Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.cer
File:                     3C375B95EEE9243BB14219D6524581B4C91D25CE.cer (raw, json)
Hash identifier:          soLPmhSYuMh6dNXXajv6RAkA2HaiJ2833FWGayYwTzA=
Subject key identifier:   3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39CC87F4796EFDEA045C38B162E60B766801E931
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 18:55:13 +0000
Certificate not after:    Fri 24 May 2024 19:00:13 +0000
Subordinate resources:    AS: 266319
                          IP: 170.238.128.0/22
                          IP: 2804:35fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cc:87:f4:79:6e:fd:ea:04:5c:38:b1:62:e6:0b:76:68:01:e9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 18:55:13 2023 GMT
            Not After : May 24 19:00:13 2024 GMT
        Subject: CN=3C375B95EEE9243BB14219D6524581B4C91D25CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:f8:ee:25:f6:c3:7b:7c:31:53:b7:f2:5e:
                    e3:4e:92:2e:8c:39:a0:74:8b:5d:ae:20:96:65:d2:
                    d6:6b:e3:f2:ad:85:76:ee:2d:4e:be:c2:f3:5b:70:
                    eb:99:b9:90:37:4f:63:be:8c:18:22:d9:fe:92:78:
                    e3:ae:22:cc:3d:9a:4f:c5:7c:71:65:10:4c:3b:cd:
                    f0:f0:a2:0e:99:f2:70:e6:ee:52:28:b1:6d:0b:49:
                    79:4b:2d:4c:3e:8e:39:53:38:f8:eb:f9:61:92:9d:
                    d8:ba:99:6d:0d:9b:80:fa:a8:ff:70:99:e4:00:3e:
                    e5:d3:10:ad:0d:c6:8f:ed:41:2f:b6:1c:0e:59:b5:
                    7b:8a:eb:cf:13:d7:a1:5e:3e:cb:6d:31:68:dc:7f:
                    bd:77:07:2c:e1:a4:21:4c:3b:44:ac:9e:fd:7e:79:
                    0d:12:fd:df:70:5b:50:17:62:a5:09:cd:bc:4f:96:
                    66:f7:b3:5d:ce:57:c9:fd:0f:d6:74:fb:88:ce:91:
                    35:9a:24:c4:ca:b3:cb:2f:a9:cb:6d:f6:8f:19:5f:
                    2e:ee:44:f4:dd:96:65:e7:79:1c:57:27:5c:d6:85:
                    a2:7e:c7:c7:04:36:13:0e:fb:d1:cf:b2:b0:66:e3:
                    62:6c:0a:81:79:14:cb:9d:d5:17:53:7a:2f:22:da:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:37:5B:95:EE:E9:24:3B:B1:42:19:D6:52:45:81:B4:C9:1D:25:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3C375B95EEE9243BB14219D6524581B4C91D25CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/22
                IPv6:
                  2804:35fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266319

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:2c:9a:ce:16:f0:2b:88:c2:b1:a0:2a:4f:64:bb:2d:af:
         55:94:d7:6c:98:bb:74:3d:60:8b:e4:ae:24:a4:42:a2:6e:07:
         eb:77:79:51:f8:ee:51:dd:ae:52:8a:42:54:de:42:f3:b6:49:
         f0:38:e7:11:95:2d:77:5d:9b:43:94:e9:e7:ca:00:f5:62:37:
         9a:3e:3b:7a:78:41:88:4b:f5:02:0f:33:a3:9a:61:60:4c:39:
         d5:69:02:90:5a:9f:29:18:33:29:d4:c1:1d:84:cb:21:b5:f3:
         22:8a:f2:c6:ce:ff:30:04:63:9e:63:9c:32:df:8d:37:f6:69:
         a0:2b:ff:03:db:ff:08:e8:0f:2f:d6:0e:07:6a:e8:fa:25:2f:
         24:45:22:f8:31:4b:f9:6e:6d:3b:05:68:cb:8e:65:0b:a0:07:
         6f:22:c7:17:4b:cc:77:72:e0:80:be:0f:15:f6:8a:ca:79:93:
         df:41:e0:92:de:b6:be:e6:8f:bb:9d:d5:4c:6e:7f:71:de:f2:
         fc:0c:42:6f:1f:28:83:3c:40:01:4f:f2:50:0b:c8:01:67:9f:
         74:f2:97:98:04:97:29:2b:90:0b:38:27:23:85:90:04:a3:23:
         09:2c:21:c7:c0:1c:e3:f8:bf:56:77:0b:7a:d4:4a:f2:3f:fb:
         82:10:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----