Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer
File:                     3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer (raw, json)
Hash identifier:          HMPnf/nggtPLLgehx0P757+q3bKWEyK38hO4SXJK2OU=
Subject key identifier:   3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E78F38DEBEDFA34814F27B993F923BF55799419
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 04 Nov 2023 21:05:09 +0000
Certificate not after:    Sat 02 Nov 2024 21:10:09 +0000
Subordinate resources:    AS: 270288
                          IP: 200.123.232.0/22
                          IP: 2804:69bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:78:f3:8d:eb:ed:fa:34:81:4f:27:b9:93:f9:23:bf:55:79:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  4 21:05:09 2023 GMT
            Not After : Nov  2 21:10:09 2024 GMT
        Subject: CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:39:52:fc:38:ea:7c:d3:6a:de:cb:33:e9:
                    df:7e:d7:7c:20:f8:c5:8b:48:6c:de:d3:23:57:dd:
                    cb:b1:6e:ed:77:be:13:af:c5:2e:ec:43:65:31:2d:
                    6c:14:07:60:7f:56:7e:42:59:96:33:9c:5a:ac:20:
                    9f:7e:54:c7:48:ad:b2:fc:27:07:76:d6:8c:52:7c:
                    df:c7:f3:31:81:bc:9b:da:8a:91:11:70:a2:ed:e5:
                    44:6c:7e:cb:5f:45:1f:b8:ef:4f:a5:34:21:4e:20:
                    e0:3b:9f:9f:6f:f0:1e:c4:de:da:33:c4:08:e6:06:
                    ea:04:6b:40:4a:29:88:f5:34:b8:19:0d:4e:89:d0:
                    78:75:8e:0b:70:31:4a:99:b4:70:8d:83:72:db:18:
                    4c:bd:63:86:ca:3b:ab:e8:89:0e:80:c9:12:78:df:
                    a4:9e:18:f7:8a:5f:81:93:70:82:d2:92:36:82:08:
                    d9:21:63:99:33:ae:f3:1a:1e:96:f6:ba:79:4a:30:
                    ba:04:e4:fe:88:bd:a7:b8:43:87:26:7b:ad:57:f9:
                    40:54:b5:14:66:7a:ec:0e:fe:f7:68:3e:c9:bb:dd:
                    3c:b0:e3:8e:4c:18:c8:87:c8:37:91:63:7e:1e:f3:
                    07:a7:ee:24:96:90:ae:c1:a3:85:aa:f0:cb:25:e7:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22
                IPv6:
                  2804:69bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270288

    Signature Algorithm: sha256WithRSAEncryption
         19:c2:a1:41:44:dc:27:5b:5f:29:a4:0f:e1:7e:93:39:13:19:
         50:55:6e:87:40:d9:73:87:34:f7:35:84:87:45:99:2b:a5:d0:
         b1:6e:08:9d:a0:73:79:28:c2:4f:1d:2c:cd:59:b5:0f:ea:7c:
         f9:ec:ac:9f:7f:c5:38:1c:1b:58:be:75:fa:b1:6d:88:ee:0f:
         65:17:c6:5c:58:6b:42:b8:d6:75:e1:7c:58:19:3a:ba:f1:e8:
         9c:f9:44:25:aa:20:bc:f6:63:2a:f4:7a:31:65:94:4b:f4:d8:
         be:f5:4d:e0:9a:6f:86:0e:e6:30:39:cc:4f:99:0c:c8:cb:7d:
         73:75:72:a9:e8:9d:e3:27:46:3d:a4:f0:84:3a:18:d3:dc:1d:
         68:a3:1a:5c:6b:3a:68:61:f2:8e:fb:17:10:ec:1c:2d:84:a2:
         5c:82:0f:27:6d:64:7a:0e:31:d1:17:87:c0:98:f7:e9:bc:1e:
         81:05:da:9b:45:0b:ae:0b:ed:94:72:73:d8:2c:d2:c5:00:cb:
         ba:8d:d4:2a:cf:b3:65:a2:7f:e2:dc:bb:2a:51:1c:57:7b:38:
         48:9f:ee:fd:dd:0e:45:95:99:d8:4d:d8:b8:81:a4:1d:91:35:
         72:87:d5:7f:a9:66:7d:df:de:74:e8:93:d5:8d:1d:7b:91:07:
         fe:de:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----