Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer
File:                     38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.cer (raw, json)
Hash identifier:          Zirfs5r/6ze1/rhhxNCnNTdvxRPmvN0pE4dwuDYHDbI=
Subject key identifier:   38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3CCA4751DB820BD942F2EB7E8841F87E097FC793
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 12:14:06 +0000
Certificate not after:    Fri 25 Oct 2024 12:19:06 +0000
Subordinate resources:    AS: 61830
                          IP: 201.140.240.0/22
                          IP: 2804:19fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ca:47:51:db:82:0b:d9:42:f2:eb:7e:88:41:f8:7e:09:7f:c7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 12:14:06 2023 GMT
            Not After : Oct 25 12:19:06 2024 GMT
        Subject: CN=38A142BBA0A65C853D9555B68E29AAFFF43DC2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:d1:80:5c:f1:2a:79:c1:94:a7:9d:53:6a:
                    b4:93:4d:e7:b2:ee:da:0a:1a:7e:80:b3:f0:d0:f0:
                    e7:8d:71:2f:9f:3c:3d:00:38:5e:fe:7d:19:90:38:
                    c3:58:8a:d0:30:39:86:0a:10:54:6a:40:0e:bb:89:
                    a6:67:08:81:d5:2e:3a:87:7a:6e:85:8e:5d:ab:03:
                    f1:6b:4c:e3:ca:25:66:4f:42:11:e0:19:a1:ee:27:
                    dd:85:9c:02:5f:e1:85:77:6c:75:c2:46:ad:2c:eb:
                    8e:8a:96:20:aa:c9:51:2b:fd:17:cb:07:d0:15:f3:
                    51:d2:ba:c6:f4:69:a7:8b:3f:83:d1:92:18:50:40:
                    ee:dc:25:d6:83:1b:5a:50:68:1e:ff:4a:36:da:da:
                    73:58:a9:49:da:fd:70:4e:17:dc:cb:57:b2:c1:83:
                    1a:bb:f5:a1:a6:4e:34:9c:56:97:8c:83:fd:cd:6d:
                    9e:16:a8:05:01:d2:df:e5:a0:7d:54:49:f9:a2:46:
                    ae:e1:30:99:2d:78:86:24:77:8a:1a:7a:bc:c1:08:
                    b0:06:10:4d:fa:f5:57:0e:f0:95:8a:7b:bc:c5:26:
                    a5:49:a5:90:cb:ac:18:51:6b:ce:96:c5:58:21:97:
                    08:e7:78:a6:ed:1e:ab:56:ec:3e:82:b0:8a:89:66:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:A1:42:BB:A0:A6:5C:85:3D:95:55:B6:8E:29:AA:FF:F4:3D:C2:E5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/0/38A142BBA0A65C853D9555B68E29AAFFF43DC2E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.240.0/22
                IPv6:
                  2804:19fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61830

    Signature Algorithm: sha256WithRSAEncryption
         98:63:e8:83:8a:f1:d4:db:a5:9c:c1:03:78:a5:2c:f5:42:89:
         f3:e0:8d:11:7f:c4:5d:7b:50:44:a4:c3:42:af:34:96:a0:90:
         16:af:8c:80:c8:50:69:1c:86:04:7d:52:c4:99:05:85:0e:27:
         76:be:af:ce:54:25:bf:8f:fd:45:f5:e0:ef:08:62:a9:52:c8:
         ca:06:80:0d:af:f0:b0:7a:7c:20:f8:93:ba:05:2b:68:42:69:
         de:80:71:cb:af:43:b3:25:bd:08:21:ca:41:c7:70:f3:af:87:
         af:02:ca:a0:e9:0b:e0:3e:ee:2d:e5:5f:19:72:3c:83:48:7a:
         30:23:df:77:ec:3e:7f:a8:77:1a:30:bb:ba:98:5a:6a:02:65:
         b3:a5:ba:84:ba:cf:4f:b2:2d:c1:03:01:b8:91:7a:fb:ee:3b:
         10:a8:ec:07:a2:8c:94:9e:8f:31:ab:7b:57:1f:1f:f0:b5:7e:
         fb:c9:8b:86:c2:47:16:7b:80:48:7a:39:ca:70:71:d7:28:cd:
         91:91:ec:b6:7e:46:3c:14:5b:41:ed:77:4f:0c:0f:ca:24:9c:
         5f:6e:3c:8b:06:43:1e:5e:09:eb:bd:29:10:50:46:5a:b5:51:
         8e:da:5a:24:98:4e:93:69:cb:03:a3:2d:38:8b:66:4d:4c:df:
         94:5a:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----