Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3ADA5E79F5D3209C645BF294AB1195A206C68A9A.cer
File:                     3ADA5E79F5D3209C645BF294AB1195A206C68A9A.cer (raw, json)
Hash identifier:          oE13b7GKc+PfeGI2FRHunZ4qbGcbZaJ1tR9BTmv2+HA=
Subject key identifier:   3A:DA:5E:79:F5:D3:20:9C:64:5B:F2:94:AB:11:95:A2:06:C6:8A:9A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       636776BA3708B1F87EF6B9885F9A11ABA249E8A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/3ADA5E79F5D3209C645BF294AB1195A206C68A9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 02:49:10 +0000
Certificate not after:    Wed 22 Jan 2025 02:54:10 +0000
Subordinate resources:    AS: 266973
                          IP: 45.225.228.0/22
                          IP: 2804:462c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:67:76:ba:37:08:b1:f8:7e:f6:b9:88:5f:9a:11:ab:a2:49:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 02:49:10 2024 GMT
            Not After : Jan 22 02:54:10 2025 GMT
        Subject: CN=3ADA5E79F5D3209C645BF294AB1195A206C68A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:b7:d2:51:e4:0e:74:15:83:ba:39:7f:8b:
                    c2:79:74:bf:1c:12:89:6e:7f:61:3d:08:f4:59:ca:
                    bf:86:33:b0:bd:77:fb:0a:1c:77:3a:51:3f:b1:5a:
                    d0:ce:83:58:d2:00:a6:97:bc:8d:87:75:6b:15:be:
                    ca:c3:99:a6:5d:2a:86:a6:87:51:20:e9:dc:81:ea:
                    4b:dc:52:d3:25:96:68:3f:c2:d2:6e:e9:94:4c:eb:
                    42:f3:2a:4b:8c:a1:b2:1c:ef:43:75:29:32:17:3b:
                    7e:6e:0c:5a:8f:ce:b1:03:89:59:18:91:81:d7:4e:
                    a6:9f:08:f5:5a:df:81:d2:ea:28:67:d4:ce:b7:79:
                    3b:f5:50:6a:a9:14:78:47:10:33:cf:e8:44:15:8a:
                    dc:ad:ca:5e:b6:1b:81:64:fc:ae:4b:ce:c7:dd:b8:
                    39:11:24:b0:79:19:1c:ca:08:b0:df:84:e9:26:a0:
                    fa:c1:bc:9b:ba:e8:d5:31:f3:ab:09:e5:e6:70:e3:
                    d8:44:64:a6:c4:da:e4:ec:33:c4:87:f8:d9:f3:23:
                    fd:e7:1d:8b:85:2c:b9:0a:d8:23:64:f3:95:81:6c:
                    6a:8b:40:3d:f5:2b:68:04:0c:a4:cb:3f:17:0f:51:
                    d3:f0:1b:e6:07:fb:9a:2a:27:42:16:d5:2a:c6:71:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:DA:5E:79:F5:D3:20:9C:64:5B:F2:94:AB:11:95:A2:06:C6:8A:9A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/3ADA5E79F5D3209C645BF294AB1195A206C68A9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.228.0/22
                IPv6:
                  2804:462c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266973

    Signature Algorithm: sha256WithRSAEncryption
         30:47:28:22:98:8d:b0:99:04:bf:22:78:7f:2c:cc:13:cb:cc:
         a4:5e:f9:5e:81:c9:06:29:ea:98:3f:8f:3d:69:40:47:ff:cc:
         a4:10:a5:f1:8c:71:ea:af:c7:8a:9f:4d:90:e7:61:f2:c4:8a:
         d3:0b:fc:08:90:f9:9c:3b:3f:1f:04:97:85:a4:81:cf:29:9d:
         27:73:50:69:57:53:54:de:34:d6:66:5b:39:df:0b:77:9c:b6:
         83:ff:37:dd:db:1e:47:26:f9:2c:e3:fa:63:a9:93:b7:7a:62:
         36:12:6b:3e:11:14:6a:47:62:35:18:39:b4:84:7d:08:41:bc:
         27:e8:0a:ae:21:fc:62:d7:a5:05:95:5f:5c:26:71:4f:6d:ec:
         c3:9b:3e:c2:99:b9:62:8b:6b:e4:6c:1d:6c:f8:22:f6:47:81:
         53:e4:d7:96:c1:e6:36:a2:b4:32:88:5a:e4:eb:9f:b6:0e:71:
         17:da:b9:6b:8e:0c:9b:36:fb:18:f2:46:72:d0:bb:c1:5c:e3:
         3e:49:62:8c:19:54:73:47:5a:a3:e7:98:9c:63:ed:6e:83:0d:
         8b:05:74:81:a5:d7:bd:01:71:d9:5e:c6:25:01:a0:9a:da:47:
         33:95:7c:0d:b6:d2:1a:10:c2:b3:76:6c:61:eb:d4:d5:41:13:
         f9:f1:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----