Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer
File:                     C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.cer (raw, json)
Hash identifier:          BNenh1ibnclCXd5WQy/jGufb25NbPXV5LSxd+S+W8u8=
Subject key identifier:   C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A84316919935D5559632B464EE7197332095567
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Mar 2024 13:27:22 +0000
Certificate not after:    Sat 15 Mar 2025 13:32:22 +0000
Subordinate resources:    AS: 264949
                          IP: 168.232.44.0/22
                          IP: 2804:3068::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:31:69:19:93:5d:55:59:63:2b:46:4e:e7:19:73:32:09:55:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 13:27:22 2024 GMT
            Not After : Mar 15 13:32:22 2025 GMT
        Subject: CN=C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:94:a6:06:b7:47:b4:55:51:a2:4c:06:f5:
                    92:40:26:ec:96:ea:40:16:53:e7:b9:18:cf:59:3c:
                    f6:82:43:7e:6a:30:2a:94:9b:4c:42:99:08:ec:9b:
                    12:c2:86:95:44:24:64:89:b9:30:30:a1:da:5e:08:
                    8f:ce:08:e8:8c:fa:6e:b5:d0:fd:86:c5:d1:65:83:
                    42:52:15:15:7d:91:a7:98:b9:68:d1:75:2f:39:37:
                    ea:5e:58:40:92:60:e9:66:5e:4b:05:36:0c:a7:fb:
                    99:04:02:37:38:c0:9d:51:c3:db:90:d4:8e:1f:fe:
                    2e:67:af:41:26:68:4a:0b:ac:d5:06:99:55:f1:e4:
                    33:ac:cf:38:ed:08:9f:b8:7a:7e:14:12:f1:d1:4f:
                    5f:fd:2b:25:6c:e9:33:b1:8b:34:7d:50:1c:88:7e:
                    7b:bc:31:29:94:18:69:ae:0f:da:12:11:5a:4c:38:
                    8d:ad:5e:7b:67:ef:50:fa:5f:a8:27:37:b1:9c:f0:
                    a2:4e:cf:f8:45:5b:09:62:8c:57:60:99:cb:64:61:
                    18:c7:31:4a:d9:0e:34:49:49:b4:75:a7:5b:e1:70:
                    43:61:69:87:37:85:89:b1:81:bc:e8:61:66:e9:1b:
                    a7:83:d7:6c:e7:73:96:b7:e3:5e:3d:65:ff:8f:f3:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:F4:7A:79:26:CF:51:0B:81:6F:1C:82:F5:EB:FD:F7:39:DE:FC:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5FSzqVMMZSKwGDbFyzzCqwnS5K1vqz1RKDB39aHJeUc5/0/C3F47A7926CF510B816F1C82F5EBFDF739DEFC9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.44.0/22
                IPv6:
                  2804:3068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264949

    Signature Algorithm: sha256WithRSAEncryption
         67:db:f7:48:b3:9e:b1:0f:fe:85:9d:6c:d0:af:98:16:c9:0e:
         a1:23:3b:36:0a:0c:b0:ac:79:81:98:3d:4f:55:a9:61:91:b0:
         88:bc:9f:ff:28:a0:35:fd:08:9c:5b:f7:76:f4:f8:b4:1e:d6:
         90:cb:01:7c:89:3a:8b:89:8e:c5:70:a0:2f:ba:ec:24:5e:2a:
         66:f3:0f:d3:f6:84:6f:9e:74:cd:90:3f:17:6e:b1:ac:44:d8:
         b8:78:22:08:4f:8f:b9:bd:0d:7c:20:52:cd:73:c9:49:bc:26:
         2d:a6:4c:15:fc:80:04:72:35:3e:45:ad:29:c2:52:a4:7e:c5:
         03:87:dd:15:07:24:04:d6:97:53:32:30:e3:55:dd:b1:df:94:
         46:26:fa:30:5b:09:bb:e7:7a:bf:b3:23:51:5d:20:07:8c:8c:
         71:68:f0:cc:8f:23:d0:a5:41:6b:96:2f:ea:94:43:8f:2f:be:
         69:cf:29:e8:f1:cb:95:bf:81:25:59:55:fd:01:93:de:3c:91:
         b8:db:b1:9d:1d:c4:1b:e5:74:f2:6a:0a:c1:70:2f:f1:32:18:
         ba:12:05:2b:4a:ef:a1:d8:62:ce:db:5e:e4:a4:ba:f0:8f:9d:
         5d:19:92:7c:eb:5a:bc:d6:0e:23:75:fe:fd:08:28:eb:e5:f5:
         4c:c3:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----