Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer
File:                     3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.cer (raw, json)
Hash identifier:          UZz8A2MySk1HwS4k4rXmSIgwNy5nynDBfv4aMGJjKDU=
Subject key identifier:   3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20C5AB02F9AA8A7F223ABAFA4FF78AA4FE280782
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 13:55:05 +0000
Certificate not after:    Fri 02 Aug 2024 14:00:05 +0000
Subordinate resources:    AS: 266357
                          IP: 170.239.208.0/22
                          IP: 2804:3694::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:ab:02:f9:aa:8a:7f:22:3a:ba:fa:4f:f7:8a:a4:fe:28:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 13:55:05 2023 GMT
            Not After : Aug  2 14:00:05 2024 GMT
        Subject: CN=3DBEB64A443F0D98C05394A8D49BA04EF5C0D152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:3c:78:c5:ca:f4:b2:1f:2e:aa:c8:f5:e5:
                    2e:c3:5f:8a:41:ed:32:dd:8a:29:88:50:a0:38:d2:
                    a6:50:60:3e:cd:e7:2d:91:5e:1c:e5:23:72:fb:8f:
                    50:c8:e3:b5:10:fb:65:8f:af:f6:23:d6:e1:44:fe:
                    9e:bf:97:1b:7f:af:70:f9:4c:65:c7:ca:64:64:a3:
                    96:6a:86:79:95:ab:98:1d:46:bd:84:43:b9:5a:18:
                    48:04:f5:0e:6b:6d:3a:c8:e4:62:e9:ff:bc:ab:5c:
                    07:54:25:a9:38:1c:1f:71:d7:7c:6b:76:a2:0a:ee:
                    fc:e6:2e:c5:65:0d:5c:9f:5c:ed:b8:e7:fd:1c:5b:
                    37:11:8f:3c:00:a1:51:0b:9b:99:06:d3:2c:a1:a5:
                    7b:70:cf:c0:02:9e:a6:52:df:30:21:c0:59:6e:fe:
                    51:c2:fe:ed:23:55:1c:3c:bb:24:70:14:70:a9:41:
                    2b:67:4e:bb:d4:c4:46:b4:71:3e:10:de:cf:d2:c9:
                    a6:0f:0b:4a:bd:d0:45:a2:4e:e0:7b:28:5a:72:c0:
                    c1:36:b1:30:74:24:60:35:94:d9:99:65:d7:7b:0d:
                    79:f1:e4:c8:8e:29:13:c0:79:36:78:3a:13:ff:b1:
                    86:b9:99:7a:52:bd:82:0a:c8:7e:cd:ae:46:d2:78:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:BE:B6:4A:44:3F:0D:98:C0:53:94:A8:D4:9B:A0:4E:F5:C0:D1:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/3DBEB64A443F0D98C05394A8D49BA04EF5C0D152.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.208.0/22
                IPv6:
                  2804:3694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266357

    Signature Algorithm: sha256WithRSAEncryption
         83:50:8f:d3:e3:18:09:f9:55:45:5d:c4:95:b3:0f:a7:8b:f8:
         7c:b3:81:7e:2c:b1:5a:18:dd:27:b8:d4:dd:81:9e:77:35:a9:
         df:e4:58:87:ec:4f:8d:91:5f:75:13:60:72:bb:c5:20:23:7c:
         ed:f6:63:51:b5:2e:00:ca:21:55:a2:03:7b:7d:3d:fe:48:32:
         13:83:bf:6b:cb:f8:ad:cf:98:56:2e:84:b3:e4:63:2c:3a:43:
         4e:86:7d:26:2e:d4:5b:d5:60:aa:d6:2e:8b:5b:97:35:ac:90:
         ce:00:88:12:f3:be:a5:b3:16:b3:97:ee:e6:ec:7f:76:18:02:
         c8:98:d5:85:d8:92:73:0a:15:2a:c4:0c:f1:bd:11:64:e8:3c:
         56:ce:7b:3b:c8:e6:3a:e3:36:5c:f6:1c:21:48:73:ce:e6:a2:
         3a:7d:9e:41:d8:c6:36:21:a9:00:db:93:8d:f6:e7:03:36:7b:
         59:ad:c1:0c:f2:2e:9f:1f:3b:4c:e5:63:3a:92:ae:55:6f:34:
         35:67:95:e0:83:54:74:8d:41:aa:63:c5:c8:7b:b1:5f:7e:7d:
         9d:c0:7e:64:af:21:70:9b:a4:d9:b5:24:95:54:e5:d3:f5:17:
         53:e6:86:17:a3:11:5f:a6:1a:9f:0a:cb:24:97:63:88:28:30:
         82:45:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----