Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer
File:                     3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer (raw, json)
Hash identifier:          UpjCIQtvTVr1/7N4p1zzlMM+9KE2SXGQUJKYUhyjiPw=
Subject key identifier:   3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       016414A56A80254BFCDFA80F1E7B204BE718BEE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 17:12:05 +0000
Certificate not after:    Fri 21 Jun 2024 17:17:05 +0000
Subordinate resources:    AS: 270240
                          IP: 45.191.240.0/22
                          IP: 2804:68f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:64:14:a5:6a:80:25:4b:fc:df:a8:0f:1e:7b:20:4b:e7:18:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 17:12:05 2023 GMT
            Not After : Jun 21 17:17:05 2024 GMT
        Subject: CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:50:01:b0:95:01:c5:16:c1:49:49:0b:37:
                    09:f3:10:99:4e:c2:c1:44:96:34:e7:05:69:92:43:
                    b4:c4:ea:0d:21:1e:7b:da:4c:e7:47:8b:57:05:8d:
                    88:9c:48:0e:0f:ce:70:b1:a3:90:18:21:c4:dd:66:
                    a8:f2:f9:79:11:6e:6e:59:ce:3d:dd:28:fc:b4:e0:
                    78:2b:2a:82:fc:7e:fc:58:ce:5f:bf:e3:c0:dd:b8:
                    a5:f9:98:7d:58:d6:ca:7a:89:39:7a:08:fb:78:e9:
                    77:8b:37:b3:f9:aa:70:d5:16:e1:ce:0d:ec:1b:a6:
                    32:be:7c:c6:46:05:a8:67:cb:11:24:5c:a9:35:d4:
                    35:0b:f5:17:04:1b:0b:b1:f7:12:3d:f2:c3:c8:6d:
                    30:6b:34:17:6c:20:25:a5:ad:3d:15:bb:17:91:c1:
                    43:63:55:48:c5:7f:b1:18:97:7b:63:61:67:20:ba:
                    49:3e:02:99:0a:cd:aa:55:82:e6:bc:c0:41:85:4c:
                    0c:a6:9c:47:c2:06:32:29:4b:b2:e8:71:19:87:c8:
                    d5:80:10:66:f6:73:e5:a9:c4:ae:21:e9:6b:3f:b6:
                    af:65:fc:5f:c5:33:1c:ff:d4:1c:09:4f:4b:85:48:
                    12:9e:cb:c6:3d:f0:2f:79:3d:88:47:a6:08:7f:0b:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.240.0/22
                IPv6:
                  2804:68f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270240

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:86:2b:50:ef:e4:69:4f:f7:83:17:d7:bc:8a:d7:49:94:
         23:a7:7b:56:b7:6c:4f:a5:44:f2:e5:7a:eb:23:ae:a7:01:89:
         9f:6f:79:bb:ae:4d:fb:4b:47:8b:30:81:bd:f4:c8:53:e0:54:
         bd:10:fb:82:52:19:fa:d2:bd:ab:5f:9a:dc:82:a1:36:d9:72:
         be:54:d5:2e:77:0b:f5:fb:1e:11:9b:3d:ed:92:2d:35:42:67:
         ec:9a:e5:75:96:91:dd:98:81:60:a0:b6:6b:9d:39:d5:b6:9a:
         13:b8:47:8e:40:34:b1:77:9d:04:90:0f:5e:ba:b2:de:83:ba:
         6b:30:e5:0c:cf:69:b4:17:43:ec:2a:eb:11:9d:31:e2:3b:da:
         e9:52:bb:83:ec:1c:91:89:84:98:e2:5f:fd:32:b7:07:d9:51:
         6a:4a:bf:6b:45:76:fb:5d:13:bf:5c:65:e1:7e:67:a2:f0:f8:
         24:51:d5:6b:b7:67:53:6b:95:ce:b8:1c:10:56:de:b9:df:8f:
         86:7e:43:19:6f:d7:a9:0d:61:3d:23:09:8c:de:cb:53:d6:d9:
         bf:a9:7d:fc:95:7f:d8:03:f1:20:57:5b:23:5b:c6:ab:87:47:
         75:35:53:da:3a:66:2b:bc:fe:d5:2c:3c:cb:99:4b:a9:3f:1a:
         9a:e2:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----