Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer
File:                     3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.cer (raw, json)
Hash identifier:          5x2d6JZwLvL66YQOPQTPHHuZvxHxepKX5LF4OaBg5tM=
Subject key identifier:   3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38DFC3195AE380807CF1FF15E2EF440D55A2DF30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:21 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:21 +0000
Subordinate resources:    AS: 264350
                          IP: 131.108.92.0/22
                          IP: 2804:1d24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:c3:19:5a:e3:80:80:7c:f1:ff:15:e2:ef:44:0d:55:a2:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:21 2023 GMT
            Not After : Sep 16 17:53:21 2024 GMT
        Subject: CN=3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:c6:92:77:48:cd:21:8b:87:f9:84:12:1a:
                    2b:87:6b:b8:95:33:3a:6e:d2:71:2f:0b:9d:34:74:
                    d7:a3:dd:04:cb:ee:a2:3f:94:15:a5:ad:c0:1b:58:
                    66:cc:ce:d6:b2:f9:86:0b:f2:af:0f:a5:6c:43:54:
                    38:f0:7e:c9:fc:39:a0:bd:1b:a3:2b:73:1d:03:57:
                    df:e0:16:4a:36:fb:6b:83:88:11:a9:c9:af:dc:32:
                    ed:79:1d:fa:ab:9b:8c:e3:1f:ef:bf:84:4a:58:35:
                    fb:6d:14:d7:e5:f5:bb:c8:f2:04:d9:a1:04:d4:fd:
                    e1:aa:0c:07:96:c7:9d:02:27:5d:db:de:99:a7:43:
                    76:d2:b2:96:be:95:91:40:d9:9a:0d:68:dd:a7:ee:
                    1e:3b:57:31:56:b3:04:b7:9a:b5:32:4d:59:a9:4b:
                    b3:1a:bf:a2:24:1f:07:70:97:51:87:2c:1d:0e:67:
                    a8:27:4f:3c:c5:6f:b6:79:9e:51:3f:48:3d:50:0f:
                    29:29:d9:1e:e9:4c:a9:42:85:1c:c0:54:f3:5b:b7:
                    40:f3:a3:a8:3a:72:ee:94:6e:62:a2:7d:e0:72:f8:
                    51:cc:01:a5:a7:27:af:02:84:05:67:2a:55:ab:3f:
                    bc:97:3c:a1:28:98:35:93:84:ff:87:ad:34:67:6c:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:2B:D4:B7:FE:56:06:B7:FA:F4:C3:A5:6A:B8:08:25:2E:8D:73:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/0/3A2BD4B7FE5606B7FAF4C3A56AB808252E8D7387.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.92.0/22
                IPv6:
                  2804:1d24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264350

    Signature Algorithm: sha256WithRSAEncryption
         20:10:70:5b:09:21:55:34:9d:77:f9:8b:49:27:92:38:9f:1c:
         64:86:6c:56:dd:49:82:88:39:3f:6f:d5:1e:f8:e3:b9:25:eb:
         28:3d:ba:7d:42:48:d6:25:56:cf:98:da:f0:0d:f5:b3:07:5d:
         53:85:00:1a:7b:e9:d8:23:8e:77:63:25:9f:80:c4:22:eb:cb:
         e5:db:35:fe:fb:69:a6:ba:88:f6:2f:0e:8f:92:91:63:59:d4:
         3d:09:b4:e1:a4:cd:d8:15:b0:9d:ce:95:bc:32:0a:3c:a1:c8:
         a1:22:b4:b4:fb:2e:ce:a3:5d:1f:df:e4:81:b8:c5:fa:d2:91:
         0d:b4:88:1f:4f:2a:ed:a8:df:2f:ae:e9:e2:1f:6c:64:08:e5:
         d1:af:b3:6b:a2:0d:60:46:81:c1:73:36:56:06:15:2d:e2:38:
         33:71:2d:af:06:69:c3:d1:25:01:f3:ad:17:58:21:aa:d3:07:
         3c:e1:f0:a6:bb:07:10:f3:70:6e:c4:10:a2:4b:73:04:de:43:
         5d:b7:93:04:a0:ab:5e:d8:e7:fb:2e:e7:cc:f2:91:81:d9:bf:
         4d:5f:a5:d3:aa:7e:91:6b:77:53:50:78:10:96:2d:5a:9e:a9:
         32:9d:21:23:10:c5:63:76:ad:1d:11:41:d1:3b:7e:6f:e0:8e:
         15:ed:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----