Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
File:                     95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer (raw, json)
Hash identifier:          Xf/zof1SQRlcEAtrqAfDNI4RQysP6XOGrzaR5RtPRwg=
Subject key identifier:   95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       268CB31A92FD2126FC20A17A45EEF7EE6E1BCA20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 Jan 2024 13:27:52 +0000
Certificate not after:    Mon 06 Jan 2025 13:32:52 +0000
Subordinate resources:    AS: 269261
                          IP: 45.182.16.0/22
                          IP: 2804:61dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:b3:1a:92:fd:21:26:fc:20:a1:7a:45:ee:f7:ee:6e:1b:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  8 13:27:52 2024 GMT
            Not After : Jan  6 13:32:52 2025 GMT
        Subject: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:9f:c3:c1:ad:33:18:23:18:0d:00:b5:ca:
                    8b:16:92:e4:73:90:94:14:84:75:5c:ed:e4:82:84:
                    78:91:b6:6d:fa:bd:ca:28:ad:b4:5a:2f:58:ff:c5:
                    6f:88:88:20:24:9c:7e:62:f9:d7:6e:79:43:d8:8a:
                    31:8c:61:3a:17:9c:99:67:28:41:cc:9b:1b:ed:30:
                    12:cb:07:56:00:c1:c5:70:d6:35:c1:7a:94:ca:97:
                    bf:ca:5c:f2:f5:00:46:5b:91:d5:45:14:a0:98:c1:
                    bd:37:37:39:fe:45:99:44:c3:e7:16:dc:c4:e1:cd:
                    00:02:8b:2d:10:96:90:db:45:2d:07:a4:eb:13:09:
                    fc:da:d6:ce:d9:22:ad:59:a5:7a:d7:51:de:7f:5e:
                    85:f8:11:f7:b2:25:3a:db:d9:49:f9:46:27:18:00:
                    97:4a:f5:54:10:82:56:3b:ed:53:a8:34:47:02:b3:
                    2d:cf:fd:bb:f9:48:1b:af:7c:c3:b3:22:7e:40:1e:
                    b3:52:2a:49:7f:55:15:54:95:d0:db:47:bc:14:09:
                    9a:8d:1d:25:c1:8b:4f:d2:fa:ab:dd:64:d6:55:3c:
                    ce:85:6e:27:9a:87:67:c1:77:3c:ae:ee:c2:b9:5a:
                    a6:ce:21:de:41:2d:31:83:bd:00:b9:24:c9:16:c9:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22
                IPv6:
                  2804:61dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269261

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:17:c4:73:da:5d:bc:9f:c9:46:24:cc:2b:e2:7a:7e:d9:
         dd:21:4a:a1:df:b2:3c:b9:09:0a:16:c5:73:c7:94:e5:32:42:
         38:41:a2:57:66:b5:cd:13:1a:01:0a:d5:9c:24:3b:46:cd:4a:
         c8:3c:2c:b0:01:2e:99:e6:9a:f4:f7:44:7e:54:44:02:7f:0d:
         ed:63:60:25:2e:15:4d:88:ab:dd:e4:96:98:87:03:50:5b:4b:
         cb:c4:57:ac:21:cc:51:e5:d8:76:a6:ee:7a:fe:bd:7c:a8:23:
         39:ce:e8:00:b2:cf:18:31:23:9e:c2:85:d0:3b:56:af:f3:f1:
         36:28:50:69:61:61:6c:3c:8d:95:06:3d:b5:37:95:22:22:0e:
         d6:dc:87:80:60:16:23:70:7a:90:c2:43:a1:77:cd:ad:d2:ac:
         ca:37:6e:98:d3:f0:2c:ae:8f:f3:ae:46:b4:6f:9e:f6:9c:28:
         31:61:c6:fd:3a:67:2e:f5:d9:58:f3:68:77:30:ca:35:27:41:
         c9:d5:2a:81:9c:47:86:08:4c:dc:7f:93:65:5d:ce:ad:92:2c:
         bd:64:33:64:d7:ee:f3:73:e1:d4:72:c7:5f:7e:24:ea:9e:85:
         07:ae:e0:fd:f0:79:4d:cf:4c:b6:79:e2:80:b8:f9:1e:c6:24:
         30:27:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----