Certificate

$ rpki-client -vvf rpki.co/repo/August/4/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer
File:                     381C7A4E80F50F1F7F8CE0819134F3836A8C389C.cer (raw, json)
Hash identifier:          YoNWEA+AVMaSasnZvX+6V0smXoiF7lIVLxD7XIM7pmg=
Subject key identifier:   38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
Authority key identifier: DD:D9:99:14:49:A8:26:B9:82:32:35:DF:6C:5F:9C:0E:08:72:D3:DA
Certificate issuer:       /CN=62f3d0af16abba9ca450defe95074ddfdf70f082ff27f0038c
Certificate serial:       46BB97C11FE91F818E60889B53F086E06FD5B525
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16abba9ca450defe95074ddfdf70f082ff27f0038c.cer
Manifest:                 rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.mft
caRepository:             rsync://rpki.co/repo/AS945/8/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 21:44:39 +0000
Certificate not after:    Mon 20 May 2024 21:49:39 +0000
Subordinate resources:    IP: 23.149.152.0/24
                          IP: 2606:b0c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:97:c1:1f:e9:1f:81:8e:60:88:9b:53:f0:86:e0:6f:d5:b5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16abba9ca450defe95074ddfdf70f082ff27f0038c
        Validity
            Not Before: May 22 21:44:39 2023 GMT
            Not After : May 20 21:49:39 2024 GMT
        Subject: CN=381C7A4E80F50F1F7F8CE0819134F3836A8C389C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:47:8f:dd:9c:9e:96:a3:6c:fa:71:df:5b:
                    54:d0:95:4f:ca:0c:81:22:ff:d8:10:12:c9:92:fc:
                    0d:8a:c1:19:7c:56:80:7e:b8:bb:e4:cb:25:df:bf:
                    4f:7f:3a:79:73:57:32:64:3f:a2:99:06:2c:08:1e:
                    7f:26:4e:66:f8:ed:82:dc:49:43:3a:d7:d9:93:d0:
                    5a:26:83:4d:35:21:a9:e8:09:cb:dc:2c:cf:19:fb:
                    03:1c:aa:a4:3e:8a:e3:48:b7:f1:40:d0:26:4f:8e:
                    2e:2d:c2:8b:1f:81:f6:58:4e:78:a6:81:26:22:98:
                    b0:6c:3b:7d:7e:a6:6e:ac:e6:47:19:03:e7:3e:9c:
                    58:aa:8c:f8:88:c1:0f:a3:29:26:45:a0:f1:2d:30:
                    22:b2:b2:f7:3b:52:09:ec:42:c7:40:be:90:da:af:
                    1b:63:9d:f0:3d:16:6a:27:a5:5b:0e:4e:3b:30:23:
                    20:6b:16:7e:31:54:73:ff:d5:cc:67:80:da:3b:3d:
                    da:02:da:bf:6e:03:32:9c:af:6d:a8:f9:2d:12:5d:
                    d4:89:27:0f:13:f1:87:77:12:c9:64:5d:a5:2f:1b:
                    db:9b:71:b1:b6:26:c4:94:59:7c:3c:8d:a5:62:9c:
                    83:66:01:9e:8d:e9:4f:66:0d:96:ee:35:1a:bb:69:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:1C:7A:4E:80:F5:0F:1F:7F:8C:E0:81:91:34:F3:83:6A:8C:38:9C
            X509v3 Authority Key Identifier:
                keyid:DD:D9:99:14:49:A8:26:B9:82:32:35:DF:6C:5F:9C:0E:08:72:D3:DA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/4/DDD9991449A826B9823235DF6C5F9C0E0872D3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16abba9ca450defe95074ddfdf70f082ff27f0038c.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS945/8/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS945/8/381C7A4E80F50F1F7F8CE0819134F3836A8C389C.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:ff:1b:45:81:6e:1c:13:ca:89:45:12:fd:e2:00:a1:bf:bf:
         4a:62:6c:ec:cb:c4:d4:f4:e2:27:ca:5b:0a:c4:c8:32:59:a7:
         75:75:17:43:4a:06:e6:58:3d:c4:53:df:7e:c2:dc:22:81:16:
         c3:7f:6e:c4:d9:8d:f6:ec:17:80:c4:95:ac:86:08:82:05:c9:
         d1:dc:47:1b:4e:98:41:ce:1d:46:9f:13:f6:2b:48:cf:23:90:
         27:de:79:28:8c:3d:a0:06:70:06:ae:e0:ea:fc:94:3c:60:e0:
         ef:92:e1:d3:f6:dc:07:b3:7e:62:b3:83:f6:91:d4:68:7c:37:
         3c:9f:8b:da:b8:4f:f6:5e:62:12:9b:ef:b5:2c:b6:4a:7f:cd:
         57:2c:03:f7:05:d2:c1:83:a2:f9:39:fb:9f:49:ba:20:02:22:
         bf:32:3c:36:78:7a:32:ab:16:49:88:f8:53:ee:61:64:e0:52:
         f9:9d:51:f4:b0:e6:e9:dc:3f:b8:d8:5e:9a:75:39:93:a9:97:
         a4:39:35:49:b5:41:f8:ad:3f:a7:d7:7b:f1:3f:4b:4d:6a:90:
         bc:ce:bf:8c:76:c7:b5:ed:50:1b:27:51:65:31:61:15:36:46:
         77:66:98:88:d4:32:2b:2c:37:f2:6d:46:9a:a3:0d:19:65:8c:
         d1:8d:27:9c
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIURruXwR/pH4GOYIibU/CG4G/VtSUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmFiYmE5Y2E0NTBkZWZlOTUwNzRkZGZk
ZjcwZjA4MmZmMjdmMDAzOGMwHhcNMjMwNTIyMjE0NDM5WhcNMjQwNTIwMjE0OTM5
WjAzMTEwLwYDVQQDEygzODFDN0E0RTgwRjUwRjFGN0Y4Q0UwODE5MTM0RjM4MzZB
OEMzODlDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17RHj92cnpaj
bPpx31tU0JVPygyBIv/YEBLJkvwNisEZfFaAfri75Msl379Pfzp5c1cyZD+imQYs
CB5/Jk5m+O2C3ElDOtfZk9BaJoNNNSGp6AnL3CzPGfsDHKqkPorjSLfxQNAmT44u
LcKLH4H2WE54poEmIpiwbDt9fqZurOZHGQPnPpxYqoz4iMEPoykmRaDxLTAisrL3
O1IJ7ELHQL6Q2q8bY53wPRZqJ6VbDk47MCMgaxZ+MVRz/9XMZ4DaOz3aAtq/bgMy
nK9tqPktEl3UiScPE/GHdxLJZF2lLxvbm3GxtibElFl8PI2lYpyDZgGejelPZg2W
7jUau2kKEQIDAQABo4ICzzCCAsswDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
OBx6ToD1Dx9/jOCBkTTzg2qMOJwwHwYDVR0jBBgwFoAU3dmZFEmoJrmCMjXfbF+c
Dghy09owDgYDVR0PAQH/BAQDAgEGMFsGA1UdHwRUMFIwUKBOoEyGSnJzeW5jOi8v
cnBraS5jby9yZXBvL0F1Z3VzdC80L0RERDk5OTE0NDlBODI2Qjk4MjMyMzVERjZD
NUY5QzBFMDg3MkQzREEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNm
LTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTA1NGQxZS04MzI2LTQyYTct
YjFhZC0wMmIzMDI4N2I0ODMvNjJmM2QwYWYxNmFiYmE5Y2E0NTBkZWZlOTUwNzRk
ZGZkZjcwZjA4MmZmMjdmMDAzOGMuY2VyMIHKBggrBgEFBQcBCwSBvTCBujApBggr
BgEFBQcwBYYdcnN5bmM6Ly9ycGtpLmNvL3JlcG8vQVM5NDUvOC8wVQYIKwYBBQUH
MAqGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzgvMzgxQzdBNEU4MEY1MEYx
RjdGOENFMDgxOTEzNEYzODM2QThDMzg5Qy5tZnQwNgYIKwYBBQUHMA2GKmh0dHBz
Oi8vcnJkcC5ycGtpLmNvL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5WY
MA0EAgACMAcDBQAmBrDAMA0GCSqGSIb3DQEBCwUAA4IBAQA//xtFgW4cE8qJRRL9
4gChv79KYmzsy8TU9OInylsKxMgyWad1dRdDSgbmWD3EU99+wtwigRbDf27E2Y32
7BeAxJWshgiCBcnR3EcbTphBzh1GnxP2K0jPI5An3nkojD2gBnAGruDq/JQ8YODv
kuHT9twHs35is4P2kdRofDc8n4vauE/2XmISm++1LLZKf81XLAP3BdLBg6L5Ofuf
SbogAiK/Mjw2eHoyqxZJiPhT7mFk4FL5nVH0sObp3D+42F6adTmTqZekOTVJtUH4
rT+n13vxP0tNapC8zr+Mdse17VAbJ1FlMWEVNkZ3ZpiI1DIrLDfybUaaow0ZZYzR
jSec
-----END CERTIFICATE-----