Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer
File:                     3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer (raw, json)
Hash identifier:          OOWyP7y/vaJoiv/pMC3XFfkw7K+GqO8vPTro3pRsojQ=
Subject key identifier:   3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7CE45477E887ED088D238F706AC66B5BF0AE4D1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 19:28:31 +0000
Certificate not after:    Tue 23 Jul 2024 19:33:31 +0000
Subordinate resources:    AS: 262475
                          IP: 177.53.176.0/22
                          IP: 2804:4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e4:54:77:e8:87:ed:08:8d:23:8f:70:6a:c6:6b:5b:f0:ae:4d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 19:28:31 2023 GMT
            Not After : Jul 23 19:33:31 2024 GMT
        Subject: CN=3E5507FF839B31FBD17EEC9088B45AE80EC19683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:03:78:51:7b:64:cc:0d:c6:b5:31:04:a7:
                    48:16:15:aa:8b:5c:54:6d:9d:b8:76:34:16:63:d2:
                    44:d3:29:c7:cf:ac:16:eb:65:eb:b4:e2:61:6c:58:
                    dc:90:3f:a6:9e:87:09:a5:1a:45:09:58:5a:7e:fe:
                    a4:bb:58:3f:73:a2:b9:b4:22:11:64:96:81:06:30:
                    fd:b7:09:b9:7e:4d:9e:de:ac:0e:04:9d:e5:19:51:
                    26:da:5d:09:b0:e4:79:bb:4d:f6:e3:50:1c:a9:fe:
                    50:c1:d2:b9:cd:7e:65:ee:2f:de:18:31:f7:96:3e:
                    58:89:9e:9d:4c:46:70:4d:86:83:a0:a2:f9:ea:27:
                    d0:45:ff:80:3f:7e:60:8d:6e:c1:e5:f6:f6:ce:2f:
                    af:af:91:e4:6e:07:96:d8:21:e9:bf:63:50:79:23:
                    71:c6:60:28:49:5b:a8:1e:68:d4:e8:27:21:f7:65:
                    bd:56:55:b3:f4:7e:38:68:86:bf:06:f0:d5:82:ab:
                    15:b0:4d:3c:c7:a6:1e:84:58:14:6f:b0:87:31:ed:
                    a5:0f:7f:d5:20:bd:66:5a:50:83:79:ea:a9:ef:16:
                    f0:f2:62:27:ef:c7:25:5c:e1:dd:33:26:58:c5:86:
                    5b:5f:86:1a:11:13:7b:31:28:46:84:ac:60:5a:3a:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.176.0/22
                IPv6:
                  2804:4e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262475

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:3b:ff:b3:51:31:12:16:3f:2e:3b:fe:95:28:fc:14:0a:
         e7:72:80:69:96:83:32:0a:e1:96:d3:d1:27:01:89:73:76:cd:
         8c:86:9d:96:b8:97:7a:f6:5b:2e:38:13:02:d5:aa:4a:85:f6:
         09:0e:90:00:90:7e:cf:2e:52:2c:b6:f8:33:b7:d5:45:00:05:
         1f:7c:7d:36:65:50:8d:3b:39:ee:7a:51:b3:c3:56:d7:cf:00:
         23:9e:74:67:79:71:08:73:2b:ce:f5:38:47:0f:f9:69:7b:59:
         9a:9d:8e:7f:3e:71:96:9f:04:23:ec:c0:ad:31:b3:2e:91:55:
         9b:ce:a3:b5:67:d1:88:e3:43:e9:d4:21:ef:b5:e6:6e:9d:a8:
         99:64:f2:4e:e9:4c:d9:63:ec:d8:83:55:a6:01:5c:94:75:1b:
         de:5b:9d:89:37:19:1b:59:52:13:02:9e:af:05:57:6c:c9:fd:
         41:21:7c:ee:ac:4b:25:be:d9:97:b7:8f:38:cb:aa:0e:8e:0b:
         63:9a:74:fa:39:07:89:30:51:29:73:e7:c8:56:7e:68:e7:18:
         ca:96:88:34:eb:20:0b:41:02:80:f9:15:f3:b2:8f:87:57:e9:
         00:a9:cf:dd:13:76:c0:16:e2:ae:aa:2b:6c:f1:f9:a8:06:e0:
         52:96:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----