Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3B1643F857AE766435B067859493C1F51942E8BC.cer
File:                     3B1643F857AE766435B067859493C1F51942E8BC.cer (raw, json)
Hash identifier:          FQ368bFP1nHQPMKIAufbwV4AAPRZvZRGFQCN7PTpD+4=
Subject key identifier:   3B:16:43:F8:57:AE:76:64:35:B0:67:85:94:93:C1:F5:19:42:E8:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F601F19ADA84608D9D7CA08470DB999B785EAA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/3B1643F857AE766435B067859493C1F51942E8BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Dec 2023 15:05:08 +0000
Certificate not after:    Sat 14 Dec 2024 15:10:08 +0000
Subordinate resources:    AS: 262587
                          IP: 143.255.184.0/22
                          IP: 177.84.144.0/21
                          IP: 2804:2b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:60:1f:19:ad:a8:46:08:d9:d7:ca:08:47:0d:b9:99:b7:85:ea:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 15:05:08 2023 GMT
            Not After : Dec 14 15:10:08 2024 GMT
        Subject: CN=3B1643F857AE766435B067859493C1F51942E8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:2e:10:b1:4c:9e:4a:0d:0d:a0:f8:f4:69:
                    5d:93:87:84:1b:5c:5a:0b:c1:74:71:6a:73:4b:dd:
                    c5:43:ad:01:23:38:47:1f:92:c2:de:c1:f1:91:0c:
                    2a:8f:a4:0a:1f:50:c7:6c:87:75:b1:b9:51:29:28:
                    1b:d1:ca:53:ce:67:0e:f7:59:b6:23:b5:d2:e2:20:
                    2e:f3:ee:3d:8e:27:54:dc:e0:5c:94:59:0f:8f:41:
                    b6:71:dc:78:99:7b:b9:bf:93:6e:7e:a3:c5:11:d9:
                    77:55:7f:25:a0:08:8c:9e:8f:fa:e8:78:97:09:3d:
                    76:71:c5:c7:dd:61:0e:9b:0d:19:5b:d9:4c:a8:57:
                    39:f1:8f:06:75:28:af:3b:79:71:56:b2:87:40:5b:
                    8c:37:a1:dd:b3:76:55:08:8f:34:44:bf:5b:a0:00:
                    df:23:ee:1f:6f:3a:2a:3e:72:b8:19:45:1e:67:19:
                    e1:41:ff:fb:7c:bb:b4:2b:3c:70:10:2e:33:b4:4c:
                    bb:ac:eb:3d:98:25:72:9c:9f:4f:14:62:af:ca:a1:
                    96:42:94:02:73:48:15:b2:fe:51:bb:0a:7b:5a:14:
                    39:93:78:b6:20:93:28:63:ed:d5:41:c3:f3:f0:37:
                    cb:71:c3:41:c3:8d:21:0b:5e:98:d3:d9:4a:0a:d6:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:16:43:F8:57:AE:76:64:35:B0:67:85:94:93:C1:F5:19:42:E8:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x5LdeqMYF3VswA16irj9rpbkzyHFZFSWPqRRHGxm8PN/0/3B1643F857AE766435B067859493C1F51942E8BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.184.0/22
                  177.84.144.0/21
                IPv6:
                  2804:2b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262587

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:3f:c6:ed:e3:9c:6a:a7:82:5e:47:5b:13:b7:8a:c5:06:
         79:ae:ce:04:07:40:5a:17:59:2d:49:d9:a1:e6:05:85:db:e6:
         f7:52:bb:56:90:81:96:8e:f7:ca:da:62:e8:d3:e2:e1:50:36:
         d3:3c:dd:95:57:3a:18:4f:7d:ca:1f:6d:85:dc:28:72:88:b8:
         03:d3:f3:72:31:6d:3a:7b:74:fd:0f:59:e7:0d:16:44:7c:f4:
         96:07:4e:c2:9a:20:86:05:73:e6:6c:7f:a0:a4:4b:fb:4e:6f:
         6d:11:aa:4e:24:ba:79:0b:e9:76:ca:f1:b5:bd:b4:16:1b:93:
         59:14:b7:d7:bc:34:a2:8f:24:8b:2d:12:cc:3d:12:04:0e:d2:
         3d:6c:74:d2:03:8b:66:5c:25:4f:ff:1f:91:9c:fd:9d:47:fb:
         cd:52:2c:98:0c:48:53:36:03:f9:72:77:ee:0c:16:ac:d7:ed:
         9f:f2:5d:7e:a7:93:9c:79:29:42:d5:25:4e:64:4e:b1:e9:51:
         7c:56:a4:f1:1b:d8:71:13:45:a7:8e:8c:d2:c0:9e:3a:2a:05:
         54:fa:ca:88:44:80:91:93:e6:f7:f2:3c:95:7a:fc:ee:c5:b4:
         b0:06:1d:f8:63:b4:26:c0:b1:84:af:cf:3c:c3:13:5b:c5:ba:
         2a:7b:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----