Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer
File:                     3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.cer (raw, json)
Hash identifier:          JC82T+ZNuYbljQcKwUIor7NHCr9qx7hpGfEHvBxLNS0=
Subject key identifier:   3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3AF41CE37202ECD66FACA3A71096F5187D816F40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 21:20:26 +0000
Certificate not after:    Sun 08 Sep 2024 21:25:26 +0000
Subordinate resources:    AS: 265315
                          IP: 168.121.176.0/22
                          IP: 2804:2df8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f4:1c:e3:72:02:ec:d6:6f:ac:a3:a7:10:96:f5:18:7d:81:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 10 21:20:26 2023 GMT
            Not After : Sep  8 21:25:26 2024 GMT
        Subject: CN=3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:63:77:38:ee:b0:c8:ed:29:c5:a4:2a:e6:
                    e6:f2:47:4f:18:6b:e3:0f:76:a7:7f:f4:03:a6:ad:
                    db:04:44:2a:c3:fd:59:29:09:2b:63:ed:67:66:5e:
                    0f:66:71:6b:ca:6b:00:7f:c2:9b:ee:b9:f3:09:36:
                    ff:98:ae:f7:ad:44:b3:55:e6:9d:3a:18:a9:c4:a7:
                    fe:38:3e:3b:bf:db:1d:57:dc:55:21:b0:31:a9:2e:
                    f2:dd:80:dd:bd:8f:f2:8b:fb:5c:0b:54:cd:90:18:
                    8e:d6:51:83:a7:f8:51:a1:05:c4:28:99:d6:ae:57:
                    25:13:9e:1d:25:86:61:f6:c1:f1:b4:cc:2b:da:7b:
                    64:17:47:29:52:0f:96:c0:64:76:20:93:c5:7c:0e:
                    48:09:72:0a:1d:74:19:96:9e:d9:39:b0:53:2d:1e:
                    f7:69:f0:45:e8:25:e2:bc:68:11:d8:64:58:0e:9c:
                    32:fb:4d:9f:8a:ff:99:d0:8c:c0:ea:40:0a:e7:76:
                    9f:7b:80:e2:76:72:cf:f1:21:3d:88:fb:b7:a2:10:
                    ac:a3:4c:32:ea:f6:de:8a:48:e0:e3:79:72:57:d9:
                    26:6c:1c:d6:60:6f:be:b9:70:05:fd:d4:ca:2a:50:
                    39:9e:43:7a:c4:61:0b:79:77:95:6d:3a:a0:7d:14:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:E7:46:39:A5:48:CC:C5:CC:56:F4:4A:A6:C4:FF:EE:CC:E7:3F:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/3BE74639A548CCC5CC56F44AA6C4FFEECCE73F0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.176.0/22
                IPv6:
                  2804:2df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265315

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:7f:ae:65:be:a7:a1:47:3f:e1:0f:43:d8:d1:1f:32:fa:
         ef:ce:20:3a:aa:65:09:f7:16:55:a8:b4:45:8a:68:77:47:38:
         84:ee:f3:93:c5:f0:9d:60:84:ef:a7:2a:a4:77:c4:0d:6b:a5:
         db:a2:0d:45:16:af:09:9b:0d:63:b6:bf:3e:82:fb:d9:e2:03:
         ee:04:58:0b:e1:b2:67:58:c9:dc:5d:da:5b:34:0a:18:14:54:
         52:c4:b5:da:65:c0:f1:f4:cb:3c:6a:1e:dd:99:22:29:48:6e:
         5f:92:4c:19:1f:af:26:18:dd:11:3a:11:41:1f:79:33:72:a7:
         f6:45:98:e3:03:78:30:49:e2:07:4e:6c:d4:07:06:a5:0a:a3:
         2e:bd:20:31:ce:82:9f:42:6c:ed:75:7c:9b:57:a3:ba:51:9f:
         17:27:38:1b:df:0c:00:b7:59:bc:9c:b2:20:c3:74:ec:79:c7:
         4c:ae:fd:f0:69:ce:40:35:0f:37:40:d1:85:8f:90:f3:ef:18:
         59:ee:15:73:ea:e3:d8:1f:31:f0:e5:61:ec:a5:01:df:1f:eb:
         66:cb:07:5d:b7:4c:ba:1e:c4:0b:9d:2d:f6:be:ab:99:98:31:
         39:50:71:b0:b7:8b:7d:89:63:cf:b6:10:ed:2e:af:e8:f8:92:
         d6:08:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----