Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3C75C88018A78E6BB87AB56E3A597967AA6CD618.cer
File:                     3C75C88018A78E6BB87AB56E3A597967AA6CD618.cer (raw, json)
Hash identifier:          I/bplz0/75+PRtx3zvYngU0XaP9V6vAd9GbtkEsAFLQ=
Subject key identifier:   3C:75:C8:80:18:A7:8E:6B:B8:7A:B5:6E:3A:59:79:67:AA:6C:D6:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       348F4EADC3086CFEBFC06CFEE73C9854A4A14F91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3C75C88018A78E6BB87AB56E3A597967AA6CD618.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:37:29 +0000
Certificate not after:    Mon 17 Mar 2025 20:42:29 +0000
Subordinate resources:    AS: 28173
                          IP: 177.137.224.0/20
                          IP: 189.84.208.0/20
                          IP: 2804:10a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8f:4e:ad:c3:08:6c:fe:bf:c0:6c:fe:e7:3c:98:54:a4:a1:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:37:29 2024 GMT
            Not After : Mar 17 20:42:29 2025 GMT
        Subject: CN=3C75C88018A78E6BB87AB56E3A597967AA6CD618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:92:35:4c:8d:79:29:d4:20:ab:ba:f9:b2:
                    37:fe:42:f5:d9:f1:3b:e6:91:f9:1d:b3:dd:aa:aa:
                    19:e0:0f:0d:dd:0f:27:ae:8a:13:58:30:c6:4e:7a:
                    3f:b5:47:b9:9a:d2:8d:64:b1:79:52:6a:89:e3:4e:
                    c3:95:a4:94:aa:a7:87:d4:3a:94:b9:c2:8e:14:42:
                    7d:30:7d:0d:fd:f3:6a:54:0e:33:bd:e8:9d:ee:b6:
                    12:db:13:e0:30:0b:54:43:c0:24:47:d7:0d:d6:4d:
                    72:9a:77:31:65:1e:f8:b5:0e:70:78:a0:3d:cf:be:
                    15:ab:5a:8d:ed:c7:91:cf:59:52:e8:e5:6e:39:ea:
                    5a:e4:54:a6:2c:32:19:42:0c:a4:d5:3d:55:d4:fc:
                    a4:ff:ea:fa:02:ab:c7:08:a5:2f:6b:45:fc:93:8d:
                    90:22:24:2f:d0:aa:95:92:2f:1f:2a:09:ec:9a:59:
                    9d:b0:20:49:ea:29:f6:20:a4:86:21:99:68:8f:ae:
                    80:d6:fb:46:98:7b:30:80:5a:cd:22:e5:a3:09:ac:
                    73:79:6e:a5:82:ec:bb:57:99:3b:3f:3e:37:3d:c1:
                    c0:72:2a:af:53:29:48:73:95:8c:de:63:e2:c3:2f:
                    10:c2:f9:d4:a2:d1:46:9c:c8:b9:e9:c0:06:3f:57:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:75:C8:80:18:A7:8E:6B:B8:7A:B5:6E:3A:59:79:67:AA:6C:D6:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3C75C88018A78E6BB87AB56E3A597967AA6CD618.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.224.0/20
                  189.84.208.0/20
                IPv6:
                  2804:10a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28173

    Signature Algorithm: sha256WithRSAEncryption
         98:3a:40:66:5e:e2:a2:f2:54:98:0e:6f:85:bf:cf:2a:31:f1:
         3e:5a:27:13:7d:3b:ea:56:3a:73:e5:74:26:31:88:6b:29:1c:
         34:92:9a:12:e0:e4:32:f1:3d:94:48:13:64:84:07:08:ce:9f:
         2a:fb:e1:70:cd:29:32:42:7d:8d:98:b3:fd:cc:00:cb:99:c8:
         f5:d6:3f:ba:c5:12:ad:90:b1:66:ba:96:d3:3d:16:27:f6:82:
         21:2d:74:55:e9:0a:f4:7b:41:d2:9b:a9:b3:44:0a:e7:c4:dc:
         ca:8d:a8:0d:9b:e7:0e:47:34:19:7e:f4:e8:78:ac:48:17:b6:
         95:4b:0c:7c:0f:c5:51:0d:92:7f:ca:ea:ea:02:3e:b9:43:95:
         33:aa:99:0e:ac:01:60:b2:7c:39:14:e1:a9:58:7a:54:3d:aa:
         d6:4d:94:d6:e6:ac:a8:6d:e8:d4:8a:54:f5:70:0e:57:73:a9:
         e4:81:4d:71:8f:cd:51:fa:d4:71:9c:89:42:f5:60:40:d6:03:
         78:22:ce:27:7e:f0:98:8d:d9:54:cf:51:7f:74:f6:10:3b:ac:
         24:21:40:f3:c8:cb:c6:02:13:de:6a:26:4b:90:e3:d0:68:25:
         e1:9e:71:57:a2:54:e0:1d:09:dd:e1:f9:af:18:47:06:f8:e4:
         05:47:73:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----