Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
File:                     95207D3AA322298A09BE47FE56BE6B847CBD596E.cer (raw, json)
Hash identifier:          0rruz0wQyqoEqSE6C4TI6CQ5zfJrnUc/Eu6cqMgUVbY=
Subject key identifier:   95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FEF437DC8166D46E845D75D77B8CF1990F46A9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 15:48:31 +0000
Certificate not after:    Tue 04 Mar 2025 15:53:31 +0000
Subordinate resources:    AS: 268120
                          IP: 45.169.56.0/22
                          IP: 2804:584c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ef:43:7d:c8:16:6d:46:e8:45:d7:5d:77:b8:cf:19:90:f4:6a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 15:48:31 2024 GMT
            Not After : Mar  4 15:53:31 2025 GMT
        Subject: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:64:82:e2:51:75:f3:71:3a:3e:d2:22:d6:
                    f6:c3:30:89:78:c4:9f:8c:df:2e:eb:09:a9:f6:ad:
                    37:b5:3f:fb:1a:9b:23:ed:61:30:a6:d4:84:b9:0c:
                    48:eb:40:f2:48:71:26:ab:f5:4b:1e:fa:67:95:04:
                    ca:98:d6:e2:93:3a:0d:1f:ec:dc:a0:11:b5:33:74:
                    38:b6:49:d2:a6:aa:3c:74:e5:53:ce:05:2a:db:d5:
                    97:8c:ee:66:37:39:ec:30:03:ba:dc:50:04:bd:b0:
                    23:e6:20:59:b5:a7:04:f4:2e:11:3e:75:5a:11:97:
                    b7:60:f7:db:66:c6:37:c9:fe:93:ce:b8:7f:e0:2f:
                    b6:68:1a:19:10:5c:38:3a:ba:2d:a7:4e:d2:1b:f3:
                    42:d1:7e:3e:f9:4e:8b:76:02:26:8f:42:4e:f2:b7:
                    5f:da:23:b7:2e:b3:87:39:3e:07:3b:92:88:81:96:
                    ba:8b:bb:f3:01:5f:e3:b2:1c:a6:2e:8b:56:3e:bc:
                    79:6b:2d:c1:4b:06:4b:57:f8:ba:07:53:d4:60:f4:
                    46:cc:bf:70:f4:0d:de:6d:fa:a8:a4:79:e6:91:d8:
                    75:5c:44:48:c2:5c:6d:72:f5:5b:60:fd:ea:42:7a:
                    c1:62:fe:7d:6b:2c:10:40:b5:9e:8a:d9:95:e6:f9:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.56.0/22
                IPv6:
                  2804:584c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268120

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:3b:1e:e2:ff:31:de:6e:cf:5c:30:e4:22:ee:99:33:3e:
         e5:da:9d:68:af:f7:60:00:e8:60:bb:9f:dc:c4:b4:31:53:7a:
         f4:19:40:95:1b:4c:68:4b:53:15:18:16:96:87:ca:95:02:73:
         5c:92:69:55:6e:27:01:26:9f:0d:f2:a7:fc:11:1c:76:1f:67:
         ee:32:67:1e:33:a2:15:3b:72:58:dd:13:25:83:0d:99:58:20:
         57:45:9e:ee:a1:b1:d4:6f:a9:11:97:55:90:33:87:23:d3:06:
         71:e7:a6:2c:97:39:44:e2:2b:d3:23:87:1f:b6:ff:b0:85:38:
         ba:0b:9d:25:84:0f:68:e2:c0:87:f7:e7:6e:94:83:99:8f:29:
         fe:73:95:b6:46:5b:19:09:d1:91:8d:85:99:cb:cd:3e:48:e5:
         aa:27:11:f8:d4:b6:19:99:9b:02:29:dd:2b:af:79:3c:d3:2a:
         f6:ef:27:1e:5c:96:74:7f:b6:2e:26:20:03:a4:70:63:c1:00:
         32:94:90:a6:0c:b3:7f:d4:b2:dd:d4:96:43:73:12:55:e5:4d:
         d9:84:ae:bd:dc:16:44:fa:e3:7a:c4:e4:41:74:61:93:e8:9a:
         54:2e:5e:95:e3:0c:5e:68:26:11:4e:a9:70:6c:5d:eb:01:2d:
         f5:93:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----