Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer
File:                     3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.cer (raw, json)
Hash identifier:          eE9zEZNxp56I2a22KWjv5dhewMmAEqPf+4WZNAp0chM=
Subject key identifier:   3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BF06F5CB9A035FD7EBCDA5A92908F813A02B419
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 15:55:10 +0000
Certificate not after:    Fri 13 Dec 2024 16:00:10 +0000
Subordinate resources:    AS: 266623
                          IP: 128.201.76.0/22
                          IP: 2804:3ed4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f0:6f:5c:b9:a0:35:fd:7e:bc:da:5a:92:90:8f:81:3a:02:b4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 15:55:10 2023 GMT
            Not After : Dec 13 16:00:10 2024 GMT
        Subject: CN=3D4374364DEF0A3AD31C3F4544E415B9EC6C7083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:8b:58:98:25:a6:25:f4:f8:ee:66:66:03:
                    59:a6:81:c0:99:5e:b5:a1:db:e0:24:e3:1b:ef:28:
                    5e:51:f9:fe:55:4b:a5:af:69:1e:6d:c0:28:0c:27:
                    c1:41:5f:6a:2e:91:0a:f1:0c:3f:3d:0c:71:68:7a:
                    2b:de:05:d6:23:5c:bb:d2:af:33:62:fe:f1:a6:97:
                    90:2d:ff:e0:02:a1:96:e7:06:ce:3e:2a:e3:a1:29:
                    07:a4:b5:e5:6d:3a:87:a3:a5:a4:03:44:4c:78:12:
                    10:6e:af:97:2b:d8:5f:da:0c:18:1e:f8:d3:b4:3d:
                    f4:1f:e0:cd:63:47:17:6c:db:43:e5:83:2d:37:a5:
                    d4:22:db:b8:a9:f6:1f:a1:1d:5f:fa:32:be:fd:f3:
                    98:ba:a9:bc:2b:6a:9d:c8:3b:db:64:d4:08:a9:72:
                    a3:0d:10:e5:33:6f:37:77:76:99:42:eb:3a:98:5e:
                    77:2a:cb:1f:07:f6:3d:af:ec:c2:2e:49:72:d5:4c:
                    88:13:fe:e5:cb:3e:d0:09:9d:e5:00:b5:b4:54:97:
                    f9:4e:81:a4:4c:f1:c1:64:10:76:c1:4c:78:24:54:
                    6f:93:f7:5d:d1:80:07:b0:b1:36:7b:1b:29:7e:54:
                    66:2d:08:e0:d7:c7:a8:7e:44:c6:80:26:4d:90:d3:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:43:74:36:4D:EF:0A:3A:D3:1C:3F:45:44:E4:15:B9:EC:6C:70:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/0/3D4374364DEF0A3AD31C3F4544E415B9EC6C7083.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.76.0/22
                IPv6:
                  2804:3ed4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266623

    Signature Algorithm: sha256WithRSAEncryption
         21:13:68:ca:a0:86:d8:e8:fb:ab:bd:c9:de:f2:5b:9d:61:df:
         c9:35:78:22:15:d6:d9:68:26:c2:c1:be:3d:2e:92:3c:3e:ea:
         78:44:1f:64:65:83:c5:51:fe:cf:de:36:7c:1c:54:2e:9e:2c:
         da:ab:b6:11:50:30:c5:de:6b:a0:ef:4a:88:4f:a4:f4:b4:bf:
         81:00:5c:83:fa:01:39:f8:e6:54:86:a1:ce:cf:4d:ee:71:db:
         84:7b:7e:e5:58:33:c2:95:1a:d8:cc:3d:ac:71:67:7d:6c:70:
         ac:76:53:02:4c:fc:5b:14:b2:3a:ce:fd:53:12:58:5a:79:df:
         80:c3:d0:b9:4f:3f:18:7d:c9:c3:43:54:96:80:6f:9c:d3:5b:
         9a:b2:52:36:1b:8c:e2:99:c9:73:9c:9c:08:fb:d2:de:8d:4f:
         5c:1f:f2:6e:13:e6:5e:32:ac:65:6f:2d:d3:16:98:79:82:38:
         65:fd:81:e6:a1:4d:8c:15:cd:f3:b7:e0:3d:57:24:82:a5:e7:
         9b:e3:03:83:f2:bc:94:d4:61:78:13:54:ca:43:5d:d6:ac:a6:
         83:9b:0e:47:3f:cc:7e:f6:54:d3:50:10:3b:f8:76:23:9c:e9:
         31:18:75:4f:c6:ce:fe:00:62:b5:42:9a:3e:33:2d:ac:5d:bb:
         bb:41:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----