c:
         d9:49:c7:29:03:69:47:05:b9:30:f1:33:77:75:8a:cb:b0:43:
         a2:22:7b:29:ea:fa:69:ce:c7:6f:da:e2:6b:bc:c4:c0:99:6d:
         79:9d:78:2f:d7:5c:50:cd:fc:75:97:ef:74:13:23:f3:1c:1f:
         af:4f:51:51:70:9b:b3:37:08:19:f1:4a:dc:09:3c:ac:bf:2c:
         21:52:27:dd:19:5f:ee:fa:aa:ec:55:ae:11:03:ae:be:c9:5f:
         b8:6a:cc:69:54:30:98:bf:d2:c9:bb:7d:c6:f2:8a:39:2c:68:
         1b:26:ab:d3:77:22:db:aa:0b:27:cc:24:27:29:7d:69:0b:e5:
         92:bf:9d:8a:61:07:b4:41:34:3f:a0:e6:1c:ee:5d:0f:10:74:
         09:02:9f:c0:e1:44:4a:7d:e6:ec:a5:4b:d3:20:47:c6:53:39:
         3b:14:78:96:3b:4e:d8:75:6e:71:f4:49:2e:2d:b9:9d:e5:7f:
         8b:24:60:f6:44:2d:85:a5:64:dd:fb:85:9d:f6:d7:27:1a:3d:
         a2:30:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org