Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3D86E1A0629F582546BA3381DAD3EB4578E3E62C.cer
File:                     3D86E1A0629F582546BA3381DAD3EB4578E3E62C.cer (raw, json)
Hash identifier:          PtesMWiksFkJp3LKM5rIdpEm4QOUCwQ9TXFqJ6R+68Q=
Subject key identifier:   3D:86:E1:A0:62:9F:58:25:46:BA:33:81:DA:D3:EB:45:78:E3:E6:2C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53B6E860A70D6E5B4A8BE5BB707C40AB9F842555
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/1/3D86E1A0629F582546BA3381DAD3EB4578E3E62C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:31:44 +0000
Certificate not after:    Thu 03 Apr 2025 14:36:44 +0000
Subordinate resources:    AS: 271054
                          IP: 177.74.168.0/22
                          IP: 2804:758c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:e8:60:a7:0d:6e:5b:4a:8b:e5:bb:70:7c:40:ab:9f:84:25:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 14:31:44 2024 GMT
            Not After : Apr  3 14:36:44 2025 GMT
        Subject: CN=3D86E1A0629F582546BA3381DAD3EB4578E3E62C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:55:03:49:14:76:6a:22:e1:3e:ea:ff:f1:
                    e1:d9:99:b0:55:a8:ef:e1:c5:67:4f:cf:ef:4e:89:
                    64:12:29:81:ac:b6:95:fc:a6:2f:c0:8a:2b:2d:2d:
                    ef:83:d2:8a:74:b0:0f:2b:17:41:cb:9e:3e:81:26:
                    2c:1d:5c:92:62:78:0b:d6:d9:25:2c:7c:10:a8:10:
                    a5:75:2b:c1:2d:1c:ab:77:b1:8b:29:d7:36:7f:da:
                    1c:49:33:11:6d:9f:e6:19:74:0d:b4:a8:4a:99:d6:
                    a4:cf:cc:4a:ff:76:ef:93:67:63:5e:41:cb:91:06:
                    0d:8c:86:9b:f0:80:bc:72:d3:0f:7f:b5:27:45:b7:
                    6b:3f:40:9c:82:c1:93:17:37:3d:8c:1e:ba:3d:62:
                    f5:9a:36:92:1c:59:56:ba:b2:3a:41:5b:4f:9b:0f:
                    c1:51:27:dc:1d:4f:df:1a:94:3a:6d:cb:73:3e:b2:
                    90:a6:ae:dc:1f:05:3d:81:f9:d5:55:56:c2:28:cc:
                    1f:7b:e3:6a:c5:b5:49:14:0f:81:9b:71:30:7c:d7:
                    c2:a6:be:8c:69:1b:35:68:ae:e3:ea:2c:49:7a:54:
                    60:00:9f:1f:c9:23:07:c8:75:29:a6:23:77:78:5c:
                    08:35:33:19:0c:ed:07:d4:4c:3a:2c:51:92:e0:fd:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:86:E1:A0:62:9F:58:25:46:BA:33:81:DA:D3:EB:45:78:E3:E6:2C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fo6UnoHY7iaoNvTcLWB7Rb79LTGiooJ8KsDeLNp3wEaH/1/3D86E1A0629F582546BA3381DAD3EB4578E3E62C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.168.0/22
                IPv6:
                  2804:758c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271054

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:19:65:39:86:23:cc:c6:55:fa:cd:26:8e:90:3d:d3:4d:
         dd:26:52:d5:22:b3:54:0c:74:a2:f5:64:c2:49:ef:22:57:22:
         3b:28:d9:d4:8c:46:e1:6a:44:ca:c6:67:f8:f4:a2:53:ae:33:
         27:61:72:78:fe:f7:13:82:dd:c8:a1:80:24:b4:fc:fd:6c:c0:
         0e:08:0e:f1:c8:fe:35:ba:35:c3:f3:5d:38:85:6f:0b:43:b5:
         17:87:c8:d6:f2:59:9b:79:aa:5c:67:ba:8b:c5:96:5d:34:0d:
         d9:47:5e:eb:9d:e0:49:61:99:f0:3e:e7:88:f5:3c:7f:f9:fe:
         53:a8:d7:12:d2:2d:33:54:7b:5c:37:b4:ec:52:2b:88:e5:5d:
         8e:c8:a6:d9:59:f8:c2:d0:9b:d5:f8:a2:cd:27:f2:88:ae:ce:
         87:1b:fe:6f:e6:bb:8a:d3:df:c2:8e:12:d5:7e:d9:46:fa:ea:
         52:67:f9:74:86:96:28:6f:f3:44:b8:13:b6:e2:a1:ec:15:45:
         83:31:60:10:d5:d7:c2:38:83:65:60:2a:2f:7b:ed:ac:86:34:
         c5:f1:64:f2:56:e6:e0:53:6f:c3:c7:80:38:a8:15:f8:bf:cd:
         1d:4c:7a:e7:a6:75:48:81:b1:1d:ba:18:7e:eb:8e:6f:aa:1a:
         f2:7c:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----