Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
File:                     3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer (raw, json)
Hash identifier:          w3/BY7GeFFR00JtqiruHijlrAZxtRXxrHbhl7ZufPAw=
Subject key identifier:   32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30A2D859FF0AB3BB3ED6D06B2551E3D00B69AEA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 12:12:50 +0000
Certificate not after:    Fri 21 Feb 2025 12:17:50 +0000
Subordinate resources:    AS: 264120
                          IP: 138.97.40.0/22
                          IP: 177.12.128.0/22
                          IP: 2804:22c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a2:d8:59:ff:0a:b3:bb:3e:d6:d0:6b:25:51:e3:d0:0b:69:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 12:12:50 2024 GMT
            Not After : Feb 21 12:17:50 2025 GMT
        Subject: CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:d5:19:b8:bd:93:51:b9:79:48:98:e2:fb:
                    44:9a:f8:a1:3b:fa:cd:30:68:84:ff:03:62:37:94:
                    bb:0a:8c:df:24:31:d2:61:61:58:47:46:97:77:eb:
                    ef:09:dc:d6:19:ed:20:21:af:48:b9:af:72:77:8c:
                    27:2a:25:04:27:52:23:6f:c3:c4:8c:6b:eb:b2:c0:
                    31:b3:2b:40:c2:c0:91:42:67:40:96:46:72:88:49:
                    59:47:35:4e:a0:be:56:42:10:f7:63:1b:10:0a:f7:
                    eb:83:18:44:44:ea:dd:ea:8d:a4:9e:7e:e4:e5:e9:
                    cb:9b:8c:2b:44:a5:7f:0d:d8:65:88:b3:c1:98:40:
                    ad:bc:c9:58:8e:1c:4f:cf:2b:81:08:98:c2:4f:90:
                    76:17:a4:a6:1e:64:5a:6e:0f:9d:9a:a2:21:89:f0:
                    6d:23:1d:de:5b:50:51:28:dc:57:4e:92:3e:63:21:
                    6e:26:bb:01:5e:ba:f6:6f:f4:48:45:8f:97:16:d8:
                    87:56:84:b7:73:80:57:ff:33:ae:b5:7c:98:81:bf:
                    43:fd:d1:5f:02:c7:fa:44:7f:7d:91:64:58:54:d0:
                    3f:6a:66:cb:b3:ae:e9:7a:84:0a:6d:53:5c:92:8d:
                    d1:f1:c4:e2:ba:a1:a6:8b:7e:21:e1:73:e1:7c:98:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.40.0/22
                  177.12.128.0/22
                IPv6:
                  2804:22c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264120

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:f1:35:6c:f1:52:71:7a:96:f6:d6:9e:1b:04:22:37:87:
         c6:5d:80:88:c8:46:48:ba:10:1d:ea:43:e4:38:5f:cb:a7:81:
         7c:91:33:11:1e:96:a6:ca:f1:11:be:69:bb:75:24:aa:8b:d1:
         32:88:56:e4:27:be:3f:c8:45:f5:eb:78:55:a5:bc:1d:78:3e:
         82:5f:17:d9:2e:0a:d6:4b:b6:9f:fd:0a:1a:97:af:33:62:3f:
         49:bb:73:a6:d7:79:d5:dd:42:4d:40:bc:ff:6d:36:de:96:f3:
         e1:5e:b3:89:5b:05:7b:00:dc:14:5e:4d:e5:f2:f9:56:4a:dd:
         15:62:92:16:79:98:0c:9d:16:65:2f:50:87:2d:9e:a0:a4:c4:
         0c:22:4f:e7:1f:94:57:d4:42:30:b5:c9:21:95:15:be:b2:fa:
         43:c2:f3:74:7d:25:98:c2:80:9d:6f:a4:bd:c3:7c:9e:c9:74:
         49:25:7e:ef:a1:b1:d8:03:3d:b9:55:6b:6b:63:b1:98:92:47:
         d2:46:9e:dd:4a:26:73:80:36:41:e0:80:02:86:26:a3:8a:5d:
         20:5c:14:05:ff:06:7a:87:ba:8c:1c:f7:a7:48:1c:89:ba:8f:
         5d:a2:84:53:fb:2f:eb:78:b4:66:e9:6b:96:79:50:b0:d0:59:
         b4:1d:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----