Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.cer
File:                     387CCE707D4ABBB8D7C22445560A235FC31B612A.cer (raw, json)
Hash identifier:          VdRmglJcKrY9kaf8zKpsfJREa7psJTAa9SVTdy5PksU=
Subject key identifier:   38:7C:CE:70:7D:4A:BB:B8:D7:C2:24:45:56:0A:23:5F:C3:1B:61:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F94B11FC44250AB4BC5D06277E7ED31961B3308
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 15:34:42 +0000
Certificate not after:    Wed 15 May 2024 15:39:42 +0000
Subordinate resources:    IP: 190.89.68.0/22
                          IP: 2804:6ac4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:94:b1:1f:c4:42:50:ab:4b:c5:d0:62:77:e7:ed:31:96:1b:33:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 15:34:42 2023 GMT
            Not After : May 15 15:39:42 2024 GMT
        Subject: CN=387CCE707D4ABBB8D7C22445560A235FC31B612A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:27:f6:51:f3:42:89:f4:ab:12:33:49:56:
                    71:80:63:e2:38:41:fb:4f:e5:e3:70:e8:4c:38:f8:
                    90:ec:c0:0c:22:9c:58:d4:81:2c:bb:2e:f7:62:44:
                    ae:15:ad:6a:a4:ed:3b:85:4c:83:7c:4c:20:6e:0b:
                    8d:a8:e5:59:09:88:47:1f:23:00:a2:63:25:6e:d9:
                    bb:aa:60:dc:84:dd:d2:0f:00:68:2b:30:c1:37:7d:
                    e7:c8:94:d5:e7:59:92:ba:ca:bf:fe:e1:92:4d:64:
                    92:9b:da:b9:04:00:b5:f8:73:e2:0b:65:57:75:28:
                    c7:32:97:c4:42:31:d9:2b:d9:c6:16:99:f8:79:ca:
                    66:d1:34:cd:1e:1a:31:2e:77:b1:69:5e:96:49:17:
                    87:2d:2c:a9:81:81:a5:da:0a:9a:1c:b6:9a:83:08:
                    21:6c:60:c6:3f:8c:62:96:28:06:d6:30:d8:ae:a7:
                    18:da:ef:60:11:54:6a:3f:15:f0:06:d1:23:da:4d:
                    da:23:3d:73:4f:82:d6:1f:f4:05:6e:6f:47:12:8a:
                    72:ac:ee:8e:06:c6:af:d6:75:86:72:52:3d:6f:0d:
                    ed:7c:a5:e4:26:9a:a2:fb:69:69:8b:cc:ef:1e:fb:
                    aa:3f:40:b7:32:3f:3b:07:8a:d0:76:22:9a:fc:ee:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:7C:CE:70:7D:4A:BB:B8:D7:C2:24:45:56:0A:23:5F:C3:1B:61:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sjkezDggr8oZCy9qtcRzC1jQ82e7BaSTAcZ4DCGvWD/0/387CCE707D4ABBB8D7C22445560A235FC31B612A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.68.0/22
                IPv6:
                  2804:6ac4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:9d:b3:69:2b:ef:e1:e2:5f:d7:d4:90:b4:94:48:47:9b:
         39:f2:5b:8a:4e:bf:82:03:e1:91:97:36:ef:1c:b2:5b:79:3a:
         45:cf:fa:4f:02:f6:b6:33:03:f8:2d:42:0b:16:3e:10:9e:37:
         81:86:62:b9:45:18:f2:f3:92:52:0e:0a:b7:85:5b:2e:31:94:
         47:19:07:8b:5b:90:65:85:41:0b:c6:ff:ab:66:d4:af:39:a8:
         c5:0a:6e:54:1e:0d:03:ff:88:e5:5a:87:fa:38:a1:fc:9e:a4:
         68:d3:01:9a:c9:48:7d:f1:c4:3f:46:fe:19:44:ed:33:4b:1a:
         8c:8b:2b:eb:72:08:10:9a:c3:2d:38:78:f4:66:6f:d9:5e:18:
         07:d5:96:59:16:3b:99:ac:8b:54:15:cb:81:7c:96:79:97:b9:
         c8:f8:69:e1:d5:62:2c:51:de:4b:50:66:f1:ab:8d:72:61:9f:
         8f:14:62:4e:bd:ef:f1:25:fe:c3:1a:1e:84:b7:e2:b9:f6:1c:
         df:2c:81:e8:80:97:cd:3a:c0:04:3d:47:20:30:d1:27:63:a8:
         ce:c7:04:d3:53:c4:ca:af:d4:b4:e1:da:9c:f2:b0:08:3b:93:
         7d:71:8a:ae:8a:42:11:d7:56:cd:69:54:10:8d:8b:cd:b6:35:
         f4:f0:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----