Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B195F4ADD02BDED021654311B7092DD013B042A5.cer
File:                     B195F4ADD02BDED021654311B7092DD013B042A5.cer (raw, json)
Hash identifier:          83wfEizLBYdYoWlBl0a69papfP6855UqcGGklCNmNPo=
Subject key identifier:   B1:95:F4:AD:D0:2B:DE:D0:21:65:43:11:B7:09:2D:D0:13:B0:42:A5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       210548205891887DB85DE6321F8E7682539187F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/B195F4ADD02BDED021654311B7092DD013B042A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 15:07:04 +0000
Certificate not after:    Tue 25 Jun 2024 15:12:04 +0000
Subordinate resources:    AS: 266534
                          IP: 160.238.144.0/22
                          IP: 2804:3d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:48:20:58:91:88:7d:b8:5d:e6:32:1f:8e:76:82:53:91:87:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 27 15:07:04 2023 GMT
            Not After : Jun 25 15:12:04 2024 GMT
        Subject: CN=B195F4ADD02BDED021654311B7092DD013B042A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:1e:91:c8:db:2f:2c:c0:94:2e:45:87:bc:
                    af:81:05:f4:19:09:01:c7:a3:1e:89:70:5b:88:2e:
                    59:bd:90:44:4d:84:30:52:c6:e6:08:2e:fd:b1:4b:
                    7e:ca:b8:00:d6:ac:ae:c1:90:ab:d3:3b:21:6a:d1:
                    d1:d0:ca:6a:b8:30:1b:35:ff:a5:56:b1:d4:cb:c2:
                    58:ab:2e:f6:0e:80:0a:da:cb:a8:fa:b9:8a:ae:d2:
                    4c:07:83:92:62:a7:10:bd:13:0c:84:0b:a6:98:dc:
                    2e:af:a4:fb:8f:7d:08:c2:11:c4:6e:a6:af:ca:af:
                    7c:ca:64:ff:0a:d5:73:bc:39:30:d2:2e:18:23:76:
                    f3:4c:f1:91:bc:c4:94:f5:b0:c7:d0:be:e8:9f:e6:
                    29:91:5b:88:d8:31:08:d4:e2:75:1c:99:d8:31:d2:
                    c4:a4:a8:38:cc:b1:35:57:63:c5:8f:a0:40:32:78:
                    47:fd:86:8f:16:83:b2:58:2c:d7:61:25:34:2b:d7:
                    e7:9f:ab:70:0b:65:bb:cc:2e:90:12:a8:95:f5:0c:
                    fb:60:87:c3:1a:95:c2:a7:d3:4c:4d:fa:99:58:f8:
                    19:61:db:ec:23:33:20:0f:2d:14:37:85:7e:52:6b:
                    83:77:fb:e4:49:8d:ba:c3:4f:a0:f3:46:42:6a:30:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:95:F4:AD:D0:2B:DE:D0:21:65:43:11:B7:09:2D:D0:13:B0:42:A5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/B195F4ADD02BDED021654311B7092DD013B042A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22
                IPv6:
                  2804:3d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266534

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:65:0e:4b:05:88:81:bb:71:93:5c:ba:2e:ec:73:e5:aa:
         90:d9:b3:12:ee:e3:40:ec:c4:11:12:ab:1d:66:83:ce:98:6c:
         78:37:d8:52:d7:d8:59:ba:4a:1c:0f:9a:08:e6:37:50:d8:42:
         67:74:23:c3:44:7c:0d:05:76:59:75:61:97:63:a2:9e:13:45:
         91:d4:03:d5:76:36:4a:47:e3:63:2c:ea:d1:b7:c3:ca:e0:e6:
         2c:ef:40:8d:43:de:56:ec:1d:03:9a:d1:be:df:9f:d8:48:5d:
         d6:06:dc:15:bd:67:51:51:8a:df:00:1a:60:23:4a:b8:d5:de:
         6d:c0:e5:68:23:4c:b4:74:c3:87:f7:74:27:fc:2c:a5:21:95:
         c0:0d:af:2c:f2:3e:02:2b:4a:d7:c2:d2:0f:52:6c:1a:6f:4a:
         e7:75:b3:b3:3b:a3:17:f9:3e:6c:58:35:5c:45:84:79:fc:88:
         eb:fb:62:2c:c6:d3:33:1e:17:29:9a:52:24:8a:f1:a2:d4:4f:
         80:08:ec:00:cb:d7:2d:95:6d:f2:33:7a:b3:08:72:a9:8c:28:
         57:2a:14:d6:82:c4:de:20:db:23:94:63:97:32:db:94:f5:de:
         70:3b:b5:03:72:de:f8:7c:01:1e:4c:4b:8e:24:30:8f:e3:17:
         e2:88:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----