Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3F18422C71C9046C3B4C766867F0CC989883236F.cer
File:                     3F18422C71C9046C3B4C766867F0CC989883236F.cer (raw, json)
Hash identifier:          2lCrODu7qL/zZ1XXfxj644jva6IS1ZL8hDR+CHPNShI=
Subject key identifier:   3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21053E035D7E276F113720F32DA43C3F86ADBBF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Jun 2023 11:09:09 +0000
Certificate not after:    Mon 17 Jun 2024 11:14:09 +0000
Subordinate resources:    AS: 266022
                          IP: 170.245.124.0/22
                          IP: 2804:3944::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:3e:03:5d:7e:27:6f:11:37:20:f3:2d:a4:3c:3f:86:ad:bb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 19 11:09:09 2023 GMT
            Not After : Jun 17 11:14:09 2024 GMT
        Subject: CN=3F18422C71C9046C3B4C766867F0CC989883236F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:4f:95:f2:35:1a:d1:3b:64:9f:b1:5d:8d:
                    da:c1:4e:e0:d3:39:c2:1a:25:53:bb:e3:2d:2b:1d:
                    40:76:b3:fa:07:51:af:a3:6f:84:5a:eb:32:68:3c:
                    c0:bc:26:02:90:95:96:fe:0b:d4:6f:da:53:2b:37:
                    cc:3f:55:bb:4d:74:06:ac:e0:a0:f9:d1:58:bc:49:
                    d1:27:03:cd:f4:89:7d:8c:ae:20:10:31:c0:13:e2:
                    13:5f:0b:7f:1a:e8:2a:b9:4e:01:bf:c8:1c:10:17:
                    35:87:67:51:e6:c6:a1:d4:19:ad:06:68:11:2c:81:
                    f6:87:fa:3c:85:75:28:dc:6a:10:a8:78:ac:8d:6c:
                    74:27:56:a2:de:d0:d4:cb:c2:dc:49:ea:98:b4:4c:
                    2f:4e:99:ea:15:9b:16:63:79:a1:96:ca:f7:58:f5:
                    83:a4:a3:be:91:57:5a:81:4e:ad:28:96:00:a0:be:
                    f1:6b:25:dc:4a:4c:8f:b4:79:1a:3b:2c:8a:18:30:
                    8e:7b:5d:6b:75:eb:f5:aa:6b:2b:12:3d:2b:63:43:
                    2a:f2:fd:0c:24:b5:33:53:38:f6:94:e7:b8:77:26:
                    18:9f:54:0a:b1:39:82:fe:77:2a:06:00:09:61:14:
                    c7:ba:bf:1b:db:6a:e8:39:85:ce:cc:53:e6:58:2b:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:18:42:2C:71:C9:04:6C:3B:4C:76:68:67:F0:CC:98:98:83:23:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3F18422C71C9046C3B4C766867F0CC989883236F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22
                IPv6:
                  2804:3944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266022

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:2f:80:6e:fc:4a:e8:b2:74:09:93:24:83:16:27:79:0c:
         8f:73:d3:1c:21:de:1e:1b:c7:d8:12:26:13:ea:a8:fb:aa:63:
         38:77:a5:72:bf:24:97:19:78:15:bf:b5:17:8a:1a:e8:6a:5a:
         78:a6:65:6f:6d:dd:e3:46:9c:26:17:e4:3d:8d:7c:93:d6:c1:
         b6:f6:81:42:10:48:cd:2d:7b:65:6b:d6:fb:38:58:05:92:e1:
         dd:fb:9e:99:0c:d0:9a:73:e8:6a:f7:af:1a:c6:1c:e6:82:95:
         c3:73:b9:39:94:20:a0:e8:0e:00:ee:7a:f2:8c:43:ad:96:8a:
         eb:17:1a:27:20:03:80:2f:21:ae:c3:a4:91:ff:4b:4d:41:64:
         7b:7b:0f:c0:b3:a2:47:60:1a:7c:d5:5e:3f:2d:dd:b9:01:fa:
         13:07:12:75:46:81:33:7d:8a:38:42:f7:8e:e9:15:7c:5e:96:
         9b:e3:4f:e9:ba:36:3b:1d:87:e9:e6:a9:0f:68:38:d4:54:05:
         3e:40:9e:df:15:6d:f2:b5:72:be:72:4f:5c:59:15:2b:86:c2:
         90:02:d4:cb:7d:37:0f:0d:9f:99:41:e8:4a:bc:f2:f9:b4:59:
         51:68:cd:5b:74:2f:85:8b:60:d7:da:94:c6:9f:c5:9f:90:8c:
         43:79:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----