Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B3A5736ACE6C497662EBAA10658C96B12B253181.cer
File:                     B3A5736ACE6C497662EBAA10658C96B12B253181.cer (raw, json)
Hash identifier:          YD2jlGlBVBH3a+l9w5cGkZBO24xCAY5/lWQcy5fqVyk=
Subject key identifier:   B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FAF8DB3F9912BF1A75C5C5838D5C365678D00BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/B3A5736ACE6C497662EBAA10658C96B12B253181.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 11 Jun 2023 12:13:18 +0000
Certificate not after:    Sun 09 Jun 2024 12:18:18 +0000
Subordinate resources:    AS: 268593
                          IP: 45.162.64.0/22
                          IP: 2804:5394::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:af:8d:b3:f9:91:2b:f1:a7:5c:5c:58:38:d5:c3:65:67:8d:00:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 11 12:13:18 2023 GMT
            Not After : Jun  9 12:18:18 2024 GMT
        Subject: CN=B3A5736ACE6C497662EBAA10658C96B12B253181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:5e:b7:8f:0e:8f:95:11:27:45:9c:c7:f9:
                    f4:cd:97:cc:11:86:36:12:d9:4b:09:65:a3:30:b5:
                    58:1c:b9:d2:43:94:fb:f5:bc:c9:1c:13:16:bc:7e:
                    06:30:c9:ce:49:ce:94:c1:81:d0:1a:51:1c:4e:ea:
                    a9:01:45:13:47:90:01:e4:ab:3e:26:84:e4:02:ec:
                    12:33:5d:52:17:d8:db:64:b2:a1:e2:3a:85:f9:81:
                    39:d2:77:67:f0:1a:7f:ac:c9:44:de:a5:65:e0:5b:
                    66:1d:dd:a7:99:2b:31:49:11:32:bb:07:a0:56:cf:
                    0b:8c:fc:2e:a1:2c:60:52:b5:ff:04:e2:e2:f0:af:
                    90:1f:bf:a2:91:d6:1b:d8:6e:51:ba:29:25:4a:9c:
                    a2:6e:f7:67:32:25:e7:48:03:b5:be:f5:7d:fe:3d:
                    0d:f2:e6:d9:20:db:63:9a:65:95:b3:ec:39:0b:03:
                    9a:22:00:61:c0:77:a4:bd:01:68:c4:03:0b:41:9a:
                    de:d6:61:26:d5:d4:c0:f8:f7:94:35:86:49:65:06:
                    3a:e3:0c:45:ef:cc:4f:1f:aa:ba:62:23:b7:38:51:
                    ce:48:bb:3c:b8:46:73:9d:13:ed:fa:bb:72:e0:38:
                    81:07:ad:0b:a3:2e:a8:38:ae:d9:e0:da:0b:ce:14:
                    69:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:A5:73:6A:CE:6C:49:76:62:EB:AA:10:65:8C:96:B1:2B:25:31:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/B3A5736ACE6C497662EBAA10658C96B12B253181.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.64.0/22
                IPv6:
                  2804:5394::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268593

    Signature Algorithm: sha256WithRSAEncryption
         51:98:c1:10:91:7c:f3:42:b4:f5:c0:cc:d7:10:12:90:9a:de:
         28:5b:88:2a:20:a1:f7:14:49:f3:98:64:35:a8:bb:54:71:ba:
         a6:6d:8c:a5:75:68:dd:e1:00:42:0c:20:5d:24:de:fa:87:4d:
         0a:9d:7f:24:97:b1:de:fa:4e:36:e2:d3:f6:e2:d3:19:d0:e2:
         88:4f:86:7e:e1:73:92:d8:de:ee:21:64:75:9e:35:5c:01:f5:
         53:96:fb:27:ef:a6:87:2c:d0:76:50:09:ff:66:73:57:32:51:
         79:0a:70:c4:4f:e3:9c:7b:6d:18:8e:47:98:c6:41:38:d5:d2:
         87:78:fe:5f:f3:16:cb:c9:19:88:fe:99:79:6f:63:3b:9b:5f:
         2f:0c:70:b9:22:88:ff:ac:a8:28:6b:bf:3a:af:47:1e:44:9c:
         9f:16:6d:f7:37:6c:eb:c0:b7:46:fa:94:ab:d5:30:16:cf:f1:
         4e:56:98:71:95:5d:29:87:98:cf:7b:26:e2:ae:b5:c8:b6:06:
         b2:6f:68:89:2a:ef:17:fb:3c:a5:b1:01:9d:83:df:a1:ec:5f:
         1f:80:58:02:51:40:63:2f:92:2f:f4:50:0d:64:8a:b3:7a:8d:
         20:aa:90:da:03:45:d8:4f:51:d3:4d:32:81:4d:3c:6c:82:3c:
         cd:7b:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----