Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer
File:                     C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.cer (raw, json)
Hash identifier:          h+4YdGpG/k2tvCv7UCdaTLjqcS8P709bdzRHdjt+n+o=
Subject key identifier:   C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C1875E74809A6FFE825B4DE886AC79321100C8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 20:43:30 +0000
Certificate not after:    Tue 31 Dec 2024 20:48:30 +0000
Subordinate resources:    AS: 271532
                          IP: 181.224.56.0/22
                          IP: 2804:7d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:18:75:e7:48:09:a6:ff:e8:25:b4:de:88:6a:c7:93:21:10:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 20:43:30 2024 GMT
            Not After : Dec 31 20:48:30 2024 GMT
        Subject: CN=C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1f:c0:fc:13:ef:56:d9:c5:79:07:92:5f:06:
                    fc:a3:70:4a:93:ce:6b:26:82:d6:5b:5b:f1:ef:90:
                    13:c1:77:61:28:9a:50:71:46:82:3c:84:d5:0b:f4:
                    95:4c:41:c0:24:a2:cd:b0:a7:4b:18:3c:f2:15:ee:
                    9f:d0:34:10:1b:40:25:b4:81:86:10:b0:f6:8c:a1:
                    41:71:5d:41:01:ee:29:cf:43:10:14:7e:fa:13:7e:
                    d9:e0:90:58:67:f7:60:0b:11:2b:47:50:ca:b2:7e:
                    9d:1a:8a:bb:63:48:d0:f6:ff:7d:7c:ca:52:64:47:
                    a7:a1:7f:e8:d4:39:17:d7:3d:37:3c:c4:26:44:dd:
                    8f:f3:c8:47:2a:70:44:54:8c:89:5b:36:65:69:9f:
                    6c:b6:3d:77:f7:29:6c:de:1d:d0:f6:90:db:2c:46:
                    04:b4:2c:8a:3f:0d:70:7a:b9:e8:f8:df:0b:56:13:
                    fc:6b:60:00:c1:75:a2:ba:95:3d:59:03:5a:5b:c3:
                    82:52:12:26:d4:99:52:18:63:e3:35:2a:1b:1d:9a:
                    ee:fa:7c:eb:e1:cb:8c:0f:22:b2:8f:b2:88:7e:2f:
                    5b:84:24:f7:dc:09:41:72:16:37:ea:b9:f4:28:f9:
                    3d:14:0c:36:3d:d5:40:26:78:20:6e:d4:af:38:99:
                    26:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:BB:81:5C:27:1D:24:E3:C3:9E:F0:27:3B:E7:8B:0E:1E:7E:69:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/0/C3BB815C271D24E3C39EF0273BE78B0E1E7E69AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.56.0/22
                IPv6:
                  2804:7d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271532

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:ee:dd:70:ae:f2:92:e4:79:8e:25:25:08:57:65:52:67:
         a3:68:cd:e1:ab:d1:1a:71:d6:37:35:4d:e0:a4:d5:06:90:0d:
         2f:7c:2a:a4:d6:6d:9f:a2:13:68:bb:4a:05:df:ed:a0:44:c9:
         2a:86:b4:e0:82:89:4d:9a:b7:d5:79:b8:cb:48:71:af:55:e4:
         16:54:a3:b0:25:48:d3:34:79:81:f3:3b:dd:ea:50:0f:a6:78:
         54:3d:68:eb:9a:a3:12:3d:c4:98:53:1f:ad:9b:71:f0:78:ee:
         71:03:59:4a:1b:7f:12:97:e6:20:4a:b2:52:9a:b7:7e:79:13:
         9e:53:a8:73:e5:d9:a2:2f:b1:c6:64:8d:56:89:bc:0b:2c:cd:
         46:1a:13:1b:80:1b:71:93:ca:bf:3d:7e:ab:37:08:a8:22:6e:
         db:db:36:6a:87:64:20:08:4b:76:84:be:b3:46:a5:77:01:33:
         29:a9:3d:7e:d8:f9:60:c8:43:15:8e:a2:f7:b3:21:7f:11:c7:
         f2:db:0b:2c:7b:fa:3c:dc:13:a6:5d:42:93:ad:97:ce:45:f1:
         fe:9d:44:3f:d5:28:cb:b5:ff:fa:40:e4:6a:73:c2:5c:81:9b:
         ab:bb:f2:15:2c:c6:83:fe:66:ce:e4:9c:27:a5:f0:17:16:bf:
         cf:27:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----