Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
File:                     3AD5972290586B5BEB9106DC1754301150A63C87.cer (raw, json)
Hash identifier:          nyy/DpbSnr+1gchvQ/1npscWBTPuQHEYKMWrZK8ziGk=
Subject key identifier:   3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       159B250F32E280C71C060DA594204CF7B0BCC8D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 19:23:52 +0000
Certificate not after:    Wed 19 Mar 2025 19:28:52 +0000
Subordinate resources:    AS: 271111
                          IP: 192.140.84.0/22
                          IP: 2804:766c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:25:0f:32:e2:80:c7:1c:06:0d:a5:94:20:4c:f7:b0:bc:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 19:23:52 2024 GMT
            Not After : Mar 19 19:28:52 2025 GMT
        Subject: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:2c:be:e0:d6:af:4d:47:af:44:b7:c1:14:
                    d0:8f:87:06:9d:e0:a3:d2:a1:35:3b:ee:0a:97:5e:
                    b1:86:48:54:55:1b:63:eb:71:0a:de:c5:6a:92:71:
                    06:05:ca:7f:f8:9e:d0:6b:79:33:3d:71:5f:37:80:
                    5b:22:c0:b6:10:91:29:3b:55:f3:f7:5f:4b:6a:5e:
                    bc:9b:17:3f:e7:30:d9:76:5e:e4:98:cd:06:2e:1b:
                    eb:a4:b2:f6:eb:ad:26:78:83:85:82:1f:6c:f8:30:
                    4a:d7:87:56:9b:13:9a:03:1b:41:b7:0a:4a:04:2b:
                    ef:ad:2a:f5:21:27:7f:c0:d3:7c:0e:4d:3a:58:36:
                    11:fd:58:ef:3d:17:1b:be:94:d2:d7:79:8b:93:ca:
                    0d:30:ca:46:a8:0d:f6:7d:ac:f1:ac:e8:05:94:42:
                    ba:e4:e5:ae:9a:06:b3:2b:46:ad:41:e3:f7:2a:54:
                    9c:09:5d:43:73:65:6a:13:8c:fd:c1:81:d9:06:e7:
                    3a:6b:74:52:79:70:c5:88:23:18:d9:b5:b5:f7:6a:
                    79:b6:66:1b:dd:be:21:43:c5:64:9e:e3:20:5f:8a:
                    c8:7c:e7:8e:22:86:35:ac:9b:bc:0c:c2:7d:04:33:
                    92:81:01:ac:9f:b1:35:8e:71:8f:9f:66:14:e7:20:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22
                IPv6:
                  2804:766c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271111

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:17:55:35:28:cb:f1:8a:47:8b:ce:b1:32:8a:b7:8b:6a:
         b4:b3:4c:b6:ad:21:08:60:6f:71:97:e8:ff:49:5f:8d:1f:2c:
         06:e4:d9:64:1f:b0:9d:07:18:d9:ad:ed:42:90:fb:16:5e:17:
         61:c9:06:6b:f3:3e:6c:13:9f:b1:27:ab:3b:7b:e3:1c:5f:ce:
         de:28:08:e0:03:5f:0e:e0:09:6a:2d:e4:f5:a2:51:2b:6f:0d:
         d1:00:ae:3f:16:96:eb:02:a7:2e:5d:34:c7:ef:df:05:26:f6:
         2c:ee:31:cf:a7:46:f5:17:f3:85:04:a1:97:0f:b4:6d:80:50:
         75:15:17:07:fc:bf:7a:e4:fb:f7:8b:34:b2:6c:13:64:71:c3:
         26:f9:ad:9f:5f:50:73:fa:b1:18:31:eb:f6:ff:be:75:56:2c:
         66:48:13:68:64:8f:f1:54:cc:4b:b7:7b:76:2d:c0:e7:30:2a:
         c2:e5:10:2d:cd:23:04:1c:7e:d9:f7:12:a9:84:c9:00:3e:1e:
         da:56:72:57:39:e4:81:89:1e:dc:3e:92:93:8c:b4:0f:83:32:
         53:bc:56:f9:7c:20:f0:e5:13:3b:66:a1:0d:9b:50:0e:97:f0:
         bd:5c:69:71:97:ea:c4:a6:bf:dc:8e:d1:58:2a:25:a2:44:ba:
         d4:3c:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----