Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer
File:                     3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer (raw, json)
Hash identifier:          awKbwIrRuxhsulUtiz5l1X7lZNfvc1QXZVX93EqLEiE=
Subject key identifier:   34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1784261D3AA8F7C8A21F58E74F735F0B87F627D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 17 Dec 2023 01:11:37 +0000
Certificate not after:    Sun 15 Dec 2024 01:16:37 +0000
Subordinate resources:    AS: 61944
                          IP: 201.131.92.0/22
                          IP: 2804:18a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:84:26:1d:3a:a8:f7:c8:a2:1f:58:e7:4f:73:5f:0b:87:f6:27:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 17 01:11:37 2023 GMT
            Not After : Dec 15 01:16:37 2024 GMT
        Subject: CN=3448D9FF68BAB6B32FD7182F798ABC05793ECCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:6b:0a:16:1d:44:7c:b7:4a:b5:49:c5:67:ac:
                    5e:5b:b0:b2:35:db:c0:11:f0:dc:14:d0:c4:9c:3c:
                    0f:51:49:1d:5e:e2:bb:0b:0d:2f:d8:63:a0:82:ad:
                    65:d8:e2:d1:3a:16:76:64:82:7f:40:7e:0a:23:ad:
                    a4:14:80:02:2f:f3:db:de:80:75:12:dc:44:9e:1d:
                    3c:12:1f:51:d8:d9:df:3d:6a:8f:a7:a3:13:ff:9c:
                    3b:2b:8b:b8:39:c2:74:c2:c6:59:52:87:43:e9:92:
                    4d:dc:c1:53:d7:cd:fb:d2:8d:98:8b:f8:aa:7a:f3:
                    1e:80:e7:6b:e8:21:24:94:a7:07:d3:4d:9d:8f:c8:
                    9c:27:7f:9e:bd:de:29:be:0b:5f:76:89:81:2f:57:
                    25:43:95:21:82:04:6b:23:12:3e:a9:8e:85:a8:e0:
                    87:9e:ba:7c:32:c4:b0:21:8e:96:a0:85:4b:61:3c:
                    00:b5:eb:e4:67:0a:f6:dd:8e:36:72:96:c7:4b:70:
                    12:11:eb:4b:08:34:23:01:c5:0b:1e:09:de:43:b7:
                    df:66:d6:57:53:b5:67:b2:9a:ab:90:24:9d:b1:85:
                    d4:42:d2:bb:42:c6:73:d1:05:03:e7:4e:74:68:75:
                    15:25:b6:c6:0d:e0:62:93:1c:bd:b0:53:67:da:4c:
                    dd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.92.0/22
                IPv6:
                  2804:18a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61944

    Signature Algorithm: sha256WithRSAEncryption
         ab:60:e8:fa:0c:fb:2a:8c:25:e6:4c:60:66:59:61:b5:b1:47:
         be:4c:34:0d:76:a6:72:f1:35:9c:38:8a:b9:49:92:e3:50:f6:
         1a:8e:e1:d0:f2:db:1d:56:e8:66:71:c5:59:0e:46:a1:99:25:
         90:50:59:00:09:64:2d:d4:64:f3:14:f2:0a:c4:ff:7f:50:dc:
         b7:39:0f:21:aa:40:3f:01:ea:1c:ec:c2:84:ec:c6:1c:c7:ae:
         36:03:60:cf:15:8c:c3:10:ec:ad:6a:d7:1a:35:ea:60:ea:e8:
         9f:61:fb:94:f5:65:2e:80:f3:42:66:52:09:d0:68:09:3a:b1:
         d0:44:03:e8:3f:8b:1b:a2:4d:94:b5:0a:01:32:10:6a:75:72:
         38:c0:e9:07:19:69:4d:45:8d:e8:83:c6:da:43:b9:23:00:c7:
         90:5e:f7:90:c6:c0:3e:01:2b:f8:6c:95:bc:1e:40:dd:4d:5d:
         fb:f7:74:77:92:14:78:49:af:18:9a:d2:5c:75:3b:a9:2d:c0:
         f5:88:0d:2c:fd:29:42:0e:1a:ea:50:15:09:3c:8f:78:c2:fc:
         1e:f7:14:00:ef:8b:cc:94:02:d2:80:cf:9d:d6:9e:45:5c:b1:
         f6:3c:6d:d6:57:3b:12:f5:f1:89:8f:47:07:56:50:fa:6a:2f:
         04:9d:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----