Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer
File:                     A32238AE21BAC9DB953C83E0682468A89EC68D5F.cer (raw, json)
Hash identifier:          iv8EKE59Z0sjPcM13yU8JSJiKKkAOVWeSRQFcdNIuyg=
Subject key identifier:   A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30907286F8B69A2719222FA305EE3548756F0ADE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 19:54:12 +0000
Certificate not after:    Mon 29 Jan 2024 19:59:12 +0000
Subordinate resources:    AS: 265421
                          IP: 168.195.136.0/22
                          IP: 2804:33dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:90:72:86:f8:b6:9a:27:19:22:2f:a3:05:ee:35:48:75:6f:0a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 19:54:12 2023 GMT
            Not After : Jan 29 19:59:12 2024 GMT
        Subject: CN=A32238AE21BAC9DB953C83E0682468A89EC68D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:20:c6:3a:7c:a6:41:b4:44:b2:0e:b3:6b:
                    fc:ed:96:d2:01:3f:04:d4:8f:20:28:4d:da:72:ce:
                    e2:27:6b:5c:c5:e3:cf:1c:c2:09:83:ce:ac:7c:f8:
                    72:ff:be:1f:b4:55:40:47:36:67:4a:ac:34:7a:ef:
                    a5:f7:17:6e:b1:e7:70:95:b1:7d:d5:45:42:d8:9a:
                    6c:f4:c2:31:8f:85:5b:43:4e:75:b9:ca:94:09:43:
                    96:2a:84:f6:f6:45:a8:a9:58:1b:9e:77:d0:f1:25:
                    0a:d1:43:5a:a3:d6:fd:d2:a1:04:a6:9e:49:b9:8c:
                    79:9f:1b:f4:7f:8a:f2:24:05:0b:ec:09:bc:44:ff:
                    d8:5a:e0:99:83:02:fe:09:10:11:28:6f:cc:92:63:
                    a8:08:7e:e2:72:49:d2:dc:95:8a:e1:b9:d3:94:32:
                    a7:ec:46:de:88:54:da:3a:7a:73:c3:fc:ae:ae:96:
                    48:d9:68:4b:1a:76:f9:96:93:4e:35:30:40:4b:98:
                    69:59:06:1f:0c:b9:3e:15:d1:53:8a:16:8d:e9:e3:
                    cc:16:91:91:28:f8:96:e5:6e:26:a1:bf:c4:55:dd:
                    b4:ed:63:03:03:1f:c6:19:c2:04:ba:96:a8:9d:33:
                    97:c9:a9:15:3e:4b:93:75:cd:c0:81:61:3e:c4:65:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:22:38:AE:21:BA:C9:DB:95:3C:83:E0:68:24:68:A8:9E:C6:8D:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/1/A32238AE21BAC9DB953C83E0682468A89EC68D5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.136.0/22
                IPv6:
                  2804:33dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265421

    Signature Algorithm: sha256WithRSAEncryption
         b8:03:da:46:e5:64:61:a8:e9:ab:25:bf:de:b1:46:a7:51:1f:
         17:90:68:b9:a2:9f:bb:e5:5d:1c:ff:9f:70:bc:46:bd:00:be:
         08:f6:ae:10:09:f7:c9:a1:aa:c8:4b:de:12:5a:c4:55:f2:4a:
         74:2f:fa:c7:f7:b5:f7:68:90:dc:be:4e:05:f4:85:1f:b0:3d:
         77:bf:26:e5:f4:c8:9f:3f:4b:bc:79:b9:7c:38:c5:3a:20:f5:
         70:45:02:b7:26:de:ce:d9:53:3d:12:ff:25:44:05:25:e0:a8:
         00:b4:83:a7:86:f0:dc:06:c0:00:a1:d8:3f:ba:c8:e5:3c:03:
         cc:96:08:57:63:63:3c:77:f3:1b:8c:51:4f:77:06:ab:50:9f:
         64:9a:41:85:02:8b:e9:80:7d:1c:af:6f:91:bd:5a:b2:c0:08:
         74:e0:3a:31:61:c8:ff:da:c2:69:bf:e6:82:b4:83:8f:fa:a5:
         2a:23:5e:2c:4b:e7:bc:38:e3:5b:e2:d5:ac:2d:25:83:0e:0c:
         8a:2c:5f:ff:f1:30:c9:0a:e4:6d:9d:58:cf:80:15:83:89:f3:
         fb:d6:a2:5e:44:41:6d:50:f0:13:df:41:2d:7f:e3:e0:8b:8e:
         3a:27:5d:0f:23:11:6c:11:bd:ec:51:1b:04:f7:fa:93:e8:93:
         05:c1:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----