Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer
File:                     3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.cer (raw, json)
Hash identifier:          9k8Ku0QdkTQdhOM78Vkj5NKa7TOcMb4gDdY2DdryvMQ=
Subject key identifier:   3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       193840E7F16DA397C85F5855DCD61132AF935722
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 13:20:28 +0000
Certificate not after:    Wed 23 Oct 2024 13:25:28 +0000
Subordinate resources:    AS: 264987
                          IP: 170.84.12.0/22
                          IP: 181.191.56.0/22
                          IP: 2804:3104::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:38:40:e7:f1:6d:a3:97:c8:5f:58:55:dc:d6:11:32:af:93:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 13:20:28 2023 GMT
            Not After : Oct 23 13:25:28 2024 GMT
        Subject: CN=3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:50:ed:80:aa:24:22:82:49:1a:e4:c4:d8:
                    ab:45:5b:e2:14:aa:2d:df:e5:35:bf:12:54:a0:0a:
                    7d:34:5c:b3:96:dd:ec:02:65:8f:ca:ea:c0:b3:36:
                    6e:e5:9f:f2:24:f2:af:f3:15:75:25:98:8e:e0:4e:
                    fc:fc:2d:d9:54:0f:14:a5:81:ae:8e:8b:9e:0c:88:
                    4f:3a:f7:bf:13:d1:a2:d5:8c:d0:bd:4c:ec:99:62:
                    11:4f:7c:aa:0b:59:9a:ae:22:f0:e5:70:39:19:88:
                    42:81:34:55:63:9a:d7:7f:06:40:79:ad:47:d1:56:
                    47:2e:4c:6f:3b:e8:27:65:c6:b9:d3:bf:a9:c2:c1:
                    45:2b:54:6e:77:bf:1d:4b:eb:36:42:6e:59:a3:cb:
                    e2:d8:34:4a:3f:65:c3:0e:f3:bd:2e:52:aa:35:e5:
                    52:cb:f1:62:7f:ca:c9:c6:5d:92:a9:01:49:9e:82:
                    19:81:43:9f:42:bb:8f:b3:c7:66:0c:03:62:dd:8d:
                    5a:58:5d:78:3a:ee:e0:b7:ee:78:7f:88:87:b7:8f:
                    63:b2:17:e4:2a:f7:69:40:83:68:03:31:e4:d5:60:
                    de:24:79:65:33:8c:2d:47:2a:c0:37:cb:9f:ea:a2:
                    6c:6e:66:9f:86:8a:5a:1c:3c:d6:95:f0:5a:17:4b:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:1C:99:11:5C:83:C5:C3:51:C0:C7:A2:D0:B4:1B:1A:7C:13:E7:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3C1C99115C83C5C351C0C7A2D0B41B1A7C13E741.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.12.0/22
                  181.191.56.0/22
                IPv6:
                  2804:3104::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264987

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:47:69:22:e2:dc:1f:ed:31:cb:11:09:dc:8d:60:4c:22:
         51:a7:32:d5:1a:b7:88:5b:ea:93:6e:d5:bf:10:6a:b7:e2:d6:
         7f:af:2c:8e:fd:ad:91:71:a5:c0:bd:06:c0:8e:58:7f:1c:cd:
         22:83:5e:89:f1:ce:44:fd:a5:75:f6:38:b4:a9:d3:1c:d4:bd:
         73:3b:c5:a9:48:50:a3:b4:1f:f4:49:4c:74:de:30:0a:4f:3b:
         5a:a6:1f:8f:b1:ad:4a:8d:36:cf:81:69:ad:85:e5:eb:e9:a3:
         e6:0a:26:dc:82:9c:af:dc:6d:89:a4:47:f7:62:7f:74:21:15:
         b8:31:06:bd:12:fc:ca:21:39:da:e1:e1:72:79:11:1c:0d:e2:
         3f:2b:43:e0:83:da:c0:16:2a:31:c0:12:63:05:05:c1:e7:ba:
         00:04:2c:fc:47:bd:1d:8b:52:0c:4d:56:52:9c:72:4e:1e:31:
         62:a9:56:df:62:2b:64:3d:0d:86:70:0f:b2:d8:89:d0:3b:44:
         b9:9f:e8:76:12:63:21:e7:87:6b:30:17:c0:88:fa:c3:fa:e0:
         61:52:80:c1:76:4a:37:19:01:d0:ae:bb:4d:3c:54:d0:36:48:
         04:b2:7c:35:66:bf:bd:15:43:ff:a2:6e:9a:4c:15:5a:3b:c5:
         a4:06:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----