Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.cer
File:                     A38A74D179221A66470DC4C00BDE42B3F59C23CC.cer (raw, json)
Hash identifier:          POBsnrMlMLxfIjpV9q03TnLwa6VeSTKg2T2Br3osF4g=
Subject key identifier:   A3:8A:74:D1:79:22:1A:66:47:0D:C4:C0:0B:DE:42:B3:F5:9C:23:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F262E473420B1C89CEA289BECFF6FF180FAEC21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 13:09:50 +0000
Certificate not after:    Wed 02 Apr 2025 13:14:50 +0000
Subordinate resources:    AS: 264921
                          IP: 168.228.164.0/22
                          IP: 2804:2ff0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:2e:47:34:20:b1:c8:9c:ea:28:9b:ec:ff:6f:f1:80:fa:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 13:09:50 2024 GMT
            Not After : Apr  2 13:14:50 2025 GMT
        Subject: CN=A38A74D179221A66470DC4C00BDE42B3F59C23CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:fb:35:7d:ae:4d:b8:35:57:a2:98:f3:c9:
                    56:35:1c:c6:eb:be:38:f1:c6:f9:af:a5:92:58:aa:
                    c7:69:38:b9:81:1c:f3:8e:c9:c8:05:2c:03:d4:b7:
                    04:e9:67:55:7d:b9:de:6a:3d:3d:5e:0f:42:98:29:
                    0b:ef:86:0c:d1:ec:72:7d:cd:9e:bf:6e:12:4a:88:
                    d2:81:96:57:82:05:71:dd:4f:90:11:1c:83:76:47:
                    b7:34:f6:0b:7a:45:1e:00:e7:9e:45:d9:97:4e:dc:
                    14:61:39:06:cf:1f:cd:68:9b:d6:78:3a:6e:81:88:
                    2f:eb:41:c2:97:49:a6:4e:78:2e:e7:90:3b:4e:1b:
                    d2:48:73:f8:39:a3:5c:dd:66:ae:3d:04:19:46:bb:
                    3e:dc:b1:cd:b2:9b:d4:96:52:29:3e:09:e5:ba:b2:
                    9d:67:b8:b9:f0:c8:8f:66:a0:9a:5c:21:51:c6:2a:
                    d9:6f:95:8c:f3:cf:a5:83:0e:67:49:6d:d3:b9:3b:
                    80:a9:45:90:32:dd:34:cb:45:90:da:74:69:34:b9:
                    9c:79:29:16:5c:b0:18:2c:56:92:ad:39:16:80:28:
                    55:65:a0:72:1c:08:94:b0:66:65:51:9a:a5:ce:47:
                    78:3e:4c:df:08:d6:d4:44:54:1f:4b:09:d3:c7:b9:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:8A:74:D1:79:22:1A:66:47:0D:C4:C0:0B:DE:42:B3:F5:9C:23:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/0/A38A74D179221A66470DC4C00BDE42B3F59C23CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.164.0/22
                IPv6:
                  2804:2ff0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264921

    Signature Algorithm: sha256WithRSAEncryption
         b6:13:94:a1:48:f9:f3:d2:e5:d3:13:da:17:15:de:90:a0:86:
         f2:53:e0:c7:d4:5e:1d:3a:9d:7c:c0:f2:6f:2b:62:ff:b8:91:
         6d:70:8b:df:72:74:0f:1e:56:c2:0f:d8:16:7f:db:97:7a:e5:
         e8:ad:b5:5c:f0:04:8a:91:84:d9:a6:55:44:e3:f1:04:96:a9:
         7b:c0:d0:10:6f:97:d7:16:b2:4b:d4:6c:2e:b5:32:4c:6d:69:
         27:ad:a9:0d:50:99:a0:3b:92:6c:e3:66:eb:55:23:53:c6:1c:
         a2:64:79:c2:2c:75:93:58:3d:a3:ed:37:0a:46:48:39:44:94:
         4f:96:e2:d0:f1:8d:95:53:68:7d:1e:16:97:2b:d0:fc:b3:02:
         cd:fe:27:30:ff:17:f7:6f:e2:14:4b:7d:76:1e:0a:6f:70:87:
         90:d1:4f:76:d4:57:88:b0:34:8f:cb:d7:c3:a6:5f:81:96:a6:
         a1:bb:8f:5c:f3:eb:0c:e9:39:6b:ad:54:39:52:b7:5a:19:78:
         82:68:58:91:cd:96:72:ed:fd:ba:65:75:7e:2c:99:d7:cd:25:
         b9:fd:17:21:0f:bf:13:a3:32:c4:6b:e5:db:7c:3d:35:db:62:
         fe:1b:59:bf:48:59:f2:e4:1b:c5:00:05:f6:8a:88:7c:87:fd:
         8d:c2:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org