Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer
File:                     C3976C839B0ABBABE40425B1CDA010B8DF73E96B.cer (raw, json)
Hash identifier:          0H+aHYySwpLxym9YpF5v4px5gRkUUqxbE6/kq+diorQ=
Subject key identifier:   C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D1EA2D1CD58D35598887EA692ED604EBF29B219
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 15:05:51 +0000
Certificate not after:    Fri 13 Sep 2024 15:10:51 +0000
Subordinate resources:    AS: 264278
                          IP: 138.121.48.0/22
                          IP: 2804:2564::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1e:a2:d1:cd:58:d3:55:98:88:7e:a6:92:ed:60:4e:bf:29:b2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 15:05:51 2023 GMT
            Not After : Sep 13 15:10:51 2024 GMT
        Subject: CN=C3976C839B0ABBABE40425B1CDA010B8DF73E96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:38:33:64:0c:5c:c6:a6:8e:e9:b9:3c:d3:
                    e4:47:2a:5c:bc:db:51:4b:7a:8d:2d:da:69:6f:2b:
                    09:4b:7f:fd:00:60:f8:89:30:41:f3:88:67:6e:df:
                    23:fe:55:02:b5:b5:99:32:fa:54:90:60:21:cc:fe:
                    b4:8b:92:bc:e3:bb:ab:96:2d:4c:e5:4b:75:f4:e0:
                    04:75:0f:2e:16:e4:99:c0:bb:d6:28:e4:56:10:fc:
                    72:ce:df:28:a1:80:81:69:8c:33:7a:f2:46:76:a3:
                    24:0f:eb:b6:b2:30:d7:7e:10:45:97:8c:c6:f1:06:
                    a0:b1:e3:ec:a1:e4:a2:6b:8c:de:42:96:44:ae:93:
                    d2:10:6d:88:ed:88:1e:97:a6:5a:b8:ea:fc:89:0a:
                    8b:a5:25:27:b5:16:c5:bd:db:e2:35:eb:94:2c:20:
                    e1:e6:45:2b:79:50:be:2c:5c:65:5c:b0:38:d5:0f:
                    6c:10:87:e0:15:cf:b0:39:6a:da:04:bf:5f:42:3e:
                    14:89:38:0f:1c:78:5d:cf:4b:b1:7f:ff:0d:80:88:
                    28:8d:09:45:b2:52:04:07:13:fe:01:d2:68:f3:63:
                    7f:95:63:11:26:b0:48:64:25:73:5e:2b:45:da:23:
                    36:02:de:0e:ae:9e:03:39:dd:3f:bc:e2:e5:f5:8b:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:97:6C:83:9B:0A:BB:AB:E4:04:25:B1:CD:A0:10:B8:DF:73:E9:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/C3976C839B0ABBABE40425B1CDA010B8DF73E96B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22
                IPv6:
                  2804:2564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264278

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:d5:2f:ed:d6:85:ba:8c:ba:6c:d3:4f:47:2f:cd:4a:be:
         11:24:99:00:a3:36:ef:47:b0:0e:25:be:d6:63:1d:b3:7f:dc:
         9c:18:db:16:c4:69:87:cb:09:2f:9d:dd:ab:83:ea:a0:d9:a1:
         0c:f2:46:26:5e:df:0f:65:fc:d8:d4:0a:7d:f1:3a:ae:28:62:
         ee:89:71:d4:8a:39:d5:74:c8:8d:6f:39:cf:89:e7:2a:3c:0b:
         8f:47:52:48:c2:78:f6:53:b6:95:d6:99:94:11:0b:2f:da:9c:
         ac:21:08:ef:d1:86:1e:11:a6:c2:4c:73:6c:06:91:a4:b3:b6:
         03:3d:43:47:f2:cd:37:85:2b:62:af:7e:ae:c6:a5:85:db:5f:
         f2:01:85:3d:1f:0d:17:2e:db:b9:5a:c0:ac:2e:28:d6:e7:a3:
         c5:f8:56:c5:51:19:8a:13:3f:9b:ec:28:33:ab:bd:fe:2f:47:
         72:b2:e2:0b:53:18:4d:b0:bf:62:c8:13:af:98:dd:29:dc:ee:
         e1:0a:bf:23:db:17:92:44:03:04:1a:bf:08:82:db:ac:0f:63:
         5d:3c:42:25:37:98:7c:81:d4:1e:12:84:cc:f7:06:f1:c6:a4:
         8e:73:00:6e:d6:3e:13:ff:7a:75:98:02:74:af:72:3f:9a:36:
         4d:ca:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----